When you upgrade the Linux agent, it is non-disruptively installed. A machine reboot is not required. The agent runs some basic health checks after the upgrade is complete and the previously installed version of the agent stops running only after the new version is fully functional. If the upgrade fails, it is automatically rolled back to the previously installed version on the host machine.
Automatic Upgrade of Linux Agent
Every few months, Lacework qualifies a Linux agent release as a fleet upgrade release version. The latest fleet upgrade versions are available at https://packages.lacework.net/?prefix=established/RPMS/x86_64/.
By default, the Linux agent is automatically upgraded when a new fleet upgrade version is available.
If you want to upgrade to a version that is newer than the latest fleet upgrade version, use any of the installation methods described at Install the Linux Agent to manually install the agent. For example, if the latest fleet upgrade version is v184.108.40.20649 and you want to upgrade to v220.127.116.1133, you must manually install v18.104.22.16833.
To disable automatic upgrade to a new fleet upgrade release version, add the following to your config.json file:
To enable automatic upgrade again, delete the
"autoupgrade": "disable" property in the config.json file or change it to:
For improved security and to benefit from new and improved features, Lacework recommends that you do not disable automatic upgrade of the agent.
Manual Upgrade of Linux Agent
If you have disabled automatic upgrade or want to upgrade to a version that is newer than the latest fleet upgrade version available at https://packages.lacework.net/?prefix=established/, use any of the installation methods described at Install the Linux Agent to manually upgrade the agent.