Download the agent

Start the container

Docker picks the image for your machine. The volume keeps the agent's identity across updates.

docker run -d \
  --name portlatch-agent \
  --restart unless-stopped \
  -v portlatch:/.data \
  portlatch/portlatch-agent:latest

Read the code

The agent prints an eight-character code, then waits for your approval.

docker logs -f portlatch-agent

Approve it in your dashboard

Type the code and name the machine. The tunnel comes up a few seconds later: add your first route.

Create a free account first, or log in.

Download the archive

Without Docker: in a Proxmox LXC container, on a minimal Raspberry Pi.

curl -LO https://github.com/portlatch/portlatch-agent/releases/latest/download/portlatch-agent_linux_amd64.tar.gz

On a Raspberry Pi, replace amd64 with arm64 for a 64-bit system, or armv7 for a 32-bit one.

Install the program and its service

The service runs as an unprivileged user created for it alone, and keeps its data in /var/lib/portlatch-agent. The code shows in its logs.

tar -xzf portlatch-agent_linux_*.tar.gz
sudo install -m 0755 portlatch-agent /usr/local/bin/
sudo install -m 0644 portlatch-agent.service /etc/systemd/system/
sudo systemctl enable --now portlatch-agent
journalctl -u portlatch-agent -f

Approve it in your dashboard

Type the code and name the machine. The tunnel comes up a few seconds later: add your first route.

Create a free account first, or log in.

Download and unzip

Put portlatch-agent.exe in a folder where it will stay: the service runs it from there.

Enrol it from an administrator PowerShell

The code shows in the window. Once you approve it, the agent installs itself as a service that starts with Windows.

cd "C:\Program Files\Portlatch"
.\portlatch-agent.exe enrol

The program isn't signed yet: if SmartScreen stops it, choose More info, then Run anyway.

Approve it in your dashboard

Type the code and name the machine. The tunnel comes up a few seconds later: add your first route.

Create a free account first, or log in.