From e09772c1128d561368c708c8ccaa5b8d4adfdb41 Mon Sep 17 00:00:00 2001 From: miloschwartz Date: Wed, 25 Feb 2026 17:07:13 -0800 Subject: [PATCH] add windows cli and generate org ca to pangctl --- manage/clients/install-client.mdx | 14 ++++++++++---- self-host/advanced/container-cli-tool.mdx | 18 ++++++++++++++++++ 2 files changed, 28 insertions(+), 4 deletions(-) diff --git a/manage/clients/install-client.mdx b/manage/clients/install-client.mdx index 8bec90d..d589e18 100644 --- a/manage/clients/install-client.mdx +++ b/manage/clients/install-client.mdx @@ -113,23 +113,29 @@ import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx"; Tap the Connect button to establish a VPN connection. On the first connection, you may be prompted to allow the VPN connection. -## Pangolin CLI (Linux) +## Pangolin CLI (Linux, macOS, Windows) -Pangolin CLI is the recommended way to run a client using a command line interface on Mac or Linux. Support for Windows is coming soon. +Pangolin CLI is the recommended way to run a client using a command line interface on Mac and Linux. + +Pangolin CLI can run on Windows, but the CLI VPN functionality is not supported. You can still use Pangolin CLI on Windows for SSH alongside the Windows GUI client. Pangolin CLI supports running as user device with authentication or a machine client. -### Quick Install (Recommended) + +### Quick Install (Recommended) — Linux and macOS Use this command to automatically install Pangolin CLI. It detects your system architecture automatically and always pulls the latest version, adding `pangolin` to your PATH: ```bash curl -fsSL https://static.pangolin.net/get-cli.sh | bash ``` +### Windows + +Go to [GitHub releases](https://github.com/fosrl/cli/releases) and download the latest **MSI installer** or **EXE** for Windows. ### Manual Download -Binaries for Linux and macOS are available in the [GitHub releases](https://github.com/fosrl/cli/releases) for ARM and AMD64 (x86_64) architectures. +Binaries for all platforms are available in the [GitHub releases](https://github.com/fosrl/cli/releases) for ARM and AMD64 (x86_64) architectures. Download and install manually: diff --git a/self-host/advanced/container-cli-tool.mdx b/self-host/advanced/container-cli-tool.mdx index 22ef980..e4fb681 100644 --- a/self-host/advanced/container-cli-tool.mdx +++ b/self-host/advanced/container-cli-tool.mdx @@ -124,3 +124,21 @@ This command permanently deletes the client and its associated data: This action cannot be undone. Ensure you have backups if needed. + +## Generate Org CA Keys + +Generate an SSH CA public/private key pair for an organization and store them in the database. The private key is encrypted with the server secret. + +```bash +docker exec -it pangolin pangctl generate-org-ca-keys --orgId "org-123" +``` + +### Options + +- `--orgId` (required): The organization ID +- `--secret` (optional): Server secret used to encrypt the CA private key. If omitted, the secret is read from the config file (`config.yml` or `config.yaml` in the config directory). +- `--force` (optional, default: `false`): Overwrite existing CA keys for the organization if they already exist + + +If the organization already has CA keys, the command fails unless you pass `--force`. Using `--force` overwrites the existing keys; ensure you have a backup or understand the impact before overwriting. +