Skip to content

Quick start

You need a Mac with Apple silicon, an AWS account and a Tailscale tailnet.

Terminal window
curl -fsSL https://hermeticfleet.dev/install.sh | bash

The script downloads the latest release, checks it against the checksum GitHub publishes, copies Hermetic.app into /Applications and puts the hermetic command on your PATH. It never asks for your password. Read the script before you run it, or install by hand.

Check that the CLI is on your PATH:

Terminal window
hermetic --version

While the repository is private, pass a GitHub token so the script can see the release:

Terminal window
curl -fsSL https://hermeticfleet.dev/install.sh | GITHUB_TOKEN=$(gh auth token) bash

Before you start, have these ready:

  • An AWS profile in ~/.aws/config for the account you want to use.
  • A Tailscale OAuth client, with HTTPS certificates turned on for your tailnet.

Then open the app and follow the setup wizard, or run hermetic init in a terminal. When it finishes, create your first agent from the dashboard or with:

Terminal window
hermetic agent create atlas

Your first fleet has the exact OAuth scopes and every step in detail.