This section describes the decisions you need to make before installing the Validation Platform Actor. The following topics are included:
Choosing an Installation Method
You can choose one of the following methods to install the Validation Platform. Each method is described in more detail in the appropriate installation section.
- Easy Install
- This involves creating a bulk registration token and using it to install, configure, and register the Actor. You must meet prerequisites to install this way. See Easy Actor Installation for more information.
- Interactive Method
- Installation Wizard: The installation wizard provides you with an interactive tool for installing the Validation Platform. The installation wizard will prompt you to provide responses for the following variables: the user account that will be used to run services, the interface to be used for communication, and the repository from which installer packages will be accessed. See
- Automated Method
- Direct install using flags: Install using a single command with flags that define your variables.
- Direct install with an ini file: Install using a command that uses a configuration (.ini) file that specifies variable response.
Handling Software Dependencies
Installing Security Validation Platform components requires that package dependencies be available from an external source. You can use the recommended option of an online repository.
Use an online repository
We recommend configuring the host machine to use an authoritative online repository. Using a repository maintained by the vendor for your operating system is easiest, as Red Hat Enterprise Linux (RHEL) 7 and CentOS7 builds are updated frequently. However, you can alternatively point to a local repository within your network, if your security policy precludes you from using an internet source.
- Using an online Repo is the only option if you are using an RHEL7 machine. In addition, you also must provide access to an EPEL repo.
- While Director installation on an RHEL8 system is supported, we do not supply RHEL8 packages as part of the installer. if you're an RHEL8 customer, you must have a licensed RHEL8 system configured with the RedHat repositories, and the EPEL8 repository configured on the system that you are attempting to install upon.
For information about configuring online repositories, see the vendor documentation for your operating system.
Use the Validation platform offline repository
For environments without access to online repositories, the Security Validation team provides an optional offline repository that satisfies the Validation Platform's software dependencies. To use the offline repository, specify verodin as the repository during installation.
Use of the offline repository is generally not recommended, as it does not allow for timely security updates for mirrored packages. You might also encounter conflicts if you later connect the host machine to an online repository.
Specific dependencies
The following are optional packages that might be required, depending on the Actions you want to run or the Director configuration. If a different version of the packages exist or they cannot be found to install, you may receive a warning at the end of installation. This allows you address the issue and install them if required.
- CNTLM package dependencies
- krb5-workstation (kerberos)
Addressing Access Controls
If you have an access control in place that prevents new binaries from running, you will need to add several binaries to your Allow list at the beginning of the install process. To do this, process the following commands using elevated privileges.
$ psql
$ /usr/local/rvm/wrappers/ruby-2.6.5/rake
$ /usr/local/rvm/wrappers/ruby-2.6.5/ruby