SUSE

Install the Runtime Sensor on openSUSE Leap from the signed generic TGZ. The installer does not use an RPM repository on SUSE-family systems.

Prerequisites

openSUSE Leap 15 or 16 on x86-64 (AMD64) hardware
Root or sudo access and systemd
Linux kernel 5.11 or later with BTF at /sys/kernel/btf/vmlinux
At least 1 GB of available memory
An Endura license key
Team Server URL and Runtime Sensor token for centralized management

Install the tools used by the installer:

sudo zypper install curl gpg2

Install

curl -sSf https://repo.endurasecurity.com/install/endura-sensor/testing.sh | sudo sh
endura version

The installer downloads the generic TGZ and its detached signature, verifies the archive with GPG, and extracts its files. It installs the systemd service but does not start it.

Configure

Edit /opt/endura/sensor/environ and set:

ENDURA_LICENSE_KEY=your_license_key
ENDURA_TEAM_SERVER=https://team-server.example.com
ENDURA_SENSOR_TOKEN=your_sensor_token

Standalone use needs only the license. For Team Server, obtain an Administrator-issued token. Protect the file:

sudo chown root:root /opt/endura/sensor/environ
sudo chmod 600 /opt/endura/sensor/environ

See Configuration for optional variables.

Start and Verify

sudo systemctl enable --now endura-sensor
sudo systemctl status endura-sensor --no-pager
endura sensor wait
endura sensor status

Expect ok, then the Sensor’s connectivity status. On startup failure, check the license and service journal.

In Team Server, check Runtime Sensors. Deployments and workloads appear after a manually started workload is reported.

Operate the Service

sudo systemctl restart endura-sensor
sudo systemctl stop endura-sensor
sudo journalctl -u endura-sensor -f
sudo endura sensor hooks

Update

Drain protected work before updating; restarts end enforcement and active jobs. Restart jobs after readiness and hook checks.

TGZ updates preserve /opt/endura/sensor/environ as 0600 and reload systemd metadata without restarting. Stop, reinstall, then start:

sudo systemctl stop endura-sensor
curl -sSf https://repo.endurasecurity.com/install/endura-sensor/testing.sh | sudo sh
sudo systemctl start endura-sensor
endura version
sudo systemctl status endura-sensor

If the service was intentionally stopped before the update, leave it stopped instead of running the start command.

Review Team Server Compatibility before a major update.

Uninstall

sudo systemctl disable --now endura-sensor
sudo systemctl stop endura-kernel-filesystems.service
sudo rm -f /etc/systemd/system/endura-sensor.service
sudo rm -f /etc/systemd/system/endura-kernel-filesystems.service
sudo systemctl daemon-reload

Configuration and log removal is permanent

After backing up required data, remove the Runtime Sensor paths:

sudo rm -f /usr/bin/endura
sudo rm -r /opt/endura/sensor
sudo rm -r /var/log/endura

Troubleshooting

Service Does Not Start

sudo systemctl status endura-sensor --full
sudo systemctl status endura-kernel-filesystems --full
sudo journalctl -u endura-sensor -n 100
test -r /sys/kernel/btf/vmlinux && echo "BTF available"
uname -r

Check the first startup error, license, file permissions, kernel support, and AppArmor denials when enabled.

Team Server Is Offline

curl -v https://team-server.example.com/_readiness
getent hosts team-server.example.com

Confirm outbound TCP 443 and certificate trust. See Team Server Compatibility for an incompatible state.

Installation Fails

gpg --version
df -h /opt
ldd /usr/bin/endura 2>/dev/null || true

Confirm that GPG is installed and the target filesystem has space.

RHEL, AlmaLinux, and Rocky Linux Configuration