Pritunl

https://docs.pritunl.com/
Admin
Pritunl is an open-source VPN and zero trust access management platform that provides secure...
Tokens:181,543
Snippets:1,481
Trust Score:9.9
Update:1 week ago
Show doc for...
Tokens:
Raw
### Install on Arch Linux

Source: https://docs.pritunl.com/kb/zero/endpoint/endpoint

Adds the Pritunl repository, imports the GPG key, installs pritunl-zero and mongodb, then starts and enables both services.

```bash
sudo tee -a /etc/pacman.conf << EOF
[pritunl]
Server = https://repo.pritunl.com/stable/pacman
EOF

sudo pacman-key --keyserver hkp://keyserver.ubuntu.com -r 7568D9BB55FF9E5287D586017AE645C0CF8E292A
sudo pacman-key --lsign-key 7568D9BB55FF9E5287D586017AE645C0CF8E292A
sudo pacman -Sy
sudo pacman -S --noconfirm pritunl-zero mongodb
sudo systemctl start mongodb pritunl-zero
sudo systemctl enable mongodb pritunl-zero
```

--------------------------------

### List and start a profile with OpenVPN mode

Source: https://docs.pritunl.com/kb/vpn/client/cli-interface

Run `pritunl-client list` to get the profile ID, then start it with `pritunl-client start` using a partial ID. Add `--mode=ovpn` for OpenVPN or `--mode=wg` for WireGuard.

```bash
pritunl-client list
pritunl-client start 5ac --mode=ovpn
```

--------------------------------

### Install Pritunl on Ubuntu 24.04 (Other Providers)

Source: https://docs.pritunl.com/kb/vpn/getting-started/installation

Sets up MongoDB, OpenVPN, and Pritunl repositories, installs GPG keys, updates the system, disables UFW, and installs and starts Pritunl and MongoDB. Note: Ubuntu installations are not tested or guaranteed for future support.

```bash
sudo tee /etc/apt/sources.list.d/mongodb-org.list << EOF
deb [ signed-by=/usr/share/keyrings/mongodb-server-8.0.gpg ] https://repo.mongodb.org/apt/ubuntu noble/mongodb-org/8.0 multiverse
EOF

sudo tee /etc/apt/sources.list.d/openvpn.list << EOF
deb [ signed-by=/usr/share/keyrings/openvpn-repo.gpg ] https://build.openvpn.net/debian/openvpn/stable noble main
EOF

sudo tee /etc/apt/sources.list.d/pritunl.list << EOF
deb [ signed-by=/usr/share/keyrings/pritunl.gpg ] https://repo.pritunl.com/stable/apt noble main
EOF

sudo apt --assume-yes install gnupg

curl -fsSL https://www.mongodb.org/static/pgp/server-8.0.asc | sudo gpg -o /usr/share/keyrings/mongodb-server-8.0.gpg --dearmor --yes
curl -fsSL https://swupdate.openvpn.net/repos/repo-public.gpg | sudo gpg -o /usr/share/keyrings/openvpn-repo.gpg --dearmor --yes
curl -fsSL https://raw.githubusercontent.com/pritunl/pgp/master/pritunl_repo_pub.asc | sudo gpg -o /usr/share/keyrings/pritunl.gpg --dearmor --yes
sudo apt update
sudo apt --assume-yes install pritunl openvpn mongodb-org wireguard wireguard-tools

sudo ufw disable

sudo systemctl start pritunl mongod
sudo systemctl enable pritunl mongod
```

--------------------------------

### Install on Debian

Source: https://docs.pritunl.com/kb/zero/endpoint/endpoint

Adds MongoDB and Pritunl repositories, imports the GPG keys, installs pritunl-zero and mongodb-org, then starts and enables mongod and pritunl-zero.

```bash
sudo tee /etc/apt/sources.list.d/mongodb-org-5.0.list << EOF
deb https://repo.mongodb.org/apt/debian buster/mongodb-org/5.0 main
EOF

sudo tee /etc/apt/sources.list.d/pritunl.list << EOF
deb https://repo.pritunl.com/stable/apt buster main
EOF

sudo apt-get install dirmngr
sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com --recv E162F504A20CDF15827F718D4B7C549A058F8B6B
sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com --recv 7568D9BB55FF9E5287D586017AE645C0CF8E292A
sudo apt-get update
sudo apt-get --assume-yes install pritunl-zero mongodb-org
sudo systemctl start mongod pritunl-zero
sudo systemctl enable mongod pritunl-zero
```

--------------------------------

### Install and start postfix, then install GitLab EE

Source: https://docs.pritunl.com/kb/vpn/tutorials/pritunl-zero-gitlab

Upgrade packages, install and start postfix, then install GitLab EE using the provided script and set the external URL to your top level domain.

```bash
sudo yum -y upgrade

sudo yum -y install postfix
sudo systemctl enable postfix
sudo systemctl start postfix

curl https://packages.gitlab.com/install/repositories/gitlab/gitlab-ee/script.rpm.sh | sudo bash

sudo EXTERNAL_URL="https://gitlab.pritunl.net" yum install -y gitlab-ee
```

--------------------------------

### Install Pritunl Zero on Ubuntu

Source: https://docs.pritunl.com/kb/zero/endpoint/endpoint

Adds MongoDB and Pritunl apt repositories, imports GPG keys, installs pritunl-zero and mongodb-server, then starts and enables the services.

```bash
sudo tee /etc/apt/sources.list.d/mongodb-org-5.0.list << EOF
deb https://repo.mongodb.org/apt/ubuntu focal/mongodb-org/5.0 multiverse
EOF

sudo tee /etc/apt/sources.list.d/pritunl.list << EOF
deb https://repo.pritunl.com/stable/apt focal main
EOF

sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com --recv E162F504A20CDF15827F718D4B7C549A058F8B6B
sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com --recv 7568D9BB55FF9E5287D586017AE645C0CF8E292A
sudo apt-get update
sudo apt-get --assume-yes install pritunl-zero mongodb-server
sudo systemctl start pritunl-zero mongodb
sudo systemctl enable pritunl-zero mongodb
```

--------------------------------

### Install and start Pritunl Cloud

Source: https://docs.pritunl.com/kb/cloud/platforms/vultr

Commands to configure the Pritunl repository, disable firewalld and SELinux, install required packages, and start the Pritunl Cloud service. Pritunl Cloud automatically reads MongoDB credentials from /var/lib/mongo/credentials.txt if it exists.

```bash
sudo tee /etc/yum.repos.d/pritunl.repo << EOF
[pritunl]
name=Pritunl Repository
baseurl=https://repo.pritunl.com/stable/yum/almalinux/10/
gpgcheck=1
enabled=1
gpgkey=https://raw.githubusercontent.com/pritunl/pgp/master/pritunl_repo_pub.asc
EOF

sudo dnf -y update

sudo dnf -y remove iptables-services
sudo systemctl stop firewalld.service
sudo systemctl disable firewalld.service

sudo sed -i 's/^SELINUX=.*/SELINUX=permissive/g' /etc/selinux/config
sudo setenforce 0

sudo dnf -y install iptables net-tools ipset ipvsadm xorriso qemu-kvm qemu-img swtpm swtpm-tools
sudo dnf -y install pritunl-cloud
sudo systemctl enable --now pritunl-cloud
```

--------------------------------

### Install on CentOS

Source: https://docs.pritunl.com/kb/zero/endpoint/endpoint

Adds MongoDB and Pritunl repositories, imports the GPG key, installs pritunl-zero and mongodb-org, then starts and enables mongod and pritunl-zero.

```bash
sudo tee /etc/yum.repos.d/mongodb-org-5.0.repo << EOF
[mongodb-org-5.0]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/7/mongodb-org/5.0/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://www.mongodb.org/static/pgp/server-5.0.asc
EOF

sudo tee /etc/yum.repos.d/pritunl.repo << EOF
[pritunl]
name=Pritunl Repository
baseurl=https://repo.pritunl.com/stable/yum/centos/7/
gpgcheck=1
enabled=1
EOF

sudo rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 7568D9BB55FF9E5287D586017AE645C0CF8E292A
gpg --armor --export 7568D9BB55FF9E5287D586017AE645C0CF8E292A > key.tmp; sudo rpm --import key.tmp; rm -f key.tmp
sudo yum -y install pritunl-zero mongodb-org
sudo systemctl start mongod pritunl-zero
sudo systemctl enable mongod pritunl-zero
```

--------------------------------

### Install Pritunl Zero on Red Hat/Oracle Linux

Source: https://docs.pritunl.com/kb/zero/endpoint/endpoint

Sets up MongoDB and Pritunl repositories, imports GPG keys, installs pritunl-zero and mongodb-org, then starts and enables the services.

```bash
sudo tee /etc/yum.repos.d/mongodb-org-5.0.repo << EOF
[mongodb-org-5.0]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/8/mongodb-org/5.0/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://www.mongodb.org/static/pgp/server-5.0.asc
EOF

sudo tee /etc/yum.repos.d/pritunl.repo << EOF
[pritunl]
name=Pritunl Repository
baseurl=https://repo.pritunl.com/stable/yum/oraclelinux/8/
gpgcheck=1
enabled=1
EOF

sudo rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 7568D9BB55FF9E5287D586017AE645C0CF8E292A
gpg --armor --export 7568D9BB55FF9E5287D586017AE645C0CF8E292A > key.tmp; sudo rpm --import key.tmp; rm -f key.tmp
sudo yum -y install pritunl-zero mongodb-org
sudo systemctl start mongod pritunl-zero
sudo systemctl enable mongod pritunl-zero
```

--------------------------------

### Install Pritunl on AWS AlmaLinux

Source: https://docs.pritunl.com/kb/vpn/getting-started/installation

Sets up MongoDB and Pritunl repositories, updates the system, removes firewalld, and installs and starts Pritunl and MongoDB. This is for AlmaLinux on AWS with SELinux support.

```bash
sudo tee /etc/yum.repos.d/mongodb-org.repo << EOF
[mongodb-org-8.0]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/9/mongodb-org/8.0/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://pgp.mongodb.com/server-8.0.asc
EOF

sudo tee /etc/yum.repos.d/pritunl.repo << EOF
[pritunl]
name=Pritunl Repository
baseurl=https://repo.pritunl.com/stable/yum/almalinux/9/
gpgcheck=1
enabled=1
gpgkey=https://raw.githubusercontent.com/pritunl/pgp/master/pritunl_repo_pub.asc
EOF

sudo dnf -y update

sudo dnf -y remove iptables-services
sudo systemctl stop firewalld.service
sudo systemctl disable firewalld.service

sudo dnf -y install pritunl pritunl-openvpn wireguard-tools mongodb-org
sudo systemctl enable mongod pritunl
sudo systemctl start mongod pritunl
```

--------------------------------

### Install on Oracle Linux

Source: https://docs.pritunl.com/kb/zero/endpoint/endpoint

Adds MongoDB and Pritunl repositories, enables the EPEL repository, imports the GPG key, installs pritunl-zero and mongodb-org, then starts and enables mongod and pritunl-zero.

```bash
sudo tee /etc/yum.repos.d/mongodb-org-5.0.repo << EOF
[mongodb-org-5.0]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/7/mongodb-org/5.0/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://www.mongodb.org/static/pgp/server-5.0.asc
EOF

sudo tee /etc/yum.repos.d/pritunl.repo << EOF
[pritunl]
name=Pritunl Repository
baseurl=https://repo.pritunl.com/stable/yum/oraclelinux/7/
gpgcheck=1
enabled=1
EOF

sudo yum -y install yum-utils
sudo yum-config-manager --enable ol7_developer_epel
gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 7568D9BB55FF9E5287D586017AE645C0CF8E292A
gpg --armor --export 7568D9BB55FF9E5287D586017AE645C0CF8E292A > key.tmp; sudo rpm --import key.tmp; rm -f key.tmp
sudo yum -y install pritunl-zero mongodb-org
sudo systemctl start mongod pritunl-zero
sudo systemctl enable mongod pritunl-zero
```

--------------------------------

### Install on Amazon Linux

Source: https://docs.pritunl.com/kb/zero/endpoint/endpoint

Adds MongoDB and Pritunl repositories, imports the GPG key, installs pritunl-zero and mongodb-org, then starts and enables mongod and pritunl-zero.

```bash
sudo tee /etc/yum.repos.d/mongodb-org-5.0.repo << EOF
[mongodb-org-5.0]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/amazon/2/mongodb-org/5.0/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://www.mongodb.org/static/pgp/server-5.0.asc
EOF

sudo tee /etc/yum.repos.d/pritunl.repo << EOF
[pritunl]
name=Pritunl
baseurl=https://repo.pritunl.com/stable/yum/amazonlinux/2/
gpgcheck=1
enabled=1
EOF

sudo rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 7568D9BB55FF9E5287D586017AE645C0CF8E292A
gpg --armor --export 7568D9BB55FF9E5287D586017AE645C0CF8E292A > key.tmp; sudo rpm --import key.tmp; rm -f key.tmp
sudo yum -y install pritunl-zero mongodb-org
sudo systemctl start mongod pritunl-zero
sudo systemctl enable mongod pritunl-zero
```

--------------------------------

### Setup script for Pritunl Zero authenticated web VSCode server

Source: https://docs.pritunl.com/kb/zero/general/zero-vscode-web

A bash script that installs and configures all components for a web-based VSCode server protected by Pritunl Zero. It sets up repositories, installs packages, configures MongoDB, creates a dedicated vscode user, and registers the service with Pritunl Zero.

```bash
#!/bin/bash
# persistent paths: /var/lib/mongo /var/lib/vscode
set -e

ROOT_DOMAIN="pritunl.demo"
ZERO_DOMAIN="zero.pritunl.demo"
VSCODE_DOMAIN="vscode.pritunl.demo"

get_node_id() {
  if [ $# -eq 0 ]; then
    echo "Error: File path is required" >&2
    echo "Usage: get_node_id <node_id_file_path>" >&2
    return 1
  fi
  local node_id_file="$1"
  local node_id
  sudo mkdir -p "$(dirname "$node_id_file")"
  if [ -f "$node_id_file" ]; then
    node_id=$(cat "$node_id_file")
  else
    node_id=$(echo -n $(printf "%08x" $(date +%s))$(hexdump -n 8 -e '4/4 "%08x" 1 "\n"' /dev/urandom))
    echo "$node_id" | sudo tee "$node_id_file" > /dev/null
    sudo chmod 444 "$node_id_file"
  fi
  echo "$node_id"
}

sudo dnf -y update

sudo dnf -y install dnf-automatic
sudo sed -i 's/^upgrade_type =.*/upgrade_type = default/g' /etc/dnf/automatic.conf
sudo sed -i 's/^download_updates =.*/download_updates = yes/g' /etc/dnf/automatic.conf
sudo sed -i 's/^apply_updates =.*/apply_updates = yes/g' /etc/dnf/automatic.conf
sudo systemctl enable --now dnf-automatic.timer

sudo systemctl disable --now firewalld.service

sudo tee /etc/yum.repos.d/pritunl.repo << EOF
[pritunl]
name=Pritunl Repository
baseurl=https://repo.pritunl.com/stable/yum/oraclelinux/9/
gpgcheck=1
enabled=1
gpgkey=https://raw.githubusercontent.com/pritunl/pgp/master/pritunl_repo_pub.asc
EOF

sudo tee /etc/yum.repos.d/mongodb-org.repo << EOF
[mongodb-org]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/9/mongodb-org/8.0/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://pgp.mongodb.com/server-8.0.asc
EOF

sudo tee /etc/yum.repos.d/code.repo << EOF
[code]
name=Visual Studio Code
baseurl=https://packages.microsoft.com/yumrepos/vscode
enabled=1
gpgcheck=1
gpgkey=https://packages.microsoft.com/keys/microsoft.asc
EOF

sudo dnf -y install pritunl-zero mongodb-org code

sudo systemctl enable --now mongod

NODE_ID=$(get_node_id "/var/lib/mongo/node_id")

sudo tee /etc/pritunl-zero.json << EOF
{
    "mongo_uri": "mongodb://localhost:27017/pritunl-zero",
    "node_id": "$NODE_ID"
}
EOF
sudo chmod 600 /etc/pritunl-zero.json

sudo useradd -r -s /sbin/nologin vscode
sudo mkdir -p /home/vscode
sudo chown vscode:vscode /home/vscode
sudo chmod 700 /home/vscode

sudo mkdir -p /var/lib/vscode
sudo chown vscode:vscode /var/lib/vscode
sudo chmod 700 /var/lib/vscode

sudo mkdir -p /var/lib/vscode/.vscode
sudo chown vscode:vscode /var/lib/vscode/.vscode
sudo chmod 700 /var/lib/vscode/.vscode

sudo mkdir -p /var/lib/vscode/data
sudo chown vscode:vscode /var/lib/vscode/data
sudo ln -snf /var/lib/vscode/data /home/vscode/data
sudo chown vscode:vscode /home/vscode/data

sudo mkdir /var/lib/vscode/.vscode/data
sudo chown vscode:vscode /var/lib/vscode/.vscode/data
sudo chmod 700 /var/lib/vscode/.vscode/data
sudo mkdir /var/lib/vscode/.vscode/data/Machine
sudo chown vscode:vscode /var/lib/vscode/.vscode/data/Machine
sudo chmod 700 /var/lib/vscode/.vscode/data/Machine

sudo tee /var/lib/vscode/.vscode/data/Machine/settings.json << 'EOF'
{
    "editor.fontSize": 14,
    "files.autoSave": "afterDelay",
    "files.autoSaveDelay": 200,
}
EOF
sudo chown vscode:vscode /var/lib/vscode/.vscode/data/Machine/settings.json
sudo chmod 644 /var/lib/vscode/.vscode/data/Machine/settings.json

sudo tee /etc/systemd/system/vscode.service << EOF
[Unit]
Description=VS Code web server

[Service]
Type=exec
User=vscode
Group=vscode
WorkingDirectory=/home/vscode
Restart=on-failure
RestartSec=5s
ExecStart=/usr/bin/code serve-web --host 0.0.0.0 --port 8000 --server-data-dir=/var/lib/vscode/.vscode --without-connection-token --accept-server-license-terms
TimeoutStopSec=5s
LimitNOFILE=500000
LimitNPROC=512
PrivateTmp=true
ProtectSystem=full
ProtectHostname=true
ProtectKernelTunables=true

[Install]
WantedBy=multi-user.target
EOF

sudo systemctl daemon-reload
sudo systemctl enable --now pritunl-zero
sudo systemctl enable --now vscode
sleep 5

sudo pritunl-zero upsert service --name=vscode --type=http --role=vscode --domain="$VSCODE_DOMAIN" --server="http://127.0.0.1:8000" --share-session=true --websockets=true --logout-path="/logout"
sudo pritunl-zero upsert certificate --name=pritunl-cert --type=lets_encrypt --acme-domain=$ZERO_DOMAIN --acme-domain=$VSCODE_DOMAIN --acme-type=http
sudo pritunl-zero upsert node --name=self --management=true --proxy=true --management-domain=$ZERO_DOMAIN --webauthn-domain=$ROOT_DOMAIN --add-certificate=pritunl-cert --add-service=vscode
sudo pritunl-zero upsert policy --name=pritunl-zero --role=vscode --add-service=vscode
sudo pritunl-zero upsert user --name=pritunl --role=vscode
sudo pritunl-zero default-password

```

--------------------------------

### Install and configure Pritunl Link on Oracle Linux

Source: https://docs.pritunl.com/kb/vpn/link/pritunl-cloud-link

Run these commands on a new Oracle Linux instance in Pritunl Cloud. The script adds the Pritunl repository, installs pritunl-link, and configures the link with the hostname, VPC ID, token, secret, provider, and URI. Replace the example values with your own.

```bash
#!/bin/bash
sudo tee /etc/yum.repos.d/pritunl.repo << EOF
[pritunl]
name=Pritunl Repository
baseurl=https://repo.pritunl.com/stable/yum/oraclelinux/8/
gpgcheck=1
enabled=1
EOF

gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 7568D9BB55FF9E5287D586017AE645C0CF8E292A
gpg --armor --export 7568D9BB55FF9E5287D586017AE645C0CF8E292A > key.tmp; sudo rpm --import key.tmp; rm -f key.tmp
sudo yum -y update
sudo yum -y install pritunl-link

sudo pritunl-link pritunl-hostname cloud.pritunl.com
sudo pritunl-link pritunl-vpc 5c80565f9fe2e4bcca931f36
sudo pritunl-link pritunl-token daELQSOwll8w48H0nZDLzr9O0bYYNeK8fRrN2Ka4
sudo pritunl-link pritunl-secret cIY4qEz3B78qiL1b4iOz8kcNXfAJcaKNEyBEAoyi
sudo pritunl-link provider pritunl
sudo pritunl-link add pritunl://token:secret@test.pritunl.com
```

--------------------------------

### Install MongoDB with Podman Quadlet

Source: https://docs.pritunl.com/kb/cloud/getting-started/installation

Installs git and podman, clones the toolbox repository, builds the MongoDB container image, creates the data directory, and sets up a systemd container unit for MongoDB. The container runs with resource limits and publishes port 27017 on localhost. After starting, the credentials are stored in /var/lib/mongo/credentials.txt.

```bash
sudo dnf -y install git-core podman

git clone https://github.com/pritunl/toolbox.git
cd toolbox/mongodb-container
sudo podman build --rm -t mongo .
cd

sudo mkdir /var/lib/mongo
sudo chown 277:277 /var/lib/mongo
sudo tee /etc/containers/systemd/mongodb-podman.container << EOF
[Unit]
Description=MongoDB Podman Service

[Container]
Image=localhost/mongo
ContainerName=mongodb
Environment=DB_NAME=pritunl-cloud
Environment=CACHE_SIZE=1
User=mongodb
Volume=/var/lib/mongo:/data/db:Z
PublishPort=127.0.0.1:27017:27017
PodmanArgs=--cpus=1 --memory=2g

[Service]
Restart=always

[Install]
WantedBy=multi-user.target
EOF
sudo systemctl daemon-reload
sudo systemctl start mongodb-podman.service

sleep 3
sudo cat /var/lib/mongo/credentials.txt
```

--------------------------------

### Install Pritunl Cloud repository and packages

Source: https://docs.pritunl.com/kb/cloud/platforms/other

Sets up the Pritunl repository, updates the system, disables firewalld, sets SELinux to permissive, installs required packages, and enables the pritunl-cloud service.

```bash
sudo tee /etc/yum.repos.d/pritunl.repo << EOF
[pritunl]
name=Pritunl Repository
baseurl=https://repo.pritunl.com/stable/yum/oraclelinux/10/
gpgcheck=1
enabled=1
gpgkey=https://raw.githubusercontent.com/pritunl/pgp/master/pritunl_repo_pub.asc
EOF

sudo dnf -y update

sudo dnf -y remove iptables-services
sudo systemctl stop firewalld.service || true
sudo systemctl disable firewalld.service || true

sudo sed -i 's/^SELINUX=.*/SELINUX=permissive/g' /etc/selinux/config
sudo setenforce 0

sudo dnf -y install iptables net-tools ipset ipvsadm xorriso qemu-kvm qemu-img swtpm swtpm-tools
sudo dnf -y install pritunl-cloud
sudo systemctl enable --now pritunl-cloud
```

--------------------------------

### Install and enable NTP with dnf

Source: https://docs.pritunl.com/kb/vpn/system/configure-ntp

Use this script on RHEL systems with dnf to install and start the chrony daemon. It installs the chrony package, starts the chronyd service, and enables it to start on boot.

```bash
sudo dnf -y install chrony
sudo systemctl start chronyd
sudo systemctl enable chronyd
```

--------------------------------

### Install and enable NTP with yum

Source: https://docs.pritunl.com/kb/vpn/system/configure-ntp

Use this script on RHEL systems with yum to install and start the NTP daemon. It installs the ntp package, starts the ntpd service, and enables it to start on boot.

```bash
sudo yum -y install ntp
sudo systemctl start ntpd
sudo systemctl enable ntpd
```

--------------------------------

### Start Pritunl Client with Developer Tools (macOS, Windows, Linux)

Source: https://docs.pritunl.com/kb/vpn/debugging/client

Use these commands to launch the Pritunl Client with developer tools open for debugging. After the tools appear, open the top right menu and undock the window.

```bash
# macOS
/Applications/Pritunl.app/Contents/MacOS/Pritunl --dev-tools
# Windows
& 'C:\Program Files (x86)\Pritunl\pritunl.exe' --dev-tools
# Linux
pritunl-client-electron --dev-tools
```

--------------------------------

### Install and start MongoDB on Oracle Linux 8

Source: https://docs.pritunl.com/kb/vpn/security/securing-mongodb

Install and start MongoDB on Oracle Linux 8 by creating the mongodb-org-5.0 repository file and installing the mongodb-org package.

```bash
sudo tee /etc/yum.repos.d/mongodb-org-5.0.repo << EOF
[mongodb-org-5.0]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/8/mongodb-org/5.0/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://www.mongodb.org/static/pgp/server-5.0.asc
EOF

sudo yum -y install mongodb-org
sudo systemctl start mongod
sudo systemctl enable mongod
```

--------------------------------

### Start terminal interface on Linux

Source: https://docs.pritunl.com/kb/vpn/client/terminal-interface

Run this command to start the Pritunl Client terminal interface on Linux. The package 'pritunl-client' installs only the terminal interface, while 'pritunl-client-electron' installs both terminal and GUI.

```bash
pritunl-client
```

--------------------------------

### Set up Docker container and clone demo repository

Source: https://docs.pritunl.com/kb/zero/general/gitlab-demo

Commands to pull an Oracle Linux 7 image, start a container, add the Pritunl repository, install Git and Pritunl SSH, configure SSH keys, and clone the demo repository. Requires logging into gitlab.pritunl.com with username/password 'gitlab' first. The demo is recommended to run in a Docker container.

```bash
# Pull oracle linux 7
docker pull oraclelinux:7

# Start oracle linux container
docker run --rm -ti --entrypoint /bin/bash oraclelinux:7

# Add pritunl repository (copy all lines together)
tee /etc/yum.repos.d/pritunl.repo << EOF
[pritunl]
name=Pritunl Repository
baseurl=https://repo.pritunl.com/stable/yum/oraclelinux/7/
gpgcheck=1
enabled=1
EOF
gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 7568D9BB55FF9E5287D586017AE645C0CF8E292A
gpg --armor --export 7568D9BB55FF9E5287D586017AE645C0CF8E292A > key.tmp
rpm --import key.tmp; rm -f key.tmp

# Install git and pritunl-ssh
yum -y install pritunl-ssh git

# Add the demo SSH key
mkdir ~/.ssh
tee ~/.ssh/id_rsa << EOF
-----BEGIN RSA PRIVATE KEY-----
MIIEowIBAAKCAQEAxKWRhVZjn7Z1Dw5pLkbpJHXSm5Zn0onoOYeH6e5P1O8O/Mp8
quCY4oQZvf5DQLRMh5EcHGc6z5ruUbhTQyN5ZQQ67pdm4Qbx6vaDm5N/B3UvHgUz
ztIwrWeu3hvvOiTdmj+6zrEaIoYQZASdqSQu3ksjK2x3nnXJD9fZQTbDd7OUC1mv
smQ8TRfYuOQfqywpWy4UbrUK9ScVk9qrGe5j7HlYxEF7innGVaWa6Y8YiZHLe0jL
KFpMSO/9uGZ8Am+G7cvx4o3shHJfUlkNxspZkfmCO89WkkAhiL4g75Qpb8p2yTS1
fFMjwUQSd9jWEte6eK9ml/NVYzU0JNu6/Cb6dQIDAQABAoIBADxv3m+qg2fcvdFo
zm7IoHLyO05SRYpxlAvKWb1N3v9EkcijuvkRmitUCk1YTfce8r5fnNIl7+9KYKCB
FCX4SyD+0dXudlIGvmdGaGByToJOQ7LoSmnwM8G3sgjVcQrftbPojlNkHvIpXfQ/
bu1DD5yGX0LDTWhILwlNf5oJaL3qy1O6ta6gEif7ZtSnkXfcAyltC8ar8xehYmjg
a/URDzc0ll6a3D8zhDlNGcd9GT5CAqeLHizBCitjL4s9SLbdqJAEfu6Bq9IatswX
JaVg0MpFdk0xLAtEAoDdXi5oNugI4GiWXPsFvZxP8vNFPSa9cY+aOxMq4ojXD9ZB
ndTmcOkCgYEA4gWfnDtyG5Ke2sFRhBqDjK7j6JL4VyPikb+mXjp6VghBRnuEEQv7
30bCKoDwld4qmDFCYWM0ZblM6SSxLujQ5J+Eojt4nnVwUGLSlGbnZxf6FWsimtHR
mmeEYp/6q1IUnWe22Re0BT6gM7LZIKM+gjVad4pUIzivCiVD/su4IO8CgYEA3rqJ
Ex4BjC0Rx0n6StcGx0ICEPfURPFdzo8afSaqeU+ed3bPU3AU+mRbgdbGtv24lQHp
qtH+sSY0fl4dA26xrjTLdIYOO+/2yTmfuBPtV3RZ9k0PJF90oagaacs8L7GUFh1o
iheq4WAtRab521y0Sal+14w8rHaCFpyquO3OEtsCgYBb8NOrdtcE9lCeRdNF/I8U
lDPrcJWKxPMuPJqNbBZFltgOtsHTOV+8xIjJR2gWXqhO/oK1IOi4lHb/w8g7f8Mx
rN4ELFL1imokmP52FaH94tf9DHaoKb+son1MrS0HsbznBsBvcN/u3jnGrfL6/sy3
pMJnLCLrrOwvIVeWdwIwiwKBgCQMTskwTxHP7ZOyrnbUbH1teoYihlGOOx+GW8Qr
sOWndD9jlFStzEdmXMUb7NeLIwfC4n3KNQ2Y4GAffVSj4tAOLWuzkrQyt1+EGwyg
9QX1h+XsPOonJOpRGc1Lnncdp5kYs2W+ROLrPQiL6N6PF4Lgku3x/ZPwLkfYnW0G
2BaHAoGBAMgd4DIdecu+CRPqC0/x9hc7UA2OXwlAwiYt8ETAVfsv3XdK+qq2EvbX
tEsbopgjeQtNaNTIeSAnnYVtCCShiLSPhBDrM10pl+6CoFixdRQtDzt/HqqUc3SL
+4+7zXK+mGlZVaIeoCLTqfSGhzLY4S3W8nRieLq7RyLB6y2b1EtM
-----END RSA PRIVATE KEY-----
EOF
chmod 600 ~/.ssh/id_rsa
tee ~/.ssh/id_rsa.pub << EOF
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEpZGFVmOftnUPDmkuRukkddKblmfSieg5h4fp7k/U7w78ynyq4JjihBm9/kNAtEyHkRwcZzrPmu5RuFNDI3llBDrul2bhBvHq9oObk38HdS8eBTPO0jCtZ67eG+86JN2aP7rOsRoihhBkBJ2pJC7eSyMrbHeedckP19lBNsN3s5QLWa+yZDxNF9i45B+rLClbLhRutQr1JxWT2qsZ7mPseVjEQXuKecZVpZrpjxiJkct7SMsoWkxI7/24ZnwCb4bty/HijeyEcl9SWQ3GylmR+YI7z1aSQCGIviDvlClvynbJNLV8UyPBRBJ32NYS17p4r2aX81VjNTQk27r8Jvp1 root@d97b54c18226
EOF

# Configure pritunl-ssh using the values below
pritunl-ssh
# Enter Pritunl Zero user hostname: zero-user.pritunl.com
# Enter key number or full path to key: 1

# Use cmd or ctrl double click to open the link
# Login with username and password "gitlab" and approve the ssh key

# Clone the demo repository
git clone git@ssh.gitlab.pritunl.com:demo/test.git

```

--------------------------------

### Install and configure git on pritunl-ssh client

Source: https://docs.pritunl.com/kb/vpn/tutorials/pritunl-zero-gitlab

Install git and set user name and email in ~/.gitconfig. Use the same email address as the personal GitLab account.

```bash
yum install -y git
tee ~/.gitconfig << EOF
[user]
	name = Test
	email = test@pritunl.com
EOF

```

--------------------------------

### Install Pritunl Endpoint on Ubuntu Focal (apt)

Source: https://docs.pritunl.com/kb/zero/endpoint/install-endpoint

Adds the Pritunl repository for Ubuntu Focal, imports the GPG key, and installs pritunl-endpoint using apt.

```bash
sudo tee /etc/apt/sources.list.d/pritunl.list << EOF
deb https://repo.pritunl.com/stable/apt focal main
EOF

sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com --recv 7568D9BB55FF9E5287D586017AE645C0CF8E292A
sudo apt-get update
sudo apt-get --assume-yes install pritunl-endpoint
```

--------------------------------

### server_start plugin hook

Source: https://docs.pritunl.com/kb/vpn/system/plugins

Synchronous hook called when a server is started. The call occurs after the OpenVPN process has been configured and started. The example is a pass-through stub.

```python
# [SYNCHRONOUS] Called when a server is started. Call occurs after OpenVPN
# process has been configured and started.
def server_start(host_id, host_name, server_id, server_name, wg, port,
        port_wg, protocol, ipv6, ipv6_firewall, network, network6, network_wg,
        network6_wg, network_mode, network_start, network_stop,
        restrict_routes, bind_address, onc_hostname, dh_param_bits,
        multi_device, dns_servers, search_domain, otp_auth, cipher, hash,
        inter_client, ping_interval, ping_timeout, ping_interval_wg,
        ping_timeout_wg, link_ping_interval, link_ping_timeout, max_clients,
        replica_count, dns_mapping, debug, interface, interface_wg,
        bridge_interface, vxlan, **kwargs):
    pass
```

--------------------------------

### Install MongoDB inside Podman

Source: https://docs.pritunl.com/kb/cloud/platforms/vultr

Commands to install MongoDB inside Podman, build the container image, and start the service. The MongoDB credentials are stored in /var/lib/mongo/credentials.txt.

```bash
sudo dnf -y install git-core podman

git clone https://github.com/pritunl/toolbox.git
cd toolbox/mongodb-container
sudo podman build --rm --no-cache --pull -t mongo .
cd

sudo mkdir /var/lib/mongo
sudo chown 277:277 /var/lib/mongo
sudo tee /etc/containers/systemd/mongodb-podman.container << EOF
[Unit]
Description=MongoDB Podman Service

[Container]
Image=localhost/mongo
ContainerName=mongodb
Environment=DB_NAME=pritunl-cloud
Environment=CACHE_SIZE=1
User=mongodb
Volume=/var/lib/mongo:/data/db:Z
PublishPort=127.0.0.1:27017:27017
PodmanArgs=--cpus=1 --memory=2g

[Service]
Restart=always

[Install]
WantedBy=multi-user.target
EOF
sudo systemctl daemon-reload
sudo systemctl start mongodb-podman.service

sleep 3
sudo cat /var/lib/mongo/credentials.txt
```

--------------------------------

### Install Pritunl Client Flatpak

Source: https://docs.pritunl.com/kb/vpn/client/flatpak

Adds the Flathub and Pritunl Flatpak repositories and installs the com.pritunl.client package.

```bash
flatpak remote-add --user --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
flatpak remote-add --user --if-not-exists pritunl https://repo.pritunl.com/stable/flatpak/pritunl.flatpakrepo
flatpak install --user pritunl com.pritunl.client
```
Tokens:
Raw