---
title: Install un-seal on Linux | Snap Store
description: Get the latest version of un-seal for Linux - Tool to initialize and
  unseal a Juju-deployed Vault cluster.
url: https://snapcraft.io/un-seal
---

# un-seal

[Pablo De Greiff (pgdg99)](https://snapcraft.io/publisher/pgdg99 "View all snaps from Pablo De Greiff (pgdg99)")

* [Pablo De Greiff (pgdg99)](https://snapcraft.io/publisher/pgdg99 "View all snaps from Pablo De Greiff (pgdg99)")

latest/stable 6.0.4

Install latest/stable of un-seal

---

**Install using the command line**

```
sudo snap install un-seal
```

Don't have snapd? [Get set up for snaps](https://snapcraft.io/docs/installing-snapd).

---

### Package name

* un-seal

---

### License

* GPL-3.0-only

---

### Last updated

* 10 September 2026 - latest/stable
* 10 September 2026 - latest/edge

---

### Websites

* [github.com/Ankow99/un-seal](https://github.com/Ankow99/un-seal "https://github.com/Ankow99/un-seal")

---

### Contact

* [pablo.degreiff@canonical.com](mailto:pablo.degreiff@canonical.com "mailto:pablo.degreiff@canonical.com")

---

### Source code

* [github.com/Ankow99/un-seal](https://github.com/Ankow99/un-seal "https://github.com/Ankow99/un-seal")

---

### Report a bug

* [github.com/Ankow99/un-seal/issues](https://github.com/Ankow99/un-seal/issues "https://github.com/Ankow99/un-seal/issues")

---

##### Report a Snap Store violation

* [Report this Snap](https://snapcraft.io/un-seal#report-snap-modal)

---

* [Description](https://snapcraft.io/un-seal#tab-description)
* [Security](https://snapcraft.io/un-seal#tab-security)

#### Tool to initialize and unseal a Juju-deployed Vault cluster.

Automates the initialization or unsealing of a Juju-deployed Vault cluster.
It natively supports both Juju Machine and Juju Kubernetes deployments
(such as Canonical Sunbeam), managing leader-finding, unsealing all units,
and automatically authorizing the Juju charm.

It securely manages credentials by storing the root token and each
unseal key in separate GPG-encrypted files, enabling hardware-backed
security (YubiKey) and separation of duties.

It features a robust 3-tier loading system:

1. Auto-detects keys in the credentials directory.
2. Falls back to prompting for individual file paths.
3. Provides a final fallback for raw, manual key entry.

This snap bundles 'jq', 'vault', and 'gpg'. It requires the 'juju'
command to be installed on the host system.

How to install:

```
sudo snap install un-seal
```

then, connect the necessary interfaces:

```
sudo snap connect un-seal:dot-local-share-juju
sudo snap connect un-seal:gpg-keys
sudo snap connect un-seal:pcscd #[optional]
```

Source code: <https://github.com/Ankow99/un-seal>

---

## Install un-seal on your Linux distribution

Choose your Linux distribution to get detailed installation instructions. If yours is not shown, get more details on the [installing snapd documentation](https://snapcraft.io/docs/installing-snapd).

[### Arch Linux](https://snapcraft.io/install/un-seal/arch)

[### CentOS](https://snapcraft.io/install/un-seal/centos)

[### Debian](https://snapcraft.io/install/un-seal/debian)

[### elementary OS](https://snapcraft.io/install/un-seal/elementary)

[### Fedora](https://snapcraft.io/install/un-seal/fedora)

[### KDE Neon](https://snapcraft.io/install/un-seal/kde-neon)

[### Kubuntu](https://snapcraft.io/install/un-seal/kubuntu)

[### Manjaro](https://snapcraft.io/install/un-seal/manjaro)

[### Pop!\_OS](https://snapcraft.io/install/un-seal/pop)

[### openSUSE](https://snapcraft.io/install/un-seal/opensuse)

[### Red Hat Enterprise Linux](https://snapcraft.io/install/un-seal/rhel)

[### Ubuntu](https://snapcraft.io/install/un-seal/ubuntu)
