Skip to main content

Install host prerequisites

Prepare each Ubuntu machine before you deploy Netwrix Privilege Secure for Discovery. Complete this procedure on every node in a single-node or cluster deployment, including the primary node and the secondary nodes.

Prerequisites​

  • Ubuntu Server 24.04 LTS, on an x86-64 processor.
  • A processor that supports the Advanced Vector Extensions (AVX) instruction set. MongoDB 8.0 requires AVX. Some virtual machine configurations hide AVX from the guest, so confirm that your hypervisor exposes it.
  • The CPU, memory, and storage that Sizing specifies.
  • One machine for a single-node deployment, or three machines for a cluster.
  • Internet access to download packages and container images. If the environment uses a proxy server, see Proxy and firewall allowlist.

Install SSH​

If SSH isn't already installed, run the following commands:

sudo apt install openssh-server
sudo systemctl enable --now ssh

Install Docker​

Run the following commands to add the Docker repository and install Docker Engine:

sudo apt-get update
sudo apt-get install ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc

# Add the repository:
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] \
  https://download.docker.com/linux/ubuntu \
  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

# Install:
sudo apt-get update
sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

This procedure doesn't add your user to the docker group, so Docker commands need sudo. Run the registry sign-in and secureone.sh with sudo -E, which keeps your home directory. See Configure registry access.

Install the AWS CLI​

The AWS Command Line Interface (AWS CLI) version 2 authenticates with the Netwrix Amazon Elastic Container Registry (ECR) so that the host can pull the container images.

# Install unzip:
sudo apt install unzip

curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install --bin-dir /usr/local/bin --install-dir /usr/local/aws-cli --update

Run these steps on every node in the deployment.

Prepare the storage​

MongoDB stores the product data under /secureone/data/db, inside the installation directory. Place the installation directory on local storage with an XFS or ext4 file system. Allocate the capacity that Sizing specifies to the file system that holds the installation directory and the Docker data directory.

Next step​

Configure the registry credentials. See Registry access.