Packages list

Direct download links for the Wazuh 5.0.0 packages. Use them for offline or manual installations. The installation guides install the same packages from the Wazuh repository. Release candidate files carry the stage in their names, for example wazuh-agent_5.0.0-rc2_amd64.deb, but the packages inside are version 5.0.0-1, so dpkg -l and rpm -q show 5.0.0-1. Pick the table for the component, then the row for your operating system and CPU architecture. To print the architecture, run uname -m, or dpkg --print-architecture on Debian and Ubuntu, which prints the amd64 or arm64 of the DEB rows.

Each package has a SHA512 checksum file. To verify a download, save the .sha512 file in the directory of the package and run sha512sum -c <PACKAGE>.sha512 (macOS: shasum -a 512 -c <PACKAGE>.sha512). The output must be <PACKAGE>: OK. The RPM packages are signed with the Wazuh GPG key. To check one, import the key with rpm --import https://packages-staging.xdrsiem.wazuh.info/key/GPG-KEY-WAZUH, then run rpm -K <PACKAGE>. After you import the key, the output must be <PACKAGE>: digests signatures OK. To check a DEB package, follow step 2 of Preparing the packages in the offline installation guide, with this key instead of wazuh-offline/GPG-KEY-WAZUH. The Windows and macOS packages are code-signed by Wazuh, and the operating system checks the signature when you install them.