Arch Linux

Install the Sensor on Arch Linux from the signed generic TGZ. The installer also creates the systemd service.

Prerequisites

• Current 64-bit Arch Linux
• Root or sudo access
• systemd
• A supported kernel with BTF at /sys/kernel/btf/vmlinux
• At least 1 GB of available memory
• An Endura license key
• Team Server URL and Sensor token for centralized management

sudo pacman -S --needed curl gnupg

Install

curl -sSf https://repo.endurasecurity.com/install/endura-sensor/testing.sh | sudo -E sh
endura version
sudo systemctl status endura-sensor

The installer verifies the TGZ’s detached GPG signature before extraction. The service is installed but not started.

Configure

Edit /opt/endura/sensor/environ:

ENDURA_LICENSE_KEY=your_license_key
ENDURA_TEAM_SERVER=https://team-server.example.com
ENDURA_SENSOR_TOKEN=your_sensor_token

Create the token under Sensors in Team Server, then protect the file:

sudo chown root:root /opt/endura/sensor/environ
sudo chmod 600 /opt/endura/sensor/environ

See Configuration for optional variables.

Start and Verify

sudo systemctl enable --now endura-sensor
sudo systemctl status endura-sensor
endura sensor status
endura license verify

Confirm the Sensor and deployment appear in Team Server when centrally managed.

Operate the Service

sudo systemctl restart endura-sensor
sudo systemctl stop endura-sensor
sudo journalctl -u endura-sensor -f
sudo endura sensor hooks

Update

Re-run the signed installer. It preserves configuration and restarts the Sensor only if it was running before the update:

curl -sSf https://repo.endurasecurity.com/install/endura-sensor/testing.sh | sudo -E sh
endura version
sudo systemctl status endura-sensor

Review Team Server Compatibility before a major update.

Uninstall

sudo systemctl disable --now endura-sensor
sudo rm -f /etc/systemd/system/endura-sensor.service
sudo rm -f /etc/systemd/system/endura-sys-fs-bpf.mount
sudo rm -f /etc/systemd/system/endura-sys-kernel-security.mount
sudo systemctl daemon-reload

sudo rm -f /usr/bin/endura
sudo rm -r /opt/endura/sensor
sudo rm -r /var/log/endura

Troubleshooting

Service Does Not Start

sudo systemctl status endura-sensor --full
sudo journalctl -u endura-sensor -n 100
test -r /sys/kernel/btf/vmlinux && echo "BTF available"
uname -r

Check the first startup error, license, configuration permissions, and kernel support.

Team Server Is Offline

curl -v https://team-server.example.com/_readiness
getent hosts team-server.example.com

Confirm outbound TCP 443 and certificate trust. See Team Server Compatibility for an incompatible state.

Installer or Service Files Are Stale

systemctl cat endura-sensor
df -h /opt
gpg --version

Re-run the installer after confirming the TGZ can be verified and the target has space.