[Package Request]: Cloudflare Warp (warp-cli)

[jokokucing]

Existing package request?

• I have searched open package request reports for this package

Homepage of package

https://developers.cloudflare.com/warp-client/get-started/linux/

Please state why you believe this package should be included

This package is the only reason I haven't switched to AerynOS outside of a VM, I don't have the technical skills to create this package.

References:
Official Binaries : https://pkg.cloudflareclient.com/
AUR Recipe : https://aur.archlinux.org/packages/cloudflare-warp-bin

Licence of package?

No response

Link to source archive file

https://pkg.cloudflareclient.com/pool/noble/main/c/cloudflare-warp/cloudflare-warp_2025.9.558.0_amd64.deb

[CookieSource]

Hi John,

Due to restrictions of the Cloudflare license we are not allowed to package this in our repository. We are looking at a solution for cases like this in the future.

[kojq]

I will attempt to package wgcf, which would allow you to use Wireguard. If you are looking to use MASQUE, Cloudflare open sourced some components to allow people to build their own applications. There is also a project called usque which contains research prior to Cloudflare open sourcing more of the tooling that could be leveraged, as I recall.

If this package does make it into recipes, here are some instructions of usage to make it easier for anyone looking at this issue:

yes | wgcf register # or don't pipe yes if you want to read first that the project isn't affiliated with CF and CF's ToS
wgcf generate
sudo mkdir -p /etc/wireguard/
sudo cp wgcf-profile.conf /etc/wireguard/wgcf-profile.conf
# optional to change the DNS; here I changed to 1.1.1.2 as an example
sudo sed -i '/^DNS/ s/.\{1\}$/2/' /etc/wireguard/wgcf-profile.conf
# optional to clean out files if you do not intend to reference them
rm wgcf-account.toml wgcf-profile.conf
# to immediately get it up and running
systemctl enable --now wg-quick@wgcf-profile

[jokokucing]

unfortunately I need to use Cloudflare Zero Trust for work, so I actually need the binary from Cloudflare

[kojq]

You should be able to set the DNS / search domains for Wireguard, which should allow CF Zero Trust to work fine, though I have not tested on Linux.