Installation Trust
DSO manages your secrets. Verify authenticity before installing. We provide multiple paths based on your security requirements.
Recommended
Verified install with checksum verification
Key Point: Verify authenticity before running
Quick Install
For trusted environments (script-based)
Key Point: Fastest, for trusted environments only
Manual Install
Full control, step by step
Key Point: Maximum visibility and control
Why Verify?
Supply Chain Security: Verify checksums protect against tampered downloads and compromised mirrors.
Trust, Not Convenience: A secrets-management tool must earn trust through safety. Verification takes 30 seconds and prevents catastrophic failures.
Your Responsibility: You own secret rotation security. Download verification is the first step.
Supported Platforms
Getting Started
Step-by-Step Setup
Choose your deployment method. We'll walk you through configuration for Docker Compose, AWS, Azure, HashiCorp Vault, Huawei Cloud, or offline mode.
Docker Compose (Dev)
DevelopmentGet started locally with Docker Compose. No cloud account required.
Setup Steps
Initialize local encrypted vault (~/.dso/vault.enc). Enter passphrase when prompted.
Add your first secrets to the local vault
Start containers. DSO injects secrets at runtime without restarting.
✓ Perfect for local development
✓ No cloud dependencies or authentication required
✓ Secrets stored in encrypted local vault
Start Local, Scale to Cloud
Develop with Docker Compose locally, then promote to Agent Mode with your chosen provider (AWS, Azure, Vault, or Local). Same CLI workflow. Same guarantees. Different scale.
After install
What happens next?
After installation, understand operations, recovery, and configuration.
Getting Started
Quick start guide to deploy your first rotation.
Learn →Operations Guide
Monitor rotations, configure notifications, and manage state.
Learn →Recovery Procedures
Handle failures, recover from crashes, and restore state.
Learn →CLI Reference
Complete reference for all dso commands and options.
Learn →