The CYFOX EDR agent is compatible with a variety of Linux operating systems. Below is a list of supported distributions:
Alpine Linux 3.16+ (x64, Arm64, Arm32)
Debian 11+ (x64, Arm64, Arm32)
Fedora 38+ (x64)
openSUSE 15+ (x64)
Oracle Linux 8+ (x64)
Red Hat Enterprise Linux 8+ (x64, Arm64)
SUSE Enterprise Linux (SLES) 12 SP5+ (x64)
Ubuntu 20.04+ (x64, Arm64, Arm32)
Rocky Linux 8+ (x64)
CYFOX EDR Linux Agent Version 1.02.2
The following sections cover agent installation for various Linux distributions. The instructions are divided between non-repository (manual) installations and repository installations.
Non-Repository Installation
For CentOS, Rocky Linux, Fedora, SUSE for SAP, openSUSE
Download the CYFOX Agent package
rubyCopy codewget -c https://download.cyfox.com/agent/linux/cfx-1.02.2-1.x86_64.rpm
Install the package
bashCopy codeyum install ./cfx-1.02.1-1.x86_64.rpm
or
bashCopy coderpm -ihv ./cfx-1.02.1-1.x86_64.rpm
Edit the configuration file:
bashCopy code/opt/cfx/etc/cfx.conf
The configuration should look like this:
lessCopy code[api] address = cloud.cyfox.com port = 4242 licensingUrl = https://uclmcfw9w4.execute-api.us-east-2.amazonaws.com/prod [general] logpath = /var/log/cfx.log debug = False
Restart the CYFOX agent:
Copy codesystemctl restart cfx
Install the license:
phpCopy code/opt/cfx/bin/cfx -a <activation key> -e <license key>
For Debian/Ubuntu
Download the CYFOX Agent package:
rubyCopy codewget -c https://download.cyfox.com/agent/linux/cfx_1.02.2-1_amd64.deb
Install the package:
arduinoCopy codeapt-get install cfx
Edit the configuration file:
bashCopy code/opt/cfx/etc/cfx.conf
The configuration should look like this:
lessCopy code[api] address = cloud.cyfox.com port = 4242 licensingUrl = https://uclmcfw9w4.execute-api.us-east-2.amazonaws.com/prod [general] logpath = /var/log/cfx.log debug = False
Restart the CYFOX agent:
Copy codesystemctl restart cfx
Install the license:
phpCopy code/opt/cfx/bin/cfx -a <activation key> -e <license key>
Repository Installation
For Rocky Linux, CentOS, Fedora, openSUSE, SUSE for SAP
Add the CYFOX repository:
perlCopy codecat << EOF > /etc/yum.repos.d/cyfox.repo [CyFox-Agent-\$basearch] name=CyFox-Agent-$basearch baseurl=https://rpm.cyfox.com/fedora/\$basearch enabled=1 gpgcheck=0 EOF
Install the CYFOX Agent:
Copy codednf install cfx
Edit the configuration file:
bashCopy code/opt/cfx/etc/cfx.conf
The configuration should look like this:
lessCopy code[api] address = cloud.cyfox.com port = 4242 licensingUrl = https://uclmcfw9w4.execute-api.us-east-2.amazonaws.com/prod [general] logpath = /var/log/cfx.log debug = False
Restart the CYFOX agent:
Copy codesystemctl restart cfx
Install the license:
phpCopy code/opt/cfx/bin/cfx -a <activation key> -e <license key>
For Debian/Ubuntu
Add the CYFOX repository:
bashCopy codewget -q -O - https://deb.cyfox.com/debian/key.gpg | apt-key add - echo "deb https://deb.cyfox.com/debian/ / " > /etc/apt/sources.list.d/cyfox.list
Update the package list:
sqlCopy codeapt update
Install the CYFOX Agent:
arduinoCopy codeapt-get install cfx
Edit the configuration file:
bashCopy code/opt/cfx/etc/cfx.conf
The configuration should look like this:
lessCopy code[api] address = cloud.cyfox.com port = 4242 licensingUrl = https://uclmcfw9w4.execute-api.us-east-2.amazonaws.com/prod [general] logpath = /var/log/cfx.log debug = False
Restart the CYFOX agent:
Copy codesystemctl restart cfx
Install the license:
phpCopy code/opt/cfx/bin/cfx -a <activation key> -e <license key>
Important Notes
For On-Prem installations, the same instructions apply, but the
licensingUrlshould be omitted from the configuration file, and there is no need for a license installation step.