Deploying Agents on Linux
Last updated: March 11, 2026
The Cyrisma Linux Agent is distributed as a Debian-compliant package (.deb) that can be installed on any supported Debian-based distribution using the Linux terminal. This guide walks you through downloading, preparing, installing, and registering the agent with your Cyrisma instance.
For OS-agnostic requirements (CPU, memory, network access, firewall rules), refer to the Global Scan Agent Requirements article.
1. Supported Linux Platforms (Debian-Based)
The .deb installer supports distributions that use a Debian-based kernel, including (but not limited to):
Ubuntu
Debian
Linux Mint
Pop!_OS
Kali Linux
2. Prerequisites
Before installing the Cyrisma Linux Agent:
Platform Requirements
Terminal access with sudo or root privileges
System must meet the Global Scan Agent Requirements
Network Requirements
Ensure outbound access on TCP 443 to:
.cyrisma.com
*.dataspotlite.comTLS/SSL inspection should bypass these domains.
Provisioning Requirements
You will need:
Your Installation Key
Your Cyrisma Instance URL (for example:
https://ccXXXXXX.cyrisma.com)
Both are found under Admin > Scan Agents in your Cyrisma instance.
3. Download the Cyrisma Agent Package
Log in to your Cyrisma instance.
Navigate to Admin > Scan Agents.
Download the CyBroker_Linux_Installer.deb file for Debian systems.
By default, the file is saved under:
~/Downloads
4. Move the Installer to /tmp
The installer must be executed from /tmp. Move it using:
sudo mv ~/Downloads/CyBroker_Linux_Installer.deb /tmp
5. Install the Cyrisma Agent via Terminal
Open a terminal window.
Navigate to
/tmp:
cd /tmp
Run the installation command, replacing the key and URL with your own:
export cy_key=XXXX-XXXX cy_url=https://ccXXXXXX.cyrisma.com; sudo -E apt install -y ./CyBroker_Linux_Installer.deb
Explanation of Variables
cy_key – Your Cyrisma installation key
cy_url – Your Cyrisma instance URL
The installer automatically uses these environment variables during setup.
6. Dependencies
The .deb package will automatically install any required dependencies.
No manual dependency installation is necessary.
7. Important Notes
Do Not Install via GUI
Double-click installation is not supported.
The agent must be installed through a terminal session to correctly process required environment variables and provisioning settings.
Instance Pairing / Registration
After installation is complete:
Log in to your Cyrisma instance.
Go to Admin > Scan Agents.
Provision the newly detected Linux agent just as you would with Windows or macOS agents.
Choose whether this agent is used for local-only scanning or network scanning.
Auto-Updates
The Linux agent auto-updates itself as new versions become available.