- IraPass
- IraPodWatcher
- IraPodTracker
- CpaTracker
- Nats-server
NOTE: This setup runs IraCluster components as services instead of running within Kubernetes. If you are using the IraCPA set up with Kubernetes, please refer to the link below to uninstall the earlier versions before proceeding with the new installation steps. |
1. Download latest deb packages
Download the IraBase, IraCluster and IraCPA deb packages from the link below.
https://drive.google.com/drive/folders/1XWkIxQC9Dp4GoW_VxdudZq8PIcn7T9o7?usp=sharing
Change the current working directory to the directory with the downloaded debs.
2. Install latest version
a. Install irabase
sudo apt install ./irabase_XXXX.deb |
b. Generate nkeys
We will need two pairs of NKEYs for our NATS server. To generate a User NKEY, run the following command:
nk -gen user -pubout |
This will produce output similar to:
SUACSSL3UAHUDXKFSNVUZRF5UHPMWZ6BFDTJ7M6USDXIEDNPPQYYYCU3VY |
The first line starts with the letter S, indicating it is a Seed (private key).
The U represents that it’s for a User. The second line is the public key.
Run this command twice to generate two key pairs, and keep them handy for the next step.
c. Create config json
The latest versions of IraCluster and IraCPA expect a JSON configuration file located at /usr/local/epi/conf/common_config.json. The file should contain the necessary configuration details. The format of the JSON file is as follows:
|
{ "nats_conf": { }, "enable_log": true,
"app_log_level": "info"
} |
The nats_url can be set to 127.0.0.1 if the entire setup is running on a single machine. The two NKEY pairs generated in the previous step will be used in the following four lines of the configuration file.
Create irapass.json in the /usr/local/epi/conf/ directory with the below content:
{
"use_old_rsa_protocol": true
}
{ |
d. Install iracluster and iracpa
sudo apt install ./iracluster_XXX.deb |
e. Verify the services are running
|
systemctl status irapass systemctl status irapodtracker systemctl status irapodwatcher systemctl status cpatracker systemctl status iracpa |
f. Verify the installation
The log directory is /var/log/epi.
Check the latest IraPass log to ensure that the licence is acquired.
Check the latest IraCPA log and ensure that it has successfully connected to the NATS server and has joined IraCLuster.
g. Set CPA Config
The python script /usr/local/epi/scripts/py/set_cpa_config.py now has the additional configuration for amd_time_limit, which allows you to control the CPA analysis duration. The default is 1750 if not specified.
Set the required value for amd_time_limit and then run the python script activating the python virtual environment.
cd /usr/local/epi/scripts/py |
You can now connect to IraCPA over websocket and send streams for analysis.
3. Monitoring
The debs come with a command line monitor which can be used to see the count of licenses that are assigned and the count of active CPA sessions.
/usr/local/epi/scripts/LicenseMonitor.sh |