Download

Get SiHA

The shipped artifact is a single immutable A/B SecureBoot appliance image (qcow2) — signed, self-upgrading, no OS to install. Boot it on your hypervisor or cloud and adopt it with sihactl.

Checking for the latest release…

The operator CLI

There is no shell on the appliance — no ssh, no console login. sihactl is how you adopt a freshly booted node and then configure it, entirely over mTLS. Grab the binary for the machine you drive it from:

Checking for CLI builds…

Then make it executable and put it on your PATH:

chmod +x sihactl-linux-amd64
sudo mv sihactl-linux-amd64 /usr/local/bin/sihactl
sihactl version

Verify it

The image is SecureBoot-signed; still, check the downloads against their checksums:

sha256sum -c siha-*.qcow2.sha256           # the image
sha256sum --ignore-missing -c SHA256SUMS   # the CLI binaries

Then what

Boot the qcow2 (UEFI, SecureBoot on), then adopt + configure it entirely over mTLS with the CLI. Start with Getting started and the sihactl reference.