Skip to content

Debian and Ubuntu

Install the Runtime Sensor from Endura’s signed APT repository on Debian, Ubuntu, and compatible derivatives.

Prerequisites

  • Debian 12 or 13; Ubuntu 24.04, 25.10, or 26.04; or a compatible derivative
  • Root or sudo access
  • systemd
  • Linux kernel 5.11 or later with BTF at /sys/kernel/btf/vmlinux
  • At least 1 GB of available memory
  • An Endura license key
  • Team Server URL and Runtime Sensor token for centralized management

Install 

curl -sSf https://repo.endurasecurity.com/install/endura-sensor/testing.sh | sudo sh
endura version

The installer configures APT and systemd. APT authenticates signed repository metadata and checks package checksums on installation and update.

Configure

Edit /opt/endura/sensor/environ and set:

ENDURA_LICENSE_KEY=your_license_key
ENDURA_TEAM_SERVER=https://team-server.example.com
ENDURA_SENSOR_TOKEN=your_sensor_token

Standalone use needs only the license. For Team Server, obtain an Administrator-issued token. Protect the file:

sudo chown root:root /opt/endura/sensor/environ
sudo chmod 600 /opt/endura/sensor/environ

See Configuration for optional variables.

Start and Verify 

sudo systemctl enable --now endura-sensor
sudo systemctl status endura-sensor --no-pager
endura sensor wait
endura sensor status

Expect ok, then the Sensor’s connectivity status. On startup failure, check the license and service journal.

In Team Server, check Runtime Sensors. Deployments and workloads appear after a manually started workload is reported.

Operate the Service 

sudo systemctl restart endura-sensor
sudo systemctl stop endura-sensor
sudo journalctl -u endura-sensor -f
sudo endura sensor hooks

Update

Drain protected work before updating; restarts end enforcement and active jobs. Restart jobs after readiness and hook checks.

sudo apt update
sudo apt install --only-upgrade endura-sensor
endura version
sudo systemctl status endura-sensor

Package upgrades restart a running Sensor and leave a stopped one stopped. Review compatibility before major updates.

Uninstall

Remove the package while retaining configuration:

sudo apt remove endura-sensor

To remove package-managed configuration as well:

sudo apt purge endura-sensor

Back up configuration or logs before removing /opt/endura/sensor or /var/log/endura manually.

Troubleshooting

Service Does Not Start 

sudo systemctl status endura-sensor --full
sudo systemctl status endura-kernel-filesystems --full
sudo journalctl -u endura-sensor -n 100
test -r /sys/kernel/btf/vmlinux && echo "BTF available"
uname -r

Check the first startup error, license, configuration permissions, and kernel support. Review AppArmor denials with sudo journalctl -k | grep -i apparmor when applicable.

Team Server Is Offline 

curl -v https://team-server.example.com/_readiness
getent hosts team-server.example.com

Confirm outbound TCP 443 and certificate trust. See Team Server Compatibility for an incompatible state.

APT Cannot Update the Package 

apt-cache policy endura-sensor
sudo apt update

Confirm the Endura repository is enabled and its signing key is trusted.

CentOS StreamConfiguration