Manual installation of the GravityZone image on an Ubuntu machine
GravityZone is a business security solution built from ground-up for virtualization and cloud to deliver security services to physical endpoints, mobile devices, virtual machines in private, public cloud and Exchange mail servers. GravityZone is one product with a unified management console to provide a single point for deploying, enforcing and managing security policies for any number of endpoints and of any type, in any location.
GravityZone Enterprise Security is delivered as a Linux Ubuntu self-configuring hardened virtual appliance, embedded into a virtual machine image, which you can import and run on any virtualization platform. By default, Bitdefender provides GravityZone under several formats, such as OVA, VHD or XVA. When the virtual environment uses an unsupported format, such as Amazon AMI, manual installation is an option.
This article aims to explain how to manually install GravityZone on an Ubuntu machine, when the provided virtual appliance format is not supported by the virtual environment.
RAM Memory: 16 GB
Processor: 8 vCPU
Free disk space: 120 GB (SSD highly recommended)
For more details, refer to GravityZone Installation Guide.
A valid internet connection
On the server machine, install Ubuntu 20.04 from the link above, and configure the installation setup as follows:
- Language: English
Recommended for initial deploy with no issues. You can change it afterwards from the GravityZone setup wizard.
- Update to new installer: Yes, if prompted by the setup.
- Detect keyboard layout: No. Choose English (US).
Recommended for initial deploy.
- Network: DHCP
Recommended for initial deploy. You can change it afterwards from the GravityZone setup wizard.
GravityZone is not fully compatible with a multihomed scenario, bonding and vlan vNICS. We recommend using a single NIC configuration.
- Proxy address: Leave blank.
We recommend installing through a direct internet connection, if possible.
- Mirror: Leave the default value
- Partition disks: Use the entire disk and set up LVM. Accept all the default settings and write changes to disk when asked to do so.
DO NOT encrypt disks with LUKS or other solutions.
- Setup users and passwords:
- Full name new user: bdadmin
- Username: bdadmin
- Password: Your desired bdadmin user password
- Server name: gzva (You can change the hostname of the GravityZone appliance afterwards, from the GravityZone setup wizard.)
- Install OpenSSH server: Yes
- Featured server snaps: None
- Choose no automatic updates, if prompted.
- Wait for the setup and security updates to fully complete.
- Reboot the server when the option is available in the menu.
- Connect to the server via SSH, with the bdadmin user.
- Log in as root:
$ sudo -i
- Configure networking and replace netplan with ifupdown:
# sed -ri 's#^GRUB_CMDLINE_LINUX_DEFAULT=.*#GRUB_CMDLINE_LINUX_DEFAULT="netcfg/do_not_use_netplan=true net.ifnames=0 biosdevname=0 console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 rootdelay=300"#' /etc/default/grub # update-grub2 # apt -yq install ifupdown # echo -e 'auto lo\niface lo inet loopback\n\nauto eth0\niface eth0 inet dhcp' > /etc/network/interfaces # apt -yq install resolvconf # ln -sf /run/resolvconf/resolv.conf /etc/resolv.conf # systemctl disable systemd-resolved
- Remove the Ubuntu repositories:
# mv /etc/apt/sources.list /etc/apt/sources.list.orig
- Install the GravityZone repositories:
# echo "deb https://download.bitdefender.com/repos/deb-hydra20-unified bitdefender non-free" > /etc/apt/sources.list.d/deb-hydra20-unified.list
- Install the GravityZone repositories key:
# curl -sS http://download.bitdefender.com/repos/gzrepos.key.asc | apt-key add -
- Set DEBIAN_FRONTEND to noninteractive to silently complete the installation:
# export DEBIAN_FRONTEND="noninteractive"
- Make sure that the appliance OS timezone is set to UTC:
# timedatectl set-timezone UTC # timedatectl set-local-rtc false
- Disable the Ubuntu banners (they will be replaced by the specific GravityZone ones):
# chmod -x /etc/update-motd.d/*
- Clean apt and update the packages to the GravityZone repository versions:
# apt clean # apt update # apt -yq dist-upgrade
- Install the GravityZone initial packages:
# apt -yq --allow-unauthenticated install gzinstallwizard
- Update installation system:
- Remove snapd:
# apt autoremove --purge snapd
- Remove any unneeded packages:
# apt -yq autoremove
- Restart to complete the customization of the Ubuntu server into a GravityZone appliance:
For the administration of the GravityZone appliance, refer to Bitdefender GravityZone Installation Guide.
Further on, if you want to install a Security Server and you cannot use Bitdefender images to deploy it, you will need to manually install it in a similar manner to how you have installed the above GravityZone appliance. For details on the installation procedure of the Security Server, refer to this KB article.
For any other question regarding the GravityZone product contact Bitdefender Enterprise Support: [email protected]