Installing the Linux Sensor
The Linux Endpoint Sensor can be deployed to your endpoint devices manual installation or utilizing automated deployment methods.
Prerequisites
Linux Sensors are designed to run on supported distributions of Linux endpoint devices to monitor data movements in your environment.
Operating System and Hardware Requirements
When installing the Cyberhaven Linux sensor on systems that would support a single logged in user at any time the following specifications are required.
- Dual-core 64-bit Intel or AMD CPU
- Minimum 4 GB of RAM
- Minimum 300 MB GPU RAM
- Minimum 5 GB of free disk space
Supported Linux distributions and versions
| Distribution | Supported Versions | Minimum version requirements |
|---|---|---|
| Redhat Enterprise Linux (RHEL) | 8.6+ | 4.18.0-372 |
| Redhat Enterprise Linux (RHEL) | 9 | 5.14.0-70 |
| Oracle Enterprise Linux | 8.6+ | 4.18.0-372 |
| Oracle Enterprise Linux | 9 | 4.18.0-372 |
| Oracle Enterprise Linux | UEK R7+ | 5.14.0-70 |
| Ubuntu | 20.04 LTS | HWE kernel 5.15 |
| Ubuntu | 22.04 LTS | Default kernel 5.15 |
| Ubuntu | 22.04 LTS | HWE kernel 6.5 |
| Ubuntu | 24.04 LTS | Kernel 6.8 |
| Debian | 12 | 6.1 |
| Fedora | 40+ | 6.8 |
| Amazon Linux 2023 | 2023.0 + | 6.1 |
Dependencies
Network
Able to resolve the backend URL and connect to the Cyberhaven service over TCP port 443.
Security exclusions
Make sure to exclude all Linux Sensor-related files, folders, and processes from being scanned, monitored, or blocked by any security applications or tools. Review the full list of Sensor processes and paths,
Limitations
ARM processor support is not currently available for the Linux sensor.