Skip to main content

Install Linux Agent Using a .deb or .rpm Package

For single host installations, you can install the Lacework agent using a .deb or .rpm package.

After downloading the appropriate package locally, copy it to /tmp or another directory on the target Linux server using your preferred method. Or, you can download the package directly from the Linux instance.

When installing using a package, you must manually create the config.json file on your target Linux server and add your access token. In the following steps, replace Your_Agent_Access_Token with your agent access token. For more information, see Create Agent Access Token. Replace Your_API_Endpoint with your agent server URL. For more information, see Agent Server URL.

  1. Create the directory where the agent will look for the config.json file.
    sudo mkdir -p /var/lib/lacework/config
  2. Using your preferred text editor, create a file called config.json in the /var/lib/lacework/config directory with your agent access token and optionally your agent server URL.
    {
    "tokens": { "AccessToken":"YourAgentAccessToken" },
    "serverurl" : "Your_API_Endpoint"
    }
  3. Verify that the file contains your access token.
    cat /var/lib/lacework/config/config.json
  4. Install using the appropriate package manager.
    • For Debian Package Manager, install the x86 package using this command:
      sudo dpkg -i lacework_latest_amd64.deb
      Install the ARM64 package using this command:
      sudo dpkg -i lacework_latest_arm64.deb
    • For RedHat Package Manager, install the x86 package using this command:
      sudo rpm -ivh lacework-latest-1.x86_64.rpm 
      Install the ARM64 package using this command:
      sudo rpm -ivh lacework-latest-1.aarch64.rpm
    • For Zypper Package Manager, install the x86 package using this command:
      sudo zypper install lacework-latest-1.x86_64.rpm 
      Install the ARM64 package using this command:
      sudo zypper install lacework-latest-1.aarch64.rpm
  5. Data collection from agents is sent to Lacework and a newly added agent on the VM (installed as a package or a container) should be visible in 10 to 15 minutes. Verify that the Lacework Console's Resources > Agents page displays the new host.