MinVPN installer

Linux (Ubuntu 24.04 LTS, amd64)

MinVPN for Linux is the sop-overlay package from the signed MinVPN apt repository. It installs the sop-overlay-agent service and the minvpn command, and pulls in wireguard-tools. A fresh installation is not enrolled and stays disconnected until you approve it in your account and run minvpn connect.

1. Add the signing key and check its fingerprint.

   sudo install -d -m 0755 /etc/apt/keyrings
   sudo curl -fsSL -o /etc/apt/keyrings/sop-overlay-archive-keyring.gpg https://minvpn.dk/apt/keyrings/sop-overlay-archive-keyring.gpg
   gpg --show-keys /etc/apt/keyrings/sop-overlay-archive-keyring.gpg

   The fingerprint must be BFD73F2AF995EA7BEAB32ACA0D4C1F0017C5A137. If it is not, stop.

2. Add the repository.

   echo "deb [signed-by=/etc/apt/keyrings/sop-overlay-archive-keyring.gpg] https://minvpn.dk/apt stable main" | sudo tee /etc/apt/sources.list.d/sop-overlay.list

3. Install. apt checks the repository signature and the package checksum.

   sudo apt update
   sudo apt install sop-overlay
   apt-cache policy sop-overlay

   The installed version is 0.3.6-1. sudo minvpn status now shows the node as not enrolled.

4. Enroll the node.

   sudo minvpn enroll --name my-linux-node --no-connect

   Open the link it prints in a browser where you are signed in to your MinVPN account, check the device name and choose the network, then approve. The link is valid for 10 minutes and works once. The node creates its own keys; you never copy a key or token.

5. Connect and check.

   sudo minvpn connect
   sudo minvpn status
   ip -br addr | grep mvpn
   sudo wg show all latest-handshakes
   ping -c 5 PEER_MEMBERSHIP_IP

   Use the other node's membership address from your account (without /32). Only a successful ping or TCP connection proves the tunnel works.

Remove: sudo apt remove sop-overlay disconnects and stops the agent but keeps the node identity, so a reinstall is the same node. sudo apt purge sop-overlay also deletes the node keys and credentials; revoke the node in your account as well.

Other systems: the repository's arm64 index still carries the earlier 0.3.4-6 package, which predates browser enrollment; these instructions do not cover it. Other distributions are not tested.