You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/book/src/installation/guest/linux.rst
+12-11Lines changed: 12 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,6 +2,7 @@
2
2
Installing the Linux guest
3
3
==========================
4
4
5
+
Linux guests doesn't have official CAPAE support!
5
6
First, prepare the networking for your machinery platform on the host side.
6
7
7
8
.. This has not been tested recently:
@@ -36,7 +37,7 @@ Preparing x32/x64 Linux guests
36
37
.. warning::
37
38
38
39
For Linux guests on an Azure hypervisor, installing Python3 32-bit breaks the way that the Azure agent starts: https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/agent-linux#installation.
39
-
So the use of the monitor is limited to what can be run with the 64-bit version of Python3. You will have to comment out the architecture check in the CAPE `agent.py` for the CAPE agent to start. To
40
+
So the use of the monitor is limited to what can be run with the 64-bit version of Python3. You will have to comment out the architecture check in the CAPE `agent.py` for the CAPE agent to start. To
40
41
reiterate, this warning is only relevant if you are using an Azure hypervisor.
41
42
42
43
x32 guests
@@ -45,10 +46,10 @@ Install support file dependencies::
45
46
46
47
$ sudo apt update
47
48
$ sudo apt install python3-pip systemtap-runtime
48
-
$ pip3 install pyinotify
49
-
$ pip3 install Pillow # optional
50
-
$ pip3 install pyscreenshot # optional
51
-
$ pip3 install pyautogui # optional
49
+
$ sudo pip3 install pyinotify
50
+
$ sudo pip3 install Pillow # optional
51
+
$ sudo pip3 install pyscreenshot # optional
52
+
$ sudo pip3 install pyautogui # optional
52
53
53
54
x64 guests
54
55
----------
@@ -60,11 +61,11 @@ Install support file dependencies (we need Python3 32-bit)::
Ensure the agent automatically starts. The easiest way is to add it to crontab::
70
71
@@ -118,4 +119,4 @@ docker image tag aquasec/tracee:0.20.0 aquasec/tracee:latest
118
119
119
120
Afterwards, enable Tracee using the appropriate options in auxiliary.conf and processing.conf and install the [CAPEv2 Community Repo](https://github.com/CAPESandbox/community). Here is a guide: https://capev2.readthedocs.io/en/latest/usage/utilities.html#community-download-utility.
120
121
121
-
Tracee should be able to automatically highlight events such as fileless execution and syscall hooking.
122
+
Tracee should be able to automatically highlight events such as fileless execution and syscall hooking.
0 commit comments