📄️ Linux Agent Installation Prerequisites
Complete the following steps before you install the agent.
📄️ Create Agent Access Tokens and Download Linux Agent Installers
You create agent access tokens and download the agent installers from the Lacework Console.
📄️ Install GPG and RSA keys
Lacework uses a combination of GPG and RSA keys to sign installation materials.
📄️ Install Using the install.sh Script
[START]:#
📄️ Install Using the Lacework CLI
To analyze application, host, and user behavior, Lacework uses a lightweight agent that securely forwards collected metadata to the Lacework platform for analysis. The agent requires minimal system resources and runs on most Linux distributions.
📄️ Install from Package Repositories
Overview
📄️ Install Using a .deb or .rpm Package
For single host installations, you can install the Lacework agent using a .deb or .rpm package.
📄️ Install Linux Agent on Kubernetes
You can use the following methods to install the Lacework Linux agent on Kubernetes:
📄️ Install with Chef
[START]:#
📄️ Install with Ansible
Because Ansible is a flexible and extensible automation tool, you can use multiple strategies to install the Lacework agent. Use the following skeleton Debian and RPM playbooks as building blocks to create more advanced, environment-specific playbooks.
📄️ Install Using Docker
Install on a Dockerized Host
📄️ Install on AWS EC2 with Terraform and AWS Systems Manager
This article covers using Terraform to configure AWS Systems Manager to deploy the Lacework Agent to supported EC2 instances.
📄️ Install Using an AMI Created with Packer
You can use HashiCorp Packer to create a machine image with the Lacework agent pre-installed and configured. To learn more about HashiCorp Packer, see the Packer documentation.
📄️ Install on AWS ECS as a Daemon Service (EC2 Launch Type)
Overview
📄️ Install on AWS ECS Fargate
Overview
📄️ Install on AWS EKS Fargate
Overview
📄️ Install on GKE Autopilot
Overview
📄️ Install on Alpine Linux
This topic describes functionality that is currently in beta.
📄️ Install with AWS Elastic Beanstalk
AWS Elastic Beanstalk allows users to easily deploy and scale their web applications. It supports multiple programming languages such as Python, Java, Node.js, and Go, and runs applications natively on an EC2 instance or as Docker containers.
📄️ Install on a GCE Host
You can install the Lacework agent on a Google Compute Engine (GCE) host instance to monitor workloads. The workload portion provides process-aware threat and intrusion detection for your GCE environment and notifies you of any events through your chosen method.
📄️ Install on CoreOS
CoreOS does not have a package manager. Hence, you can install the Lacework agent using the installation script or by manually installing a Docker image.
📄️ Upgrade the Linux Agent
When you upgrade the Linux agent, it is non-disruptively installed. A machine reboot is not required. The agent runs some basic health checks after the upgrade is complete and the previously installed version of the agent stops running only after the new version is fully functional. If the upgrade fails, it is automatically rolled back to the previously installed version on the host machine.
📄️ Uninstall the Linux Agent
Uninstall the Linux Agent from a Host Machine