Install

Supported platforms

• macOS, Apple Silicon and Intel
• Linux, amd64 and arm64
• Windows 11, amd64 (arm64 runs the amd64 build under emulation)

On Linux, the always-on daemon runs as a systemd user service, so it needs a systemd user session (systemctl --user). On macOS it runs as a LaunchAgent. On Windows it runs as a per-user scheduled task named dazio, which starts at logon. Nothing on Windows needs administrator rights.

Windows 10 is not supported: Dazio may run there, but it is not tested.

A Windows Dazio also scans and protects your WSL distros, with nothing to install inside them. See WSL distros.

Homebrew

Recommended, on macOS or Linux:

brew install boostsecurityio/tap/dazio

Upgrade with:

brew upgrade dazio

On macOS, the upgrade restarts a running daemon onto the new binary for you.

On Linux, the login service still points at the old version’s binary, which the upgrade removes. If you have continuous protection on, point it at the new binary after upgrading:

dazio service install

Install script

Without Homebrew, on macOS or Linux:

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/boostsecurityio/dazio/HEAD/install.sh)"

The script installs the latest release into ~/.local/bin/dazio:

• It checks the download’s sha256 against the release’s checksums.txt and installs nothing on a mismatch.
• If cosign is installed, it also verifies the signature on checksums.txt and stops if that fails.
• If ~/.local/bin is not on your PATH, it prints the export PATH=… line to add.
• If you have Homebrew, it asks you to confirm before installing, since Homebrew is the recommended route. If Dazio is already installed with Homebrew, it tells you to run brew upgrade dazio and changes nothing.

Two environment variables change what it installs:

To upgrade, run the same command again. It replaces the binary and restarts a running daemon onto it.

Windows

In PowerShell:

irm https://raw.githubusercontent.com/boostsecurityio/dazio/HEAD/install.ps1 | iex

The script installs the latest release into %LOCALAPPDATA%\Programs\dazio\dazio.exe, for your user only:

• It checks the download’s sha256 against the release’s checksums.txt and installs nothing on a mismatch.
• If cosign is installed, it also verifies the signature on checksums.txt and stops if that fails.
• It adds the install directory to your user PATH, for the terminal you ran it in and every terminal opened afterwards.
• It turns on continuous protection: it registers the dazio scheduled task and starts it.

It takes the same DAZIO_INSTALL_DIR and DAZIO_VERSION environment variables as the install script above.

To upgrade, run the same command again. It replaces the binary and restarts the daemon onto it.

Dazio works from PowerShell, Git Bash and cmd. Its package manager shims are on your user PATH, so they take effect in terminals opened after protection is enabled.

mise

With mise:

mise use -g github:boostsecurityio/dazio

A mise upgrade installs the new version without telling the daemon. If you have continuous protection on, run one of these after upgrading.

On macOS or Windows, restart the daemon onto the new binary:

dazio service restart

On Linux, the login service still points at the old version’s binary, so point it at the new one:

dazio service install

Next

Quick start runs your first scan.