Install using a .deb or .rpm Package
For single host installations, you can install the Lacework agent using a .deb or .rpm package.
After downloading the appropriate package locally, copy it to /tmp or another directory on the target Linux server using your preferred method. Or, you can download the package directly from the Linux instance.
When installing using a package, you must manually create the config.json file on your target Linux server and add your access token. In the following steps, replace Your_Agent_Access_Token
with your agent access token. For more information, see Download Agent Installers and Get the Agent Access Token. Replace Your_API_Endpoint with your agent server URL. For more information, see Agent Server URL.
- Create the directory where the agent will look for the config.json file.
sudo mkdir -p /var/lib/lacework/config
- Using your preferred text editor, create a file called config.json in the /var/lib/lacework/config directory with your agent access token and optionally your agent server URL.
{
"tokens": { "AccessToken":"YourAgentAccessToken" },
"serverurl" : "Your_API_Endpoint"
} - Verify that the file contains your access token.
cat /var/lib/lacework/config/config.json
- Install using the appropriate package manager.
- For Debian Package Manager, install the x86 package using this command:Install the ARM64 package using this command:
sudo dpkg -i lacework_latest_amd64.deb
sudo dpkg -i lacework_latest_arm64.deb
- For RedHat Package Manager, install the x86 package using this command:Install the ARM64 package using this command:
sudo rpm -ivh lacework-latest-1.x86_64.rpm
sudo rpm -ivh lacework-latest-1.aarch64.rpm
- For Zypper Package Manager, install the x86 package using this command:Install the ARM64 package using this command:
sudo zypper install lacework-latest-1.x86_64.rpm
sudo zypper install lacework-latest-1.aarch64.rpm
- For Debian Package Manager, install the x86 package using this command:
- Data collection from agents is sent to Lacework and a newly added agent on the VM (installed as a package or a container) should be visible in 10 to 15 minutes. Verify that the Lacework Console's Resources > Agents page displays the new host.