HashiTalks 2025 Learn about unique use cases, homelab setups, and best practices at scale at our 24-hour virtual knowledge sharing event. Register
Boundary
Boundary Home

Deploy Boundary

To deploy a self-managed Boundary environment you should:

  1. Deploy and configure Boundary controllers and workers
  2. Install end-user clients

This guide outlines the required steps to manually install and configure a single HashiCorp Boundary cluster as defined in the Recommended architecture topic. It assumes you install Boundary on virtual machines (VMs) or bare-metal servers running a Debian or Red Hat-based Linux distribution.

To learn about installing end-user clients, refer to the Install Boundary clients page.

This document includes general guidance as well as specific recommendations for popular cloud infrastructure platforms. These recommendations have also been encoded into official Terraform reference architectures for AWS, Azure, and GCP.

Pre-built Boundary packages are available from the HashiCorp Linux Repository. In addition to installing the Boundary binary, the official package also provides a systemd service unit, and a local boundary user account under which the service runs.

Note

You must complete the following steps for each Boundary controller and worker node that you want to deploy. The binary operates as either a worker or controller, depending on the configuration that you generate for the Boundary binary.

The steps vary by Linux distribution.

Select your distribution of Boundary, and complete the steps to install the binary:

  1. Use the following command to add the HashiCorp GPC key as a trusted package-signing key:

    $ curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg

  2. Add the official HashiCorp Linux repository:

    $ echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list

  3. Update the package index:

    $ sudo apt update

  4. Install Boundary Enterprise:

    $ sudo apt install boundary-enterprise

You should install the binary on the controller and worker instances you configure to run in your Boundary environments.

Next, you should:

Edit this page on GitHub