Installing the Sensor on CoreOS

You can install the Qualys Container Sensor on CoreOS. Download the QualysContainerSensor.tar.xz file using the Download Container Sensor button on the Home page or from the Configurations > Sensors tab on Qualys Enterprise TruRisk™ Platform.

Copy the file to the target host. Then run the following commands in sequence.

This command extracts the tar file:
sudo tar -xvf QualysContainerSensor.tar.xz

This command creates the directory where the sensor data like configuration, manifest, logs, and setup is stored:
sudo mkdir -p /var/opt/qualys/sensor/data

 

You need to set the directory path /var/opt/qualys/sensor/data to Storage which is writable on CoreOS.

This command provides required permissions to the directory to run the installer script:
sudo chmod -R 777 /var/opt/qualys/sensor/data

 

The following commands install the sensor. Notice that the command includes the Activation ID and your Customer ID, both generated based on your subscription. The Storage parameter specifies where to install the sensor.

Use the following command to install a General Sensor:
Sudo ./installsensor.sh ActivationId=d5814d5f-5fd2-44ec-8969-e03cc58a4ef5 CustomerId=6f35826e-4430-d75e-8356-c444a0abbb31 Storage=/var/opt/qualys/sensor/data/ -s 

 

Use the following command to install a Registry Sensor:
Sudo ./installsensor.sh ActivationId=d5814d5f-5fd2-44ec-8969-e03cc58a4ef5 CustomerId=6f35826e-4430-d75e-8356-c444a0abbb31 Storage=/var/opt/qualys/sensor/data/ -s --registry-sensor 

 

Use the following command to install a CI/CD Sensor:
Sudo ./installsensor.sh ActivationId=d5814d5f-5fd2-44ec-8969-e03cc58a4ef5 CustomerId=6f35826e-4430-d75e-8356-c444a0abbb31 Storage=/var/opt/qualys/sensor/data/ -s --cicd-deployed-sensor 

 

To install the Sensor without persistent storage, exclude the “Storage” option, and include the “--sensor-without-persistent-storage” option in the installer script. It is recommended to use the “--enable-console-logs” option along with “--sensor-without-persistent-storage” to preserve the logs as data is not available on host but stored at the /usr/local/qualys/qpa/data folder relative to the Sensor.

 

To know about InstallSensor shell script parameters, refer to Installsensor Shell Script Command Line Parameters.