it.ucsf.edu

BigFix Installation for Linux and Unix

Michael Kearns's picture

There are different instructions for installing BigFix depending on which distribution of Linux/Unix you are running. The table below includes installation tar files for the various distributions with separate files for installation on servers and workstations. The only difference between the server and workstation versions is a setting within the config file that categorizes the system as a server or a workstation when it first connects to the BigFix server.

Debian, SUSE, Solaris 9 and HPUX installers will be made available in the near future.

Operating System Server Installer Package Workstation Installer Package Instructions
CentOS / Red Hat 5/6/7 CentOS RHEL Instructions
Ubuntu 10/12/14 Ubuntu Instructions
Solaris 10   Solaris Instructions
Solaris 11   Solaris Instructions
AIX   AIX Instructions

Firewall Considerations

The BigFix client:

  • Communicates with a number of BigFix relay agents by initiating an outbound connection on TCP port 52311. Software firewalls such as iptables, and hardware perimeter firewalls that allow outbound TCP connections will not need to be modified. Those that do restrict outbound traffic should be modified to allow outbound connections on TCP port 52311.
  • Accepts inbound packets on UDP port 52311 from the relay agents. This communication informs the clients to check in with a relay agent by initiating an outbound TCP connection. Software and hardware firewalls should be configured to allow inbound UDP 52311 to facilitate this communication.
  • Sends outbound ICMP packets to determine the closest relay agent as measured by the number of network hops.

A complete description of BigFix communications is described at https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli+Endpoint+Manager/page/Network+Traffic+Guide

CentOS / Red Hat 5/6/7 Instructions

There are separate tar files for workstations and servers, and also separate tar files for 32 bit and 64 bit releases. Download the appropriate file for your system; the following instructions are specific to the 64 bit version. Update the RPM name if you are installing on a 32 bit system, all other commands are identical for 32 bit and 64 bit installations.

Untar and cd to install directory

  1. sudo rpm -ivh BESAgent-9.2.0.363-rhe5.x86_64.rpm
  2. sudo mkdir -p /etc/opt/BESClient
  3. sudo cp besclient.config /var/opt/BESClient
  4. sudo cp actionsite.afxm /etc/opt/BESClient
  5. sudo service besclient start
  6. sudo chkconfig besclient on --level 2345

Ubuntu Instructions

There are separate tar files for workstations and servers, Download the appropriate file for your system. An installer shell script is provided that will select the appropriate package and install the configuration files. To run the install script:

Untar and cd to install directory

sudo ./install.sh

If you prefer to manually install the client, the following instructions are equivalent to running the shell script. The dpkg command is specific to the 64 bit version. Update the package name if you are installing on a 32 bit system; all other commands are identical for 32 bit and 64 bit installations.

  1. sudo dpkg -i BESAgent-9.2.5.130-ubuntu10.amd64.deb
  2. sudo mkdir -p /etc/opt/BESClient
  3. sudo cp besclient.config /var/opt/BESClient
  4. sudo cp actionsite.afxm /etc/opt/BESClient
  5. sudo chown -R root:root /opt/BESClient
  6. sudo chown root:root /etc/init.d/besclient
  7. sudo chown -R root:root /var/opt/BESClient
  8. sudo chown -R root:root /etc/opt/BESClient
  9. sudo service besclient start

Solaris 10/11 Instructions

There are separate tar files for workstations and servers, and also separate tar files for SPARC and x86 architectures. Download the appropriate file for your system; the following instructions are specific to the Solaris 11 x86  version. Update the package name if you are installing on a SPARC system, or on Solaris 10. All other commands are identical between architectures and versions. 

Untar and cd to install directory

  1. sudo /usr/sbin/pkgadd -d BESAgent-9.2.5.130.x86_sol11.pkg
  2. sudo mkdir -p /etc/opt/BESClient
  3. sudo cp besclient.config /var/opt/BESClient
  4. sudo cp actionsite.afxm /etc/opt/BESClient

 

AIX Instructions

Untar and cd to install directory:

  1. sudo installp -agqYXd ./BESAgent-9.2.5.130.ppc64_aix61.pkg BESClient
  2. sudo cp actionsite.afxm /etc/opt/BESClient/actionsite.afxm
  3. sudo cp besclient.config /etc/opt/BESClient/besclient.config
  4. sudo /etc/rc.d/rc2.d/SBESClientd start