GetPageSpeed Linux Package Repository: RPM and APT
NGINX with 100+ dynamic modules, NGINX-MOD, Varnish, drop-in performance libraries and security tools, built for RHEL-family, Amazon Linux, Fedora, SLES, Debian and Ubuntu, and kept patched as new CVEs land. Baseline packages install without an account.
Quick start Plans and pricingSecurity fixes that ship in days, not release cycles
Attackers now move faster than vendor release cycles: AI-assisted vulnerability research and automated exploit tooling turn a disclosure into mass scanning within days. A repository is only as good as how quickly its fixes reach your servers.
Patched packages, fast
NGINX security releases land with the 100+ modules rebuilt against them, for every supported platform and both architectures, so dnf upgrade or apt upgrade is the whole fix.
CVE advisories for your servers
Subscribers get an email when one of their servers runs an NGINX version with a known CVE, with the exact update command for that server's distribution. No feed to watch.
Fixes after end-of-life
Everpatch keeps backporting security fixes to PHP and other software that upstream and distributions no longer patch, including CentOS 7.
Free checks: PHP2Shell checker · NGINX config and CVE check · TLS test
Quick start
Install the release package once; it adds the repository, its signing key and the default channels. Then install packages with your usual package manager.
RPM: RHEL, AlmaLinux, Rocky, Amazon Linux, Fedora
sudo dnf install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf install nginx nginx-module-brotli nginx-module-securityOn CentOS 7 use yum instead of dnf, after fixing its EOL repositories.
APT: Debian and Ubuntu
curl -fsSLO https://extras.getpagespeed.com/release-latest.deb
sudo apt install ./release-latest.deb
sudo apt update
sudo apt install nginx-module-brotli nginx-module-modsecurityMore on the APT side: NGINX modules APT repository for Ubuntu and Debian.
What installs freely, and what needs a plan
The repository is open to install from. Subscriptions license the servers that use it in production and unlock the premium channels.
| Packages | Access | Plan |
|---|---|---|
Repository setup, NGINX stable and mainline, standard nginx-module-*, Varnish, libraries and tools |
Free to install Modules with license checks add a small notice to HTML pages after 30 days on a server without a subscription. | Plus, $10/month per server, removes the notice |
| Pro modules and NGINX-MOD | Subscription Required from the first install. | Pro, $20/month per server |
Internal mirroring (reposync), EDGE |
Subscription Up to 10 servers owned by your organization. | Ultra, $50/month |
| Larger fleets and client servers you administer | Subscription Per-server seats with self-service IP management. | Fleet, from $4/server/month |
| Everpatch security-patched PHP for CentOS 7 | Free to install for personal, development and evaluation use; commercial production use requires a plan. | Ultra for your own servers, Fleet for servers that host client websites |
A subscription covers a server by its public IP or by a license token. Monthly and annual billing; see pricing.
Supported platforms
RPM
RHEL 7-10, CentOS 7 (with extended support), AlmaLinux 8-10, Rocky Linux 8-10, Oracle Linux 8-10, Amazon Linux 2 and 2023, Fedora (latest releases), and SUSE Linux Enterprise Server (SLES) 15 and 16.
Architectures: x86_64 and aarch64.
APT
Ubuntu 20.04 (focal), Ubuntu 22.04 (jammy), Ubuntu 24.04 (noble), Ubuntu 26.04 (resolute), Debian 12 (bookworm), and Debian 13 (trixie).
Architectures: amd64 and arm64.
Repository channels
The default channel carries NGINX stable and everything that builds against it. Optional channels hold alternative version lines; enable one when you need it.
| Channel | Contents | How to enable |
|---|---|---|
| Stable (default) | Baseline software, NGINX stable, modules, Varnish, security tools and libraries. |
RPM
Enabled by default (
getpagespeed-extras)
APT
Enabled by default
|
| Noarch | Architecture-independent tools such as clearmage2 and n98-magerun2. |
RPM
Enabled by default (
getpagespeed-extras-noarch)
APT
Not available
|
| NGINX-MOD | NGINX-MOD and the packages required by this patched, high-performance NGINX build. Requires Pro or higher. |
RPM
APT
|
| NGINX mainline | NGINX mainline and matching dynamic modules. |
RPM
APT
|
| Varnish 6.0 LTS | Varnish 6.0 LTS and matching VMOD packages. |
RPM
APT
Not available
|
| Plesk | NGINX dynamic modules built for Plesk sw-nginx. x86_64 only. |
RPM
APT
Not available
|
On EL7, use yum-config-manager --enable from yum-utils. NGINX-MOD DEB packages ship for Ubuntu 22.04 (jammy), Ubuntu 24.04 (noble), Ubuntu 26.04 (resolute), and Debian 12 (bookworm).
Browse the package indexes
RPM (one package index per distribution family)
Module documentation: nginx-extras.getpagespeed.com (RPM) and apt-nginx-extras.getpagespeed.com (APT).
Beyond NGINX
Varnish 6.0 LTS
Varnish and a large set of VMODs (varnish-modules, vmod-geoip2, vmod-querystring, vmod-re2 and more) in the optional varnish60 RPM channel.
Server tools
Current Monit releases, Lua and LuaRocks packages, Magento CLI tools (n98-magerun2, clearmage2) and other utilities a web server needs.
Frequently asked questions
Not to get started. Repository setup and baseline packages install on any server without an account: NGINX stable and mainline, the standard nginx-module-* catalog, Varnish and the other packages listed here. Modules with license checks keep serving pages but add a small GetPageSpeed notice to HTML pages after 30 days on a server without a subscription; an active subscription (from $10/month) covering the server removes it.
Pro modules and NGINX-MOD require the Pro plan or higher from the start.
As soon as a fix can be built and tested: NGINX security releases ship with every module rebuilt against them, and end-of-life software gets backported patches through Everpatch. For PHP2Shell, disclosed October 21, 2026, patched CentOS 7 PHP builds were published the next day. Subscribers also receive an email when one of their servers runs an NGINX version with a known CVE.
Yes. Plans count servers, not package formats: the same subscription covers a server whether it runs RHEL, Amazon Linux, Debian or Ubuntu.
NGINX-MOD lives in its own channel, disabled by default. On RPM systems run sudo dnf config-manager --enable getpagespeed-extras-nginx-mod, then sudo dnf install nginx (the channel's nginx is the NGINX-MOD build; dnf config-manager comes with dnf-plugins-core). On Ubuntu 22.04 (jammy), Ubuntu 24.04 (noble), Ubuntu 26.04 (resolute), and Debian 12 (bookworm) run sudo getpagespeed-extras-channel nginx-mod && sudo apt update, then sudo apt install nginx-mod. NGINX-MOD requires the Pro plan or higher.
RPM: RHEL 7-10, CentOS 7 (with extended support), AlmaLinux 8-10, Rocky Linux 8-10, Oracle Linux 8-10, Amazon Linux 2 and 2023, Fedora (latest releases), and SUSE Linux Enterprise Server (SLES) 15 and 16, on x86_64 and aarch64.
APT: Ubuntu 20.04 (focal), Ubuntu 22.04 (jammy), Ubuntu 24.04 (noble), Ubuntu 26.04 (resolute), Debian 12 (bookworm), and Debian 13 (trixie), on amd64 and arm64.
Yes. CentOS 7 is end-of-life, so first fix its base repositories. For security-patched PHP on CentOS 7, see Everpatch: free to install for personal, development and evaluation use; commercial production use requires Ultra for your own servers or Fleet for servers that host client websites.
Mirroring with reposync is included in Ultra, for one mirror anchored to a single public IP and up to 10 servers owned by your organization. Setup steps: mirroring the repository. Larger internal fleets and client-owned servers you administer are covered by Fleet.
Contact us with the upstream project URL and what you need it for. NGINX and Varnish modules, performance and security software are the usual candidates.