Manual Installation of the GravityZone Image on an Ubuntu Machine
GravityZone is a business security solution built from ground-up for virtualization and cloud to deliver security services to physical endpoints, mobile devices, virtual machines in private, public cloud and Exchange mail servers. GravityZone is one product with a unified management console to provide a single point for deploying, enforcing and managing security policies for any number of endpoints and of any type, in any location.
GravityZone Enterprise Security is delivered as a Linux Ubuntu self-configuring hardened virtual appliance, embedded into a virtual machine image, which you can import and run on any virtualization platform. By default, Bitdefender provides GravityZone under several formats, such as OVA, VHD or XVA. When the virtual environment uses an unsupported format, such as Amazon AMI, manual installation is an option.
This article aims to explain how to manually install GravityZone on an Ubuntu machine, when the provided virtual appliance format is not supported by the virtual environment.
RAM Memory: 16 GB
Processor: 8 vCPU
Free disk space: 120 GB (SSD highly recommended)
For more details, refer to GravityZone Installation Guide.
- On the physical server, install Ubuntu 16.04.4, with a valid internet connection from the link above.
- Select your location: C - no localization.
- Select country: Recommended America/US (recommended for initial deploy).
- Detect keyboard layout: No. Choose English (US) (recommended for initial deploy).
- Network: no special requirements (recommended DHCP for initial deploy).
- Setup users and passwords:
- Full name new user: bdadmin
- Username: bdadmin
- Password: [your desired bdadmin user password]
- Encrypt home directory: No.
- Choose time zone: any option, it will be later changed to UTC during GravityZone installation.
- Partition disks: Guided - use the entire disk and set up LVM. Then accept all the default settings and write changes to disk when asked to do so.
- Choose no automatic updates.
- Select to install only Standard system utilities and OpenSSH server.
Connect to the machine using SSH (username bdadmin) and follow these steps in the command line interface:
- Log in as root:
- Remove the Ubuntu repositories:
mv /etc/apt/sources.list /etc/apt/sources.list.orig
- Install the GravityZone repositories:
echo "deb https://download.bitdefender.com/repos/deb-hydra16-unified bitdefender non-free" > /etc/apt/sources.list.d/deb-hydra16-unified.list
- Install the GravityZone repositories key:
curl -sS http://download.bitdefender.com/repos/gzrepos.key.asc | apt-key add -
- Remove the i386 architecture from dpkg:
dpkg --remove-architecture i386
- Set DEBIAN_FRONTEND to noninteractive to silently complete the installation:
- Make sure that the appliance OS timezone is set to UTC:
timedatectl set-timezone UTC
timedatectl set-local-rtc false
- Disable the Ubuntu banners (they will be replaced by the specific GravityZone ones):
chmod -x /etc/update-motd.d/*
- Clean apt and update the packages to the GravityZone repo versions:
apt -yq dist-upgrade
- Install the GravityZone initial packages:
apt -yq --allow-unauthenticated install gzinstallwizard gzpackagemanager gzvasyncmanager gzvaupdater bitdefender-va-check
- Update installation system:
- Remove snapd and lxcfs:
apt autoremove --purge snapd lxcfs
- Remove any unneeded packages:
apt -yq autoremove
- Restart to complete the customization of the Ubuntu server into a GravityZone appliance:
Install roles from the console interface of the GravityZone appliance. For the administration of the GravityZone machine please use the following document: Bitdefender GravityZone Installation Guide.
Further on, if you want to install a standalone Security Server and you cannot use Bitdefender images to deploy it, you will need to manually install it in a similar manner to how you have installed the above GravityZone appliance. For details on the installation procedure of the Security Server, refer to this KB article.
For any other question regarding the GravityZone product please contact: [email protected]