The Cyferio agent joins this server to a Cyferio hub. It keeps an outbound OpenVPN 2.6 tunnel to the hub (no inbound ports), reports health and shows who may connect to this server right now. Optionally it acts as a site connector for LAN subnets behind it.

After installing, connect the privileged interfaces (until the store grants auto-connection), then join with the command from the portal:

 sudo snap connect cyferio-agent:network-control
 sudo snap connect cyferio-agent:firewall-control
 sudo snap connect cyferio-agent:network-observe
 sudo snap connect cyferio-agent:tpm
 sudo snap connect cyferio-agent:log-observe
 sudo snap connect cyferio-agent:system-observe
 echo '<token>' | sudo cyferio-agent join https://hub.example.com \
     --token-file - --hub-ca-pin sha256/<pin>

Identity-aware SSH is not available in the snap; use the .deb or .rpm package for it.