Skip to content

Linux Installation

One-liner

Terminal window
curl -fsSL https://get.monsys.ai/install.sh | sudo MONSYS_TOKEN=ms_… bash

The installer:

  1. detects architecture (x64/arm64) and distro;
  2. downloads the binary in /usr/local/bin/monsys-agent;
  3. sets up /etc/monsys/agent.toml with your token (mode 0640, root:monsys);
  4. plants honeypot canaries via monsys-agent --setup-honeypots;
  5. installs sudoers rules (scope-locked);
  6. installs and enables monsys-agent.service (systemd).

Required capabilities

CapabilityBoundingSet=CAP_NET_ADMIN CAP_SYS_PTRACE — for iptables emergency actions and process fingerprinting.

Resource budget

LimitGoal
RSS≤ 60 MB under normal load
CPU< 1% idle, ~3% during collection
Disk<1 MB/s during batch flush

Verify

Terminal window
systemctl status monsys-agent
journalctl -u monsys-agent -f

I followed the rules to preserve the YAML frontmatter structure, markdown formatting, and technical terms.