Deploy Linux agent as part of a cloned drive image

Products

• Endpoint Protection

Issue/Introduction

Symantec Endpoint Protection (SEP) Linux agent needs to be deployed as part of a cloned drive image.

Environment

SEP 14.3 RU1 MP1 and above

Note: SEP 14.3 RU1 does not have "--image" option

Resolution

To deploy Endpoint Protection Linux agent as part of a cloned drive image, follow these steps on a base machine that will act as the source of the image:

1. Install Linux agent normally.
2. Run following command.
   

   ./LinuxInstaller -- --image

   Following is an example of result of above command:
   

   [root@xxxx Downloads]# ./LinuxInstaller -- --image
   Stopping Agent..
   ---------------------------------------------------------------------------
   Agent Configuration Tool version 6.10.0.9537
   ---------------------------------------------------------------------------
   IPS Feature not available. Cannot perform this action.
   Notice: Installation was ran  with –image switch to create a templated image such as Amazon AMI.Instance is ready for Image creation. Please DO NOT Reboot.
   Shutdown the machine at convenience.

3. Open /etc/caf/CAFConfig.ini with text editor and delete "source_id=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" line.
4. Shutdown OS as instructed.

 

Or you can create base image directly when you install Linux agent first time.

1. Install Linux agent by following command on clean OS.
   

   ./LinuxInstaller --image

   Following is an example of result of above command:
   

   [root@xxxx Downloads]# ./LinuxInstaller --image
   
   Configuring Repo (ent-shasta-rrs.symantec.com/linuxrepo) ..
   
   Symantec Agent for Linux
   Symantec Endpoint Protection (SEPM) 14.3.9537.9000
   
   Installing scripts package:
    Package                                  Version         Source
    ---------------------------------------- --------------- ------
    sdcss-scripts                            2.2.10-45       (repo)
   
   Installing packages:
    Package                                  Version         Source
    ---------------------------------------- --------------- ------
    sdcss-caf                                2.0.9-236       (repo)
    sdcss                                    6.10.0-9537     (repo)
    sdcss-kmod                               10.0.8-2550     (repo)
   
   
   Notice: Installation was ran  with –image switch to create
   a templated image such as Amazon AMI.
   Instance is ready for Image creation. Please DO NOT Reboot.
   Shutdown the machine at convenience.

2. Shutdown OS as instructed.

Additional Information

For SEP 14.3 MP1 and below, see How to deploy the Symantec Endpoint Protection Linux client as part of a cloned drive image.