Ubuntu · Debian · Desktop + Server

Linux Setup Guide

Recommended client: NekoRay (GUI) / Hiddify CLI

What You Need

Download the Client

1
Install the prerequisites.
- Open a terminal and run: sudo apt update && sudo apt install -y curl unzip ca-certificates
- Wait for the packages to finish installing
2
Download NekoRay from the releases page.
- NekoRay ships as an AppImage — download the latest .AppImage file
- Save it to ~/Applications or ~/Desktop
For headless servers, skip NekoRay and use the Hiddify CLI installation instead (see alternative link).
3
Make it executable and run once.
- cd into the folder where you saved the AppImage
- chmod +x NekoRay-*.AppImage
- Run it: ./NekoRay-*.AppImage
On Wayland, you may need to launch with QT_QPA_PLATFORM=xcb ./NekoRay-*.AppImage

Import Your Subscription Link

1
Copy your subscription link to the clipboard.
Open your STEA dashboard and copy the entire subscription URL.
2
Add as a subscription in NekoRay.
- Open NekoRay → click the "Groups" panel
- Right-click → "New Subscription"
- Profile Name: STEA VPN
- URL: paste your link
3
Update the subscription.
- Right-click the STEA VPN group → "Update subscription"
- NekoRay fetches all 80+ servers and populates them in the group
- Close the dialog when the status says OK

Connect

1
Select a server and set it as the active profile.
Double-click any server inside the STEA VPN group — it will become highlighted as your current selection.
2
Start the VPN with Tun mode enabled.
- Click the big rocket icon at the top → "Start"
- For the cleanest setup, go to Preferences → Core Settings and enable "Tun mode"
- Tun mode may ask for your sudo password once
If you only want a browser proxy (not system-wide), keep Tun off and use the SOCKS5 port in your browser settings.

Verify It Works

1
Test the connection with curl.
Run curl https://api.ipify.org in a new terminal. It should return the public IP of the STEA server you selected.
2
Run a quick speed test.
Run curl -s https://speed.cloudflare.com/__down?bytes=100000000 > /dev/null, or install speedtest-cli for a proper benchmark.

PLACEHOLDERS

NekoRay Main Window

Grouped servers + quick start toggle

New Subscription

Paste your subscription link here

Routing Preferences

Enable Tun for system-wide protection

NekoRay fails to start with a Qt error.
Install qtbase5-dev or launch with QT_QPA_PLATFORM=xcb (Wayland fix). On headless systems, use Hiddify CLI instead.
curl still shows my real IP after connecting.
You forgot to enable Tun mode, or your app is using its own DNS. Re-open the app after enabling Tun. If the issue persists, reboot once after the first connection.
Subscription update fails with "certificate" errors.
Your system CA certificates are outdated. Run: sudo update-ca-certificates --fresh, then close NekoRay, open it again and retry the update.

We respond within 24 hours — usually much faster.

WeChat

ixaiah-iBoY

Approved users can always download the latest client links from their dashboard.