Interactive Installation for Linux Based OS
5 min
prior to installation, specific linux agent jobs must be configured within the kron pam job scheduler in particular, the following jobs must be set up correctly to ensure the agent functions as intended · epmlinuxprocessrulejob · epmlinuxagentparametersjob · epmlinuxadvanceprocessrulejob to install the agent on a linux based operating system, agent installation script and a registration token are required both can be obtained from the kron pam linux agent management screens as described below 1 login to kron pam web gui 2 navigate to linux agent management menu 3 go to the agent dashboard 4 click the add button at the top right of the screen, select agent installation , and then click “here” to download the installation script this script(sh) will be copied on endpoint and the rights of the script should be arranged accordingly if there is already a token for registration you can directly copy that token to use for installation if there is no, first you need to enter an expiration time for token this token can be used to install agents until the expiration time click the next button to generate registration key the registration key will be entered during linux agent installation process at this point we have installation script and registration token now login to endopint as root user which kron pam linux agent to be installed and copy installation script to the os then give execution right then execute the script with root user installation example root\@pamagent ]# /setup sc api sh os > redhat os version > 8 2 chcon found /usr/bin/chcon semodule package found /usr/bin/semodule package semodule found /usr/sbin/semodule restorecon found /usr/sbin/restorecon sestatus found /usr/sbin/sestatus selinux status true current selinux mode enforcing selinux policy for the kron pam agent will be installed libcrypto so 1 1 found libcrypto so 1 1 (libc6,x86 64) => /lib64/libcrypto so 1 1 libssl so 1 1 found libssl so 1 1 (libc6,x86 64) => /lib64/libssl so 1 1 checking installation /pam/bin/kron pam linux agent is not found /pam/bin/sudo is not found /pam/bin/checkmodule is not found /pam/conf/agent json is not found /pam/lib/kron monitor so is not found /pam/lib/kron pam auth so is not found /pam/lib/libnss kronpam so 2 is not found /usr/lib64/security/kron pam auth so is not found /usr/lib64/libnss kronpam so 2 is not found \============================================================ valid download modes https ftp ftp tls sftp filesystem please provide download mode https selected download mode https \============================================================ please provide download host ip 1 1 1 1 \============================================================ please provide download package url folder \[default repo/linux agent] \============================================================ start downloading from download host 1 1 1 1 \============================================================ downloading via https curl k o remote name location https //10 20 42 156/repo/linux agent/kron agent package tar gz % total % received % xferd average speed time time time current dload upload total spent left speed 100 20 5m 100 20 5m 0 0 94 2m 0 94 6m curl return code 0 pam/ pam/bin/ pam/bin/sudo pam/bin/checkmodule pam/bin/kron pam linux agent pam/lib/ pam/lib/kronpam wrapper so pam/lib/libnss kronpam so 2 pam/lib/kron monitor so pam/lib/kron pam auth so pam/runtime/ pam/runtime/ld so preload pam/runtime/kron pam linux agent service pam/backup/ pam/policy/ pam/policy/kron pam te pam/blib/ pam/blib/libk5crypto so 3 1 pam/blib/libcrypto so 1 1 pam/blib/libssl so 1 1 pam/blib/libssh so 4 pam/blib/libcrypto so pam/blib/libk5crypto so 3 pam/blib/libk5crypto so pam/blib/libcrypto a pam/conf/ pam/conf/agent json pam/setup/ \============================================================ do you want to configure pam settings now?\[y/n]y please enter primary management address(e g 10 20 30 40 443) 1 1 1 1 please enter install token xxxxx yyyyy zzzzzz tttttt fffff do you want to change hostname?(current\ pamagent)\[y/n]n do you want to change interface?(current 10 20 30 40)\[y/n]n /pam/bin/kron pam linux agent /lib64/libcurl so 4 no version information available (required by /pam/bin/kron pam linux agent) chown cannot access '/pam/setup/install linux agent sh' no such file or directory chmod cannot access '/pam/setup/install linux agent sh' no such file or directory created symlink /etc/systemd/system/multi user target wants/kron pam linux agent service → /pam/runtime/kron pam linux agent service created symlink /etc/systemd/system/kron pam linux agent service → /pam/runtime/kron pam linux agent service \============================================================ checking system status \============================================================ kron pam linux agent active system alive installer script ended when the script is executed, it wil ask a few things 1 download mode this is for downloading necessary packages from kron pam server anf generally choose as https but if you want to copy packages from kron pam server to another repository and download from there you have some other optons like ftp, sftp, ftp tls, filesystem and if you choose other than https you need to indicate packkage file path or url 2 download host ip this is generally one of the ip addresses of kron pam instance in your architecture to download the package 3 download package url folder this is mentioned in first step if you use default mode(https) you dont need to write something here if you choose other modes you need to write path of the folder 4 do you want to configure pam settings now answer as “y” 5 enter primary management address ip address of the kron pam master instance 6 install token this will be mentioned in the previous section and will be taken from kron pam 7 do you want to change hostname if you dont want to change display name of your server just write “n”, if you want to see something different from your server hostname on agent dashboard you can say “y” and give a new name 8 do you want to change interface if you have more than one network interface on your server you can choose any of them by saying “y”, then choose the ip of that interface otherwise default one’s ip of ens192 will be chosen if the agent has been installed successfully, executing the command below will confirm that the agent service is up and running check system status \[root\@pamagent ]# systemctl status kron pam linux agent service ● kron pam linux agent service kron pam linux agent loaded loaded (/pam/runtime/kron pam linux agent service; enabled; vendor preset disabled) active active (running) since wed 2026 04 15 09 32 44 edt; 5 days ago main pid 3668 (kron pam linux ) tasks 18 (limit 23203) memory 19 5m cgroup /system slice/kron pam linux agent service └─3668 /pam/bin/kron pam linux agent if the installation script is executed again on a server where the agent is already installed, the script first checks for an existing installation if a current installation is detected, a warning is displayed as shown below and on linux agent dashboard you will see that agent is online and the agent will be under the predefined group “unassigned agents” in this agent group, agent does not apply any rule just monitor and log the session and the first time registered agent on endpoint will be seen on device inventory, under unassigned devices