Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Containers

Tuwunel ships as a small, statically linked OCI image that runs unprivileged on any container runtime. Pick a deployment style based on how you already manage services on the host.

  • Docker. Pull prebuilt images from GHCR or Docker Hub, then run standalone or via one of the provided docker-compose stacks (with Caddy, Traefik, or a bring-your-own reverse proxy).

  • Kubernetes. Community-maintained Helm chart for cluster deployments. Tuwunel itself does not scale horizontally, so the chart runs a single replica with persistent storage.

  • Podman with Quadlets. Rootless deployment managed by systemd user units, suited to single-host setups where containers should behave like native services.

Image registries

RegistryImageTags
GitHub Registryghcr.io/matrix-construct/tuwunellatest, preview, main
Docker Hubdocker.io/jevolk/tuwunellatest, preview, main

Three rolling tags trade update frequency for confidence.

TagSourceCadenceUse when
:latestMost recent tagged release~monthlyProduction. Default choice.
:previewSelected higher-confidence updates~weeklyYou want fixes between releases without chasing main.
:mainEvery reviewed merge to the main branch~dailyYou track development and accept unknown-risk changes.

For automated updates we strongly advise tracking :latest.