Installation

OCCLUDE runs as a system-level daemon on Linux and Windows. It requires elevated privileges to intercept and rewrite outbound network traffic.

Linux

Requires kernel 5.10+ with eBPF support. The installer creates a systemd unit and drops the default configuration at /etc/occlude/profile.toml.

curl -sSL occlude.sh/install | sh

After installation, start the daemon:

sudo systemctl enable --now occlude
sudo systemctl status occlude

Windows

Requires Windows 10 or 11. Installs as a Windows service.

winget install occlude

The configuration file is located at %APPDATA%\occlude\profile.toml. The service starts automatically after installation.

From Source

Requires Rust nightly toolchain. Clone the repository and build:

git clone https://github.com/occlude-sh/occlude
cd occlude
cargo build --release

Verifying Releases

All releases are signed with minisign. The public key is available in the repository root. Verify a release before installing:

minisign -Vm occlude-v1.0.0-linux-amd64.tar.gz -p occlude.pub