Get SPIRE

How to install SPIRE


Download SPIRE Source and Linux Binaries

The table below lists the available releases for SPIRE. The following is available for each release:

  • A tarball for Linux x86_64 operating systems containing:
    • The spire-agent and spire-server binaries
    • Configuration files for the SPIRE Agent and Server
  • A .txt file containing the SHA-256 checksum for the binary tarball
  • The SPIRE source code as a zip file
  • The SPIRE source code as a tarball

Starting with SPIRE v0.10.0, a spire-extras tarball is available that contains the following binaries for Linux x86_64 operating systems:

SPIRE Releases

Version Click to copy link to clipboard Click to trigger download
v1.15.2 LATEST
v1.15.1
v1.14.7
v1.15.0
v1.14.6
v1.13.6
v1.14.5
v1.13.5
v1.14.4
v1.14.3
v1.13.4
v1.14.2
v1.14.1
v1.14.0
v1.13.3
v1.13.2
v1.12.6
v1.13.1
v1.12.5
v1.13.0
v1.12.4
v1.11.3
v1.12.3
v1.12.2
v1.12.1
v1.12.0
v1.11.2
v1.11.1
v1.11.0
v1.10.4

Container Images

Official SPIRE container images are published to the GitHub Container Registry with each release:

Images are tagged with the release version number, without the leading v. For example, to pull the SPIRE Server and SPIRE Agent images for the latest release (v1.15.2):

$ docker pull ghcr.io/spiffe/spire-server:1.15.2
$ docker pull ghcr.io/spiffe/spire-agent:1.15.2

Helm Charts

For Kubernetes, the SPIRE stack is packaged as Helm charts by the helm-charts-hardened project and published to the Helm repository at https://spiffe.github.io/helm-charts-hardened/ (also browsable on Artifact Hub). This is the easiest and supported way to deploy a complete SPIRE stack in Kubernetes:

$ helm repo add spiffe https://spiffe.github.io/helm-charts-hardened/
$ helm repo update

See About SPIRE Helm Charts Hardened for installation and configuration instructions.

Build from Source

To build SPIRE from source on Linux, you’ll need:

  • git - To clone the source from GitHub. Alternatively, you could use curl or wget.
  • make - To run the Makefile
  • gcc - To build the binaries

The build script installs the required toolchain as needed, except for gcc. For example, the build script installs a private version of go that has been verified to successfully build SPIRE.

To build SPIRE on macOS, see Building SPIRE on macOS/Darwin.

Fetching

First, fetch the SPIRE repository:

$ git clone https://github.com/spiffe/spire && cd spire
The SPIRE codebase uses Go modules, which means that the SPIRE repository does not need to be in your GOPATH.

Building

To build the binaries from source:

$ make build

The built binaries are placed in bin.

Getting Help

If you run make help, you’ll see a complete list of available make commands, along with descriptions of what those commands do.