Install using a .deb or .rpm Package – Lacework

For single host installations, you can install the Lacework agent using a .deb or .rpm package, which can be downloaded from Settings > Agents in the Lacework Console. When using a package manager, you must also manually create the config.json file and add your access token to the configuration.

After downloading the appropriate package locally, copy it to /tmp or another directory on the target Linux server using your preferred method. Alternatively, the package can be downloaded directly from the Linux instance.

When installing using a package, you must manually create config.json on your target Linux server and add your access token. In the steps below, replace Your_Agent_Access_Token with your agent access token. For more information, see Download Agent Installers and Get the Agent Access Token.

Create the directory where the agent will look for the config.json file.
```
  $ sudo mkdir -p /var/lib/lacework/config      
```
Using an editor, create a file called config.json in the /var/lib/lacework/config directory with your agent access token.
```
  {
      "tokens": { "AccessToken":"YourAgentAccessToken" }
  }      
```

Verify that the file contains your access token.

  $ cat /var/lib/lacework/config/config.json

Install using the appropriate package manager.
- If using the Debian Package Manager, install the x86 package using this command:
```
$ sudo dpkg -i lacework_latest_amd64.deb      
```
  Install the ARM64 package using this command:
```
$ sudo dpkg -i lacework_latest_arm64.deb      
```
- If using the RedHat Package Manager, install the x86 package using this command:
```
$ sudo rpm -ivh lacework-latest-1.x86_64.rpm       
```
  Install the ARM64 package using this command:
```
$ sudo rpm -ivh lacework-latest-1.aarch64.rpm      
```
Data collection from agents is sent to the Lacework backend and a newly added agent on the VM (installed as a package or a container) should be visible in approximately 15 minutes. Verify that the Lacework Console's Resources > Agents page displays the new host.

Articles in this section