This page contains instructions for using the OpenVPN project's own software repositories. For a list of unofficial repositories, please refer to the [Unofficial OpenVPN software repositories](wiki:UnofficialOpenvpnSoftwareRepos) page.
+
This page contains instructions for using OpenVPN project's own software repositories. For a list of unofficial repositories please refer to the [Unofficial OpenVPN software repositories](/Pages/UnofficialOpenvpnSoftwareRepos) page.
-
For OpenVPN 3 Linux, see the dedicated [OpenVPN 3 Linux](wiki:OpenVPN3Linux) page.
+
For OpenVPN 3 Linux, see the dedicated [OpenVPN 3 Linux](/Pages/OpenVPN3Linux) page.
-
The latest OpenVPN releases are available in the OpenVPN project's apt repositories. This allows you to use a more up-to-date version of OpenVPN than what is typically available in your distribution's repositories. Please note that all commands listed below have to be run as root, e.g. using `sudo` or `su`.
+
Latest OpenVPN releases are available in the OpenVPN project's apt repositories. This allow you to use more up-to-date version of OpenVPN than what is typically available in your distribution's repositories. Please note that all commands listed below have to be run as root, e.g. using *sudo* or *su*.
-
Pre-built Linux binaries are only available for Debian and Ubuntu for the following reasons:
+
Pre-built Linux binaries are only available for Debian and Ubuntu. This is so for two reasons:
-
- Official Debian and Ubuntu repositories tend to have fairly old OpenVPN versions available.
-
- Fedora and Fedora EPEL provide fairly up-to-date OpenVPN releases for supported Fedora and Red Hat Enterprise Linux (including clones such as CentOS, Scientific Linux) releases.
+
* Official Debian and Ubuntu repositories tend to have fairly old OpenVPN versions available
+
* The Fedora and Fedora EPEL provides fairly up-to-date OpenVPN releases for supported Fedora and Red Hat Enterprise Linux (including clones such as CentOS, Scientific Linux) releases.
-
All packages are available in `amd64/x86_64` flavors. Additionally, `arm64/aarch64` flavors might be available for newer distributions and `i386` flavor might be available for older distributions. Even if a package is built on a particular OS, it does not mean it won't work on older and/or newer versions of the same distro, or even on a different operating system. If you encounter any issues with the package, please file a new [bug report](wiki:TesterDocumentation#Reportingbugs).
+
All packages are available in *amd64/x86_64* flavours. Additionally, *arm64/aarch64* flavours might be available for newer distributions and *i386* flavour might be available for older distributions. Even if a package is built on a particular OS, it does not mean it won't work on older and/or newer versions of the same distro, or even on a different operating system. If you encountered any issues with the package, please file a new [bug report](/TesterDocumentation#Reportingbugs).
-
## CentOS / Fedora / Red Hat Enterprise Linux
+
# CentOS / Fedora / Red Hat Enterprise Linux
-
There are two alternatives here for OpenVPN packages. Fedora carries a reasonably up-to-date release in the main repositories. For CentOS and Red Hat Enterprise Linux (RHEL), the [Fedora EPEL](https://fedoraproject.org/wiki/EPEL) repositories contain the last OpenVPN releases when the distribution was released. All of these packages are considered to be stable for enterprise usage and will essentially just get bug and security fixes during the lifetime of the distribution. OpenVPN major releases will only be added to the next Fedora release.
+
There are two alternatives here for OpenVPN packages. Fedora carries are reasonably up-to-date release in the main repositories. For CentOS and Red Hat Enterprise Linux (RHEL) the [Fedora EPEL](https://fedoraproject.org/wiki/EPEL) repositories which contains the last OpenVPN releases when the distribution was released. All of these packages are considered to be stable for enterprise usage and will essentially just get bug and security fixes during the lifetime of the distribution. OpenVPN major releases will only be added to the next Fedora release.
-
### Using Fedora EPEL (CentOS / RHEL)
+
To get newer releases than the main Fedora and EPEL repositories provides, consider using the OpenVPN packages from the Fedora Copr repository. The Copr repository will always have the latest OpenVPN releases available.
-
Ensure you have the Fedora EPEL repository enabled. CentOS users may do this easily by installing the `epel-release` package via `yum install`. Red Hat Enterprise Linux users need to install this package manually, as described in the [Fedora EPEL wiki page](https://fedoraproject.org/wiki/EPEL). Then just run:
+
## Using Fedora EPEL (CentOS / RHEL)
-
```bash
-
yum install openvpn
-
```
+
Ensure you have the Fedora EPEL repository enabled. CentOS users may do this easily by installing the `epel-release` package via `yum install`. Red Hat Enterprise Linux users need to install this package manually, as described in the [Fedora EPEL wiki page](https://fedoraproject.org/wiki/EPEL). Then just run `yum install openvpn`.
-
### Using Fedora Copr
+
## Using Fedora Copr
CentOS/RHEL users: Ensure you have the `yum-plugin-copr` package installed (can be installed via `yum`).
Then run these commands:
-
-
```bash
-
yum copr enable dsommers/openvpn-release-2.6 # for OpenVPN 2.6 releases
-
yum copr enable dsommers/openvpn-release # for OpenVPN 2.5 releases
-
...
-
yum install openvpn
+
```
+
[root@host:~]# yum copr enable dsommers/openvpn-release-2.6 # for OpenVPN 2.6 releases
+
[root@host:~]# yum copr enable dsommers/openvpn-release # for OpenVPN 2.5 releases
+
...
+
[root@host:~]# yum install openvpn
```
-
The [dsommers/openvpn-release-2.6 Copr repository](https://copr.fedorainfracloud.org/coprs/dsommers/openvpn-release-2.6/) currently contains the latest stable OpenVPN release.
-
-
The [dsommers/openvpn-release Copr repository](https://copr.fedorainfracloud.org/coprs/dsommers/openvpn-release/) contains the latest 2.5.x OpenVPN release. For new installations, it is recommended to use the 2.6.x release, 2.5.x releases are only provided for a short period to give users some time to migrate to 2.6. For details see SupportedVersions.
+
The [dsommers/openvpn-release-2.6 Copr repository](https://copr.fedorainfracloud.org/coprs/dsommers/openvpn-release-2.6/) currently contains the *latest stable OpenVPN* release.
-
To test OpenVPN beta releases, the [dsommers/openvpn-beta Copr repository](https://copr.fedorainfracloud.org/coprs/dsommers/openvpn-beta/) contains builds for all recent Fedora, Red hat Enterprise Linux, and CentOS/CentOS Stream releases.
+
To test *OpenVPN beta releases*, the [dsommers/openvpn-beta Copr repository](https://copr.fedorainfracloud.org/coprs/dsommers/openvpn-beta/) contains builds for all recent Fedora, Red hat Enterprise Linux and CentOS/CentOS Stream releases.
-
There are also nightly builds of the master branch available in the [dsommers/openvpn-git Copr repository](https://copr.fedorainfracloud.org/coprs/dsommers/openvpn-git/). Testing is welcome but not intended for production use!
+
There are also *nightly builds of the master branch* available in [dsommers/openvpn-git Copr repository](https://copr.fedorainfracloud.org/coprs/dsommers/openvpn-git/). Testing welcome but **not intended for production use**!
If you have OpenVPN already installed, it will be upgraded to the latest available version.
-
#### Data Channel Offload support (DCO)
+
### Data Channel Offload support (DCO)
-
The Data Channel Offload support is available in OpenVPN 2.6 beta releases and newer and in [OpenVPN 3 Linux](OpenVPN3Linux). The needed Linux kernel module is available for Fedora and Red Hat Enterprise Linux 8 and newer. To get the needed `kmod-ovpn-dco` package, the `dsommers/openvpn3` Copr repository needs to be enabled as well.
+
The Data Channel Offload support is available in OpenVPN 2.6 beta releases and newer and in [OpenVPN 3 Linux](/Pages/OpenVPN3Linux). The needed Linux kernel module is available for Fedora and Red Hat Enterprise Linux 8 and newer. To get the needed `kmod-ovpn-dco` package, the `dsommers/openvpn3` Copr repository need to be enabled as well.
-
## Debian / Ubuntu: Using OpenVPN apt repositories
+
# Debian / Ubuntu: Using OpenVPN apt repositories
-
We maintain several OpenVPN (OSS) software repositories. To set up the repositories, you need to change to the root user. Typically this is done using `sudo`:
+
We maintain several OpenVPN (OSS) software repositories. To setup the repositories you need to change to the root user. Typically this is done using *sudo*:
-
```bash
-
sudo -s
+
```
+
$ sudo -s
```
Then import the public GPG key that is used to sign the packages:
-
```bash
-
mkdir -p /etc/apt/keyrings # directory does not exist on older releases
1. `stable`: stable releases only - no alphas, betas, or RCs
-
1. `testing`: latest releases, including alphas/betas/RCs
-
1. `release/2.3`: OpenVPN 2.3 releases
-
1. `release/2.4`: OpenVPN 2.4 releases, including alphas/betas/RCs
-
1. `release/2.5`: OpenVPN 2.5 releases, including alphas/betas/RCs
-
1. `release/2.6`: OpenVPN 2.6 releases, including alphas/betas/RCs
+
Where **\<version\>** can be one of
-
and `<osrelease>` depends on your distribution:
-
* `buster` (Debian 10.x)
-
* `bullseye` (Debian 11.x)
-
* `bookworm` (Debian 12.x)
-
* `focal` (Ubuntu 20.04 LTS)
-
* `jammy` (Ubuntu 22.04 LTS)
-
* `noble` (Ubuntu 24.04 LTS)
-
* `oracular` (Ubuntu 24.10)
+
1. **stable**: stable releases only - no alphas, betas or RCs
+
1. **testing**: latest releases, including alphas/betas/RCs
+
1. **release/2.3**: OpenVPN 2.3 releases
+
1. **release/2.4**: OpenVPN 2.4 releases, including alphas/betas/RCs
+
1. **release/2.5**: OpenVPN 2.5 releases, including alphas/betas/RCs
+
1. **release/2.6**: OpenVPN 2.6 releases, including alphas/betas/RCs
-
This list may be incomplete. Please check the [repository web page](http://build.openvpn.net/debian/openvpn/release/) for the complete list of releases.
+
and **\<osrelease\>** depends your distribution:
+
+
* **buster** (Debian 10.x)
+
* **bullseye** (Debian 11.x)
+
* **bookworm** (Debian 12.x)
+
* **focal** (Ubuntu 20.04 LTS)
+
* **jammy** (Ubuntu 22.04 LTS)
+
* **noble** (Ubuntu 24.04 LTS)
+
* **oracular** (Ubuntu 24.10)
+
+
This list may be incomplete. Please check the [http://build.openvpn.net/debian/openvpn/release/ repository web page] for the complete list of releases.
Examples:
-
```bash
+
```
# Always get the latest package, even Beta versions
Now you're set for installing OpenVPN. Note that packages built for older operating system releases might work just fine on a newer release of the same operating system.
+
Now you're set for installing OpenVPN. Note that packages built for older operating system releases *might* work just fine on newer release of the same operating system.
-
### Installing OpenVPN
+
## Installing OpenVPN
-
On Debian/Ubuntu use:
+
On Debian/Ubuntu use
-
```bash
-
apt-get update && apt-get install openvpn
+
```
+
$ apt-get update && apt-get install openvpn
```
-
To additionally install the DCO kernel driver use:
+
To additionally install the DCO kernel driver use
-
```bash
-
apt-get install openvpn-dco-dkms
```
+
$ apt-get install openvpn-dco-dkms
+
```
+
-
### Notes on expired keys
+
## Notes on expired keys
-
If the apt signing key expires, apt will complain when refreshing the package cache (e.g. `apt-get update`). In that case, just download the key again as described above.
+
If the apt signing key expires, apt will complain when refreshing the package cache (e.g. *apt-get update*). In that case just download the key again as described above.
-
### Debian Snapshot Builds
+
## Debian Snapshot Builds
Debian snapshot development builds are available as well. To use them:
-
```bash
-
mkdir -p /etc/apt/keyrings # directory does not exist on older Debian/Ubuntu releases
To test a specific build with a specific patch, you might need to install a specific snapshot build. You can do this with apt by providing the exact version to install:
+
To test a specific build with a specific patch you might need to install a specific snapshot build. You can do this with apt by providing the exact version to install:
-
```bash
-
apt-get install openvpn=2.7-1719406367
+
```
+
# apt-get install openvpn=2.7-1719406367
```
-
See [https://build.openvpn.net/debian/snapshots/](https://build.openvpn.net/debian/snapshots/) for a current list of valid `osrelease` values. Only `amd64` snapshot builds are available currently.
+
See https://build.openvpn.net/debian/snapshots/ for a current list of valid *osrelease* values. Only *amd64* snapshot builds are available currently.
-
Note that these are intended to provide an easy way to test patches or the latest master, **not for production use**. If you notice any problems, let us know!
+
Note that these are intended to provide an easy way to test patches or latest master, **not for production use**. If you notice any problems, let us know!
