OnboardingThreatsabre agentLegacy
Ubuntu Deployment Guide
Legacy manual installation guide for the ThreatSabre Agent on Ubuntu with systemd. For current installations, use the automated install script.
These instructions are for legacy agent installations. Please refer to the Installation Guide for the current recommended approach.
Prerequisites
- Ubuntu (tested on 20.04+, 22.04+, 24.04+)
- Root access or sudo privileges
- Network connectivity to download the agent
1. Create Directory Structure
sudo mkdir -p /opt/threatsabre-agent
sudo mkdir -p /etc/threatsabre-agent
sudo mkdir -p /var/log/threatsabre-agent2. Download and Install the Agent Binary
# Download the agent
wget -O /tmp/ts-agent-ubuntu.gz https://files.threatsabre.com/ts-agent/tsagent-0.0.7-linux-x64.gz
# Extract to installation directory
gunzip -c /tmp/ts-agent-ubuntu.gz | sudo tee /opt/threatsabre-agent/threatsabre-agent > /dev/null
# Set executable permissions
sudo chmod 755 /opt/threatsabre-agent/threatsabre-agent
# Clean up
rm /tmp/ts-agent-ubuntu.gz3. Create Configuration File
sudo tee /etc/threatsabre-agent/agent.conf > /dev/null << 'EOF'
# ThreatSabre Agent Configuration
AGENT_TOKEN=your_agent_token_here
CONTROLLER_HOST=https://api.threatsabre.com
LOG_LEVEL=info
EOF
# Secure the config file
sudo chmod 600 /etc/threatsabre-agent/agent.conf
sudo chown root:root /etc/threatsabre-agent/agent.confConfiguration Options
| Variable | Description | Required |
|---|---|---|
AGENT_TOKEN | Authentication token for the controller | Yes |
CONTROLLER_HOST | URL of the ThreatSabre controller | Yes |
LOG_LEVEL | Logging verbosity: error, info, or debug | No (default: info) |
4. Create Systemd Service File
sudo tee /etc/systemd/system/threatsabre-agent.service > /dev/null << 'EOF'
[Unit]
Description=ThreatSabre Security Agent
After=network.target
[Service]
Type=simple
EnvironmentFile=/etc/threatsabre-agent/agent.conf
ExecStart=/opt/threatsabre-agent/threatsabre-agent
Restart=on-failure
RestartSec=10
StandardOutput=append:/var/log/threatsabre-agent/agent.log
StandardError=append:/var/log/threatsabre-agent/agent.log
[Install]
WantedBy=multi-user.target
EOF
sudo chmod 644 /etc/systemd/system/threatsabre-agent.service5. Enable and Start the Service
# Reload systemd to recognize the new service
sudo systemctl daemon-reload
# Enable the service to start on boot
sudo systemctl enable threatsabre-agent
# Start the service now
sudo systemctl start threatsabre-agent
# Check status
sudo systemctl status threatsabre-agentService Management
| Command | Description |
|---|---|
sudo systemctl start threatsabre-agent | Start the agent |
sudo systemctl stop threatsabre-agent | Stop the agent |
sudo systemctl restart threatsabre-agent | Restart the agent |
sudo systemctl status threatsabre-agent | Check agent status |
sudo systemctl enable threatsabre-agent | Enable on boot |
sudo systemctl disable threatsabre-agent | Disable on boot |
sudo journalctl -u threatsabre-agent -f | View live systemd logs |
Logging
| Command | Description |
|---|---|
sudo tail -f /var/log/threatsabre-agent/agent.log | View live agent logs |
Installation Guide
Install the ThreatSabre Agent on Linux using the automated install script, with options for interactive setup, CI/CD automation, version pinning, multi-instance deployments, and upgrade management.
Alpine Linux Deployment Guide
Legacy manual installation guide for the ThreatSabre Agent on Alpine Linux with OpenRC. For current installations, use the automated install script.