Installation Trust

DSO manages your secrets. Verify authenticity before installing. We provide multiple paths based on your security requirements.

Recommended

Recommended

Verified install with checksum verification

Download the release
Download checksums and signatures
Verify checksum
Extract and install
Verify installation

Key Point: Verify authenticity before running

Quick Install

For trusted environments (script-based)

Install
Verify

Key Point: Fastest, for trusted environments only

Manual Install

Full control, step by step

Visit releases page
Download your platform
Extract
Install to PATH
Verify

Key Point: Maximum visibility and control

Why Verify?

Supply Chain Security: Verify checksums protect against tampered downloads and compromised mirrors.

Trust, Not Convenience: A secrets-management tool must earn trust through safety. Verification takes 30 seconds and prevents catastrophic failures.

Your Responsibility: You own secret rotation security. Download verification is the first step.

Supported Platforms

Linux (x86_64, arm64)
macOS (Intel, Apple Silicon)
Windows (via WSL2 or native binary)
Docker containers

Getting Started

Step-by-Step Setup

Choose your deployment method. We'll walk you through configuration for Docker Compose, AWS, Azure, HashiCorp Vault, Huawei Cloud, or offline mode.

Docker Compose (Dev)

Development

Get started locally with Docker Compose. No cloud account required.

Setup Steps

1
dso init

Initialize local encrypted vault (~/.dso/vault.enc). Enter passphrase when prompted.

2
dso secret set DB_PASSWORD "prod-password" && dso secret set API_KEY "sk-123456"

Add your first secrets to the local vault

3
dso up -f docker-compose.yml

Start containers. DSO injects secrets at runtime without restarting.

✓ Perfect for local development

✓ No cloud dependencies or authentication required

✓ Secrets stored in encrypted local vault

Start Local, Scale to Cloud

Develop with Docker Compose locally, then promote to Agent Mode with your chosen provider (AWS, Azure, Vault, or Local). Same CLI workflow. Same guarantees. Different scale.