cmnSense
Download

Download cmnSense 0.2.2

Released 6 November 2026. The installer is the official Debian 13 netinst image with cmnSense and everything it needs on board, so it installs without network access.

amd64 (x86‑64)

BIOS or UEFI, USB stick, virtual CD

927 MiB
cmnsense-0.2.2-amd64.iso

SHA256

5059abbbb88d668d941f2c4d1b9d15c388a0168fcc0d929e106b46011599bf1f

arm64 (AArch64)

UEFI, USB stick, virtual CD

854 MiB
cmnsense-0.2.2-arm64.iso

SHA256

4283094a48f78a2656dd23adf9202f8531ba0fdd1a0bdc59003a47e195ac3d03
SHA256SUMSSHA256SUMS.signSigning keyHow to verifyArchived versions

Check the download

The checksums are signed with the cmnSense repository key, the same key apt uses. Verify the signature, then the image:

shell

curl -fsSLO https://apt.cmnsense.org/cmnsense-archive-keyring.pgp
gpg --show-keys cmnsense-archive-keyring.pgp
gpgv --keyring ./cmnsense-archive-keyring.pgp SHA256SUMS.sign SHA256SUMS
sha256sum --ignore-missing -c SHA256SUMS

gpg --show-keys must print the fingerprint 4E9D 50F1 21DE 93A7 F3B4 F2A1 B4D0 7D35 371C 6320.

What you need

Processor64-bit x86 (amd64) or 64-bit ARM with UEFI (arm64)
Memory2 GB or more
Disk8 GB or more (10 GB on arm64); the installer uses the whole disk
NetworkAt least one interface; two or more to route between networks

What is in 0.2.2

  • The first packaged release: firewall, NAT, routing with FRR, DHCP with Kea, DNS, NTP with chrony, high availability with VRRP, state and configuration sync, IPVS load balancing, WireGuard, IPsec with strongSwan, L2TPv3, VLAN-aware bridges, certificates and ACME, passkeys, the web interface and the IOS-style CLI.
  • The signed APT repository at apt.cmnsense.org.
  • Uplinks by PPPoE (IPv4 and IPv6), DHCP, and DHCPv6 with prefix delegation for the internal networks.
  • Installing on an existing Debian takes over its network configuration, DHCP included, and saves it.
  • The offline installer ISO.

Already running Debian 13?

You don't need the ISO. Add the repository and install the packages; the Debian installation guide explains what happens to the existing network configuration.

shell

curl -fsSLO https://apt.cmnsense.org/cmnsense-archive-keyring.deb
sudo apt install ./cmnsense-archive-keyring.deb
sudo apt update && sudo apt install cmnsense