Install from binary

Cerbos binaries are available for multiple operating systems and architectures. See the releases page for all available downloads.

OS Arch Bundle

Linux

x86-64

cerbos_0.34.0_Linux_x86_64.tar.gz

Linux

arm64

cerbos_0.34.0_Linux_arm64.tar.gz

MacOS

universal

cerbos_0.34.0_Darwin_all.tar.gz

MacOS

x86-64

cerbos_0.34.0_Darwin_x86_64.tar.gz

MacOS

arm64

cerbos_0.34.0_Darwin_arm64.tar.gz

You can download the binaries by running the following command. Substitute <BUNDLE> with the appropriate value from the above table.

curl -L -o cerbos.tar.gz "https://github.com/cerbos/cerbos/releases/download/v0.34.0/<BUNDLE>"
tar xvf cerbos.tar.gz
chmod +x cerbos

Linux packages

Cerbos DEB and RPM packages can be installed on any Linux distribution that supports one of those package formats. You can download the appropriate package for your system from the releases page.

Cerbos packages are currently only designed to work with systems where systemd is the init system. If you use a different init system, consider installing cerbos from the tarballs instead.

The packages install the cerbos and cerbosctl binaries to /usr/local/bin and create a systemd service to automatically start the Cerbos server. The default configuration is setup to look for policies in /var/cerbos/policies but you can change this by editing /etc/cerbos/yaml and reloading the service with sudo systemctl restart cerbos.

# Show status of the service
sudo systemctl status cerbos

# Restart the service
sudo systemctl restart cerbos

# View logs
sudo journalctl -xeu cerbos.service

Homebrew

You can install Cerbos binaries using Homebrew as well.

brew tap cerbos/tap
brew install cerbos

npm

You can install Cerbos binaries from the npm registry. This removes a separate setup step for JavaScript projects and allows you to lock Cerbos to a specific version to ensure a consistent development environment.

cerbos and cerbosctl are available as separate packages.

npm install --save-dev cerbos cerbosctl

Note that the npm packages rely on platform-specific optional dependencies, so make sure you don’t omit these when installing dependencies (for example, don’t pass the --no-optional flag to npm).