Safenix currently supports Linux servers with x86_64 or ARM64 architecture. Windows Server, macOS and FreeBSD are planned for Phase 2 and are not available today.
Supported platforms
- Operating system: Linux only in Phase 1.
- Architectures: x86_64 and ARM64.
- Windows Server, macOS and FreeBSD: planned for Phase 2, not currently available.
Runtime requirements
The Safenix agent is a statically compiled Go binary with no runtime dependencies. The agent therefore does not require separate Go components or runtime packages to be installed on the server.
The installer detects the distribution and architecture by reading uname and /etc/os-release.
Binary verification
The Safenix binary is signed with the Safenix release GPG key. The installer verifies this signature before executing the binary.
This verification is part of the installation process and prevents the installer from executing a binary unless its release signature has been verified.
Service compatibility
On systems with systemd, the installer registers the agent as the following service:
safenix-agent.serviceOn systems without systemd, the manual path remains available. This page does not provide the manual installation or service-management procedure.
Local encryption key
The encryption key is generated locally in:
/etc/safenix/The key is generated on the customer’s server rather than being supplied by the Safenix service.
Compatibility summary
Safenix is available today when all of the following apply:
- The server runs Linux.
- The server uses x86_64 or ARM64 architecture.
- The installation environment can use the installer’s distribution and architecture detection.
If the server does not use systemd, Safenix still has a manual path, but its setup is covered separately.