For single host installations, you can install the Lacework agent using a .deb or .rpm package, which can be downloaded from Settings > Agents in the Lacework Console. When using a package manager, you must also manually create the config.json file and add your access token to the configuration.
After downloading the appropriate package locally, copy it to /tmp or another directory on the target Linux server using your preferred method. Alternatively, the package can be downloaded directly from the Linux instance.
When installing using a package, you must manually create config.json on your target Linux server and add your access token. In the steps below, replace Your_Agent_Access_Token with your agent access token. For more information, see Download Agent Installers and Get the Agent Access Token.
- Create the directory where the agent will look for the config.json file.
$ sudo mkdir -p /var/lib/lacework/config
- Using an editor, create a file called config.json in the /var/lib/lacework/config directory with your agent access token.
{ "tokens": { "AccessToken":"YourAgentAccessToken" } }
- Verify that the file contains your access token.
$ cat /var/lib/lacework/config/config.json
- Install using the appropriate package manager.
- If using the Debian Package Manager, install the x86 package using this command:
$ sudo dpkg -i lacework_latest_amd64.deb
Install the ARM64 package using this command:$ sudo dpkg -i lacework_latest_arm64.deb
- If using the RedHat Package Manager, install the x86 package using this command:
$ sudo rpm -ivh lacework-latest-1.x86_64.rpm
Install the ARM64 package using this command:$ sudo rpm -ivh lacework-latest-1.aarch64.rpm
- If using the Debian Package Manager, install the x86 package using this command:
- Data collection from agents is sent to the Lacework backend and a newly added agent on the VM (installed as a package or a container) should be visible in approximately 15 minutes. Verify that the Lacework Console's Monitor > Agents page displays the new host.