cmnSense APT repository

Packages of the cmnSense firewall distribution for Debian 13 (trixie), amd64.

Install on a fresh Debian 13

Install the keyring package, which adds the repository key and the APT source, then the cmnsense metapackage. cmnSense takes over the network configuration: it removes cloud-init, netplan, systemd-resolved and other network managers and imports the current addresses, routes and name servers.

curl -fsSLO https://apt.cmnsense.org/cmnsense-archive-keyring.deb
sudo apt install ./cmnsense-archive-keyring.deb
sudo apt update
sudo apt install cmnsense

Add cmnsense-vpn for IPsec. The initial password of the admin user is in /var/lib/cmnsense/initial-admin-password.

Manual setup

Without the keyring package, fetch the key and create /etc/apt/sources.list.d/cmnsense.sources:

sudo curl -fsSLo /usr/share/keyrings/cmnsense-archive-keyring.pgp \
    https://apt.cmnsense.org/cmnsense-archive-keyring.pgp

Types: deb
URIs: https://apt.cmnsense.org
Suites: trixie
Components: main
Signed-By: /usr/share/keyrings/cmnsense-archive-keyring.pgp

Signing key

The repository metadata is signed with an Ed25519 subkey of the cmnSense repository key. Compare the fingerprint before trusting a downloaded key, e.g. with gpg --show-keys cmnsense-archive-keyring.pgp.

Key: cmnSense APT repository <apt@cmnsense.org>
Primary key fingerprint: 4E9D 50F1 21DE 93A7 F3B4 F2A1 B4D0 7D35 371C 6320
Signing subkey fingerprint: FC40 68FA CAFE 7D4D F840 5E2A A15A C615 2E6D 877F

Browse

dists/ · pool/ · cmnsense-archive-keyring.pgp