Installing the agent

• If Alpine is being run in a Docker container, you must start the container.
• Copy the agent keys for the site that you want the agent to be able to access. You will use the agent keys when configuring the Next-Gen WAF agent package.

If you are running Alpine in a Docker container, complete the following steps:

1. Add the following to your Dockerfile:

   FROM alpine:3.20
   ENV ALPINE_VERSION=3.20
   RUN wget https://apk.signalsciences.net/sigsci_apk.pub && \
   apk add --repository https://apk.signalsciences.net/${ALPINE_VERSION}/main --no-cache && \
   apk update

2. Verify the downloaded key contains the proper key by running the following command:

   $ openssl rsa -pubin -in /etc/apk/keys/sigsci_apk.pub -text -noout

   If the downloaded key contains the proper key, the expected output looks like the following:

   Public-Key: (2048 bit)
   Modulus:
      00:bb:23:1a:ef:0d:61:8f:8d:55:aa:ad:01:84:43:
      6c:46:42:42:ab:5b:ec:4e:4b:e2:e6:b6:e7:3d:45:
      b7:96:70:fe:16:95:aa:09:f1:90:82:40:e4:30:2b:
      9e:2a:03:e9:74:63:55:66:f0:db:8c:b9:5b:f8:45:
      5f:ad:4e:7a:14:da:02:83:c2:36:a0:84:74:a0:bb:
      f9:3f:03:c8:fe:80:6a:95:0c:17:22:55:40:30:18:
      51:d9:30:db:7c:1b:d0:06:4e:a9:51:1a:31:0e:33:
      f0:6e:ad:53:98:31:a5:ac:a3:a1:44:83:72:a1:ca:
      78:e3:24:70:ab:7a:0e:66:32:3b:f6:c9:90:16:dc:
      89:d0:52:7a:50:a8:f8:59:0a:34:12:2e:85:11:f5:
      80:0d:d4:7d:a7:7b:3b:d7:d9:1e:28:ed:bb:f7:08:
      2e:9f:73:a5:23:d8:53:b4:7e:21:dd:ae:92:4a:d0:
      5b:86:21:9c:82:05:21:29:eb:c1:ab:91:cd:1a:7b:
      95:6d:43:d3:1a:a9:62:2b:b0:95:9e:cf:18:82:64:
      02:f9:38:7e:7f:47:9f:d9:f3:ac:fd:2c:30:ff:75:
      b1:11:27:1c:7a:d6:ca:04:19:f8:31:80:42:e9:4a:
      0d:ab:d5:b8:ad:f2:35:31:a5:3f:98:19:99:fc:29:
      e8:4f
   Exponent: 65537 (0x10001)

To add the Amazon Linux 2023 package, run the following script:

$ sudo tee /etc/yum.repos.d/sigsci.repo <<-'EOF'
[sigsci_release]
name=sigsci_release
baseurl=https://yum.signalsciences.net/release/amazon/2023/$basearch
repo_gpgcheck=1
gpgcheck=1
enabled=1
gpgkey=https://yum.signalsciences.net/release/gpgkey https://dl.signalsciences.net/sigsci-agent/gpg.key
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
EOF

To add the Debian 11 - Bullseye package, run the following script:

$ sudo apt-get update
$ sudo apt-get install -y apt-transport-https wget gnupg
$ wget -qO - https://apt.signalsciences.net/release/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/sigsci.gpg
$ sudo echo "deb [signed-by=/usr/share/keyrings/sigsci.gpg] https://apt.signalsciences.net/release/debian/ bullseye main" | sudo tee /etc/apt/sources.list.d/sigsci-release.list
$ sudo apt-get update

To add the Red Hat/CentOS 9 package, run the following script:

$ sudo tee /etc/yum.repos.d/sigsci.repo <<-'EOF'
[sigsci_release]
name=sigsci_release
baseurl=https://yum.signalsciences.net/release/el/9/$basearch
repo_gpgcheck=1
gpgcheck=1
enabled=1
gpgkey=https://yum.signalsciences.net/release/gpgkey https://dl.signalsciences.net/sigsci-agent/gpg.key
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
EOF

To add the Ubuntu 24.04 - Noble package, run the following script:

$ sudo apt-get update
$ sudo apt-get install -y apt-transport-https wget gnupg
$ wget -qO - https://apt.signalsciences.net/release/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/sigsci.gpg
$ sudo echo "deb [signed-by=/usr/share/keyrings/sigsci.gpg] https://apt.signalsciences.net/release/ubuntu/ noble main" | sudo tee /etc/apt/sources.list.d/sigsci-release.list
$ sudo apt-get update

1. Run the following command to install the Next-Gen WAF agent package:

   $ sudo apk add sigsci-agent

2. Create an empty agent configuration file in the following directory: /etc/sigsci/agent.conf.
3. Add the agent keys for your site to the agent configuration file.

   accesskeyid = "AGENTACCESSKEYHERE"
   secretaccesskey = "AGENTSECRETACCESSKEYHERE"

4. Save the agent configuration file.

If you are running Alpine in a Docker container, run the following command to start the Next-Gen WAF agent:

$ /usr/sbin/sigsci-agent

If you are running Alpine in a VM or on a bare-metal server, run the following command to allow the agent to start on reboot:

$ sudo rc-update add sigsci-agent default

Then, start the agent by running any of the following commands:

$ sudo service sigsci-agent start
$ sudo rc-service sigsci-agent start
$ sudo /etc/init.d/sigsci-agent start