--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -11,8 +11,6 @@
 set(QT_CREATOR_SKIP_PACKAGE_MANAGER_SETUP ON CACHE BOOL "" FORCE)
 set(CMAKE_PROJECT_TOP_LEVEL_INCLUDES
     ${CMAKE_SOURCE_DIR}/cmake/platform_settings.cmake
-    ${CMAKE_SOURCE_DIR}/cmake/recipes_bootstrap.cmake
-    ${CMAKE_SOURCE_DIR}/cmake/conan_provider.cmake
     CACHE STRING "" FORCE)
 
 project(${PROJECT} VERSION ${AMNEZIAVPN_VERSION}
@@ -20,7 +18,6 @@
         HOMEPAGE_URL "https://amnezia.org/"
 )
 
-# trigger conan to kick off `conan install` globally
 find_package(OpenSSL REQUIRED)
 if (PREBUILTS_ONLY)
     return()
--- a/service/server/CMakeLists.txt
+++ b/service/server/CMakeLists.txt
@@ -291,8 +291,9 @@
 target_link_libraries(${PROJECT} PRIVATE Qt6::Core Qt6::Widgets Qt6::Network Qt6::RemoteObjects Qt6::Core5Compat Qt6::DBus Qt6::Concurrent ${LIBS})
 target_compile_definitions(${PROJECT} PRIVATE "MZ_$<UPPER_CASE:${MZ_PLATFORM_NAME}>")
 
-find_package(amnezia-xray-bindings REQUIRED)
-target_link_libraries(${PROJECT} PRIVATE amnezia::xray-bindings)
+set(_XRAY_PREBUILT "${CMAKE_SOURCE_DIR}/client/3rd-prebuilt/3rd-prebuilt/amnezia_xray/linux/x86_64")
+target_include_directories(${PROJECT} PRIVATE "${_XRAY_PREBUILT}")
+target_link_libraries(${PROJECT} PRIVATE "${_XRAY_PREBUILT}/amnezia_xray.a")
 
 find_package(OpenSSL REQUIRED)
 target_link_libraries(${PROJECT} PRIVATE OpenSSL::SSL OpenSSL::Crypto)
@@ -342,6 +343,7 @@
 endif()
 
 # install non-linked dependencies
+set(_LINUX_BIN "${CMAKE_SOURCE_DIR}/client/3rd-prebuilt/deploy-prebuilt/linux/client/bin")
 if(WIN32)
     find_package(awg-windows REQUIRED)
     list(APPEND CONAN_EXECS $<TARGET_FILE:amnezia::awg-windows>)
@@ -351,18 +353,12 @@
 
     list(APPEND CONAN_BINS $<TARGET_FILE:OpenSSL::SSL> $<TARGET_FILE:OpenSSL::Crypto>)
 else()
-    find_package(awg-go REQUIRED)
-    list(APPEND CONAN_EXECS $<TARGET_FILE:amnezia::awg-go>)
+    list(APPEND CONAN_EXECS "${_LINUX_BIN}/wireguard-go")
 endif()
 
-find_package(openvpn REQUIRED)
-list(APPEND CONAN_EXECS $<TARGET_FILE:openvpn::openvpn>)
-
-find_package(tun2socks REQUIRED)
-list(APPEND CONAN_EXECS $<TARGET_FILE:xjasonlyu::tun2socks>)
-
-find_package(v2ray-rules-dat REQUIRED)
-list(APPEND CONAN_BINS ${GEOSITE_DAT_PATH} ${GEOIP_DAT_PATH})
+list(APPEND CONAN_EXECS "${_LINUX_BIN}/openvpn")
+list(APPEND CONAN_EXECS "${_LINUX_BIN}/tun2socks")
+list(APPEND CONAN_BINS "${_LINUX_BIN}/geosite.dat" "${_LINUX_BIN}/geoip.dat")
 
 add_custom_command(TARGET ${PROJECT} POST_BUILD
     COMMAND ${CMAKE_COMMAND} -E copy_if_different
@@ -370,28 +366,6 @@
         "$<TARGET_FILE_DIR:${PROJECT}>"
 )
 
-# prebuilt openvpn carries the rpath of whatever machine baked it; point the
-# build-tree copy at the local conan openssl (install rewrites it to $ORIGIN)
-if(LINUX)
-    file(GENERATE OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/set_openvpn_rpath.cmake
-        CONTENT "file(RPATH_SET FILE \"$<TARGET_FILE_DIR:${PROJECT}>/openvpn\" NEW_RPATH \"$<TARGET_FILE_DIR:OpenSSL::SSL>\")\n"
-    )
-    add_custom_command(TARGET ${PROJECT} POST_BUILD
-        COMMAND ${CMAKE_COMMAND} -P ${CMAKE_CURRENT_BINARY_DIR}/set_openvpn_rpath.cmake
-    )
-elseif(APPLE)
-    file(GENERATE OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/set_openvpn_rpath.cmake CONTENT
-[=[
-set(ovpn "$<TARGET_FILE_DIR:AmneziaVPN-service>/openvpn")
-set(dir "$<TARGET_FILE_DIR:OpenSSL::SSL>")
-execute_process(COMMAND install_name_tool -delete_rpath "${dir}" "${ovpn}" ERROR_QUIET)
-execute_process(COMMAND install_name_tool -add_rpath "${dir}" "${ovpn}")
-]=]
-    )
-    add_custom_command(TARGET ${PROJECT} POST_BUILD
-        COMMAND ${CMAKE_COMMAND} -P ${CMAKE_CURRENT_BINARY_DIR}/set_openvpn_rpath.cmake
-    )
-endif()
 
 if(WIN32)
     # using PERMISSIONS on Windows appends read-only flag
@@ -402,9 +376,6 @@
     )
 else()
     set(CONAN_EXECS_INSTALL ${CONAN_EXECS})
-    if(LINUX)
-        list(REMOVE_ITEM CONAN_EXECS_INSTALL "$<TARGET_FILE:openvpn::openvpn>")
-    endif()
     install(FILES ${CONAN_EXECS_INSTALL}
         DESTINATION ${CMAKE_INSTALL_BINDIR}
         COMPONENT AmneziaVPN
@@ -419,36 +390,6 @@
     COMPONENT AmneziaVPN
 )
 
-# install openvpn via the service's dep set to ship its openssl, then
-# rewrite conan's absolute build rpath to a relative one for the package
-if(LINUX)
-    install(IMPORTED_RUNTIME_ARTIFACTS openvpn::openvpn
-        RUNTIME_DEPENDENCY_SET service_deps
-        PERMISSIONS
-            OWNER_READ OWNER_EXECUTE
-            GROUP_READ GROUP_EXECUTE
-            WORLD_READ WORLD_EXECUTE
-        COMPONENT AmneziaVPN
-    )
-    install(CODE "
-        set(_ovpn \"\$ENV{DESTDIR}\${CMAKE_INSTALL_PREFIX}/${CMAKE_INSTALL_BINDIR}/openvpn\")
-        file(CHMOD \"\${_ovpn}\" PERMISSIONS
-            OWNER_READ OWNER_WRITE OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE)
-        file(RPATH_SET FILE \"\${_ovpn}\" NEW_RPATH \"$ORIGIN:$ORIGIN/../lib\")
-        file(CHMOD \"\${_ovpn}\" PERMISSIONS
-            OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE)
-    "
-        COMPONENT AmneziaVPN
-    )
-elseif(APPLE)
-    install(CODE "
-        set(_ovpn \"\$ENV{DESTDIR}\${CMAKE_INSTALL_PREFIX}/${CMAKE_INSTALL_BINDIR}/openvpn\")
-        execute_process(COMMAND install_name_tool -delete_rpath \"$<TARGET_FILE_DIR:OpenSSL::SSL>\" \"\${_ovpn}\" ERROR_QUIET)
-        execute_process(COMMAND install_name_tool -add_rpath \"@executable_path/../Frameworks\" \"\${_ovpn}\")
-    "
-        COMPONENT AmneziaVPN
-    )
-endif()
 
 # install drivers
 if (WIN32)