Skip to content
Runtime Sensor
Deployment
Debian and Ubuntu

Debian and Ubuntu

Install the Sensor from Endura’s signed APT repository on Debian, Ubuntu, and compatible derivatives.

Prerequisites

  • Debian 12 or later, Ubuntu 24.04 or later, or a compatible derivative
  • Root or sudo access
  • systemd
  • A supported kernel with BTF at /sys/kernel/btf/vmlinux
  • At least 1 GB of available memory
  • An Endura license key
  • Team Server URL and Sensor token for centralized management

Install 

curl -sSf https://repo.endurasecurity.com/install/endura-sensor/testing.sh | sudo -E sh
endura version
sudo systemctl status endura-sensor

The installer configures the APT repository and signing key, installs endura-sensor, and creates the systemd service. APT verifies the package signature on installation and update.

Configure

Edit /opt/endura/sensor/environ and set:

ENDURA_LICENSE_KEY=your_license_key
ENDURA_TEAM_SERVER=https://team-server.example.com
ENDURA_SENSOR_TOKEN=your_sensor_token

Create the token under Sensors in Team Server, then protect the file:

sudo chown root:root /opt/endura/sensor/environ
sudo chmod 600 /opt/endura/sensor/environ

See Configuration for optional variables.

Start and Verify 

sudo systemctl enable --now endura-sensor
sudo systemctl status endura-sensor
endura sensor status
endura license verify

Confirm the Sensor and deployment appear in Team Server when centrally managed.

Operate the Service 

sudo systemctl restart endura-sensor
sudo systemctl stop endura-sensor
sudo journalctl -u endura-sensor -f
sudo endura sensor hooks

Update 

sudo apt update
sudo apt install --only-upgrade endura-sensor
endura version
sudo systemctl status endura-sensor

The package restarts a Sensor that was running before the update and leaves a stopped Sensor stopped. Review Team Server Compatibility before a major update.

Uninstall

Remove the package while retaining configuration:

sudo apt remove endura-sensor

To remove package-managed configuration as well:

sudo apt purge endura-sensor

Back up configuration or logs before removing /opt/endura/sensor or /var/log/endura manually.

Troubleshooting

Service Does Not Start 

sudo systemctl status endura-sensor --full
sudo journalctl -u endura-sensor -n 100
test -r /sys/kernel/btf/vmlinux && echo "BTF available"
uname -r

Check the first startup error, license, configuration permissions, and kernel support. Review AppArmor denials with sudo journalctl -k | grep -i apparmor when applicable.

Team Server Is Offline 

curl -v https://team-server.example.com/_readiness
getent hosts team-server.example.com

Confirm outbound TCP 443 and certificate trust. See Team Server Compatibility for an incompatible state.

APT Cannot Update the Package 

apt-cache policy endura-sensor
sudo apt update

Confirm the Endura repository is enabled and its signing key is trusted.

CentOS StreamDocker