Experimental Ubuntu build

VPN for your terminal

VPN Pink CLI — manage your VPN from an interactive terminal.

Prefer a graphical interface? Open the Ubuntu app page. →

Available now: Ubuntu desktop · Linux x86_64. Windows, macOS, iOS and Android builds are not included.

Download · 0.1.41 · Ubuntu x86_64 README

CLI 0.1.41 is experimental. Offline checks passed; live login and VPN connection with this version remain unverified. CLI-TEST-STATUS.txt

Requirements

Ubuntu desktop with NetworkManager, strongSwan support for IKEv2, Python GI/libnm/cryptography, curl, a systemd user manager and an unlocked Secret Service keyring. This is not a standalone headless server package.

Sign in interactively with your VPN Pink account. Password input is hidden. Google, Apple and Amazon sign-in is not included in this version. No plaintext keyring fallback.

IKEv2/IPsec · WireGuard

Connect runs in the foreground: keep the terminal open. Ctrl+C disconnects. Automatic protocol selection uses IKEv2. WireGuard can be selected explicitly.

Downloading the app and creating an account are free. Neither activates VPN access. To use the VPN service, choose a paid plan.

Choose a plan →

Before connecting: Ubuntu packages

IKEv2/IPsec needs the NetworkManager plugin and extra strongSwan modules. Updating the AppImage does not install these system packages.

sudo apt update
sudo apt install network-manager-strongswan libcharon-extra-plugins libstrongswan-extra-plugins

Check packages and the EAP module

The package query checks installation. The file check must find libstrongswan-eap-identity.so. This proves installation, not that the running service loads it or that a VPN tunnel works.

dpkg-query -W network-manager-strongswan strongswan-nm libcharon-extra-plugins libstrongswan-extra-plugins
dpkg -L libcharon-extra-plugins | grep 'libstrongswan-eap-identity.so'

If the connection log says “EAP_IDENTITY not supported” or eap-identity cannot load, install the packages above. Save your work and restart Ubuntu to reload the VPN modules. Then retry the VPN Pink app first. If it still fails, collect a fresh log in a separate terminal. Other optional plugin warnings do not mean that every listed plugin is required.

WireGuard is supported directly by NetworkManager; no additional VPN plugin is needed.

For the CLI, also install these documented requirements and use an unlocked desktop keyring:

sudo apt install curl iproute2 python3-gi gir1.2-nm-1.0 python3-cryptography gnome-keyring

Start the app or CLI as your normal user, without sudo. Approve an administrator prompt if Ubuntu requests permission to configure the VPN. Missing packages and a blank app window are separate issues; installation does not guarantee a connection.

Download and start

chmod +x vpn-pink-cli
./vpn-pink-cli doctor
./vpn-pink-cli login

Commands

./vpn-pink-cli login
./vpn-pink-cli servers
./vpn-pink-cli connect
./vpn-pink-cli connect --server 1 --protocol wireguard
./vpn-pink-cli status
./vpn-pink-cli disconnect
./vpn-pink-cli logout
./vpn-pink-cli doctor

Verify the download

SHA256SUMS.txt

sha256sum vpn-pink-cli

bb2ef995e916b90bfc6f6a4543cdda4b4372461336752d20e26dac4f0bb63544

Ubuntu · AppImage →

Alternative: manual setup →