Skip to main content
Version: v1.5.0

Linux

For those that prefer hands-on approach, you can as well manually install crowdsec.

Install our repositories​

Installing our repositories allows you to access the latest packages of the Security Engine and Remediation Components.

info

We are using packagecloud.io service. While curl | sudo bash can be convenient for some, alternative installation methods are available.

curl -s https://packagecloud.io/install/repositories/crowdsec/crowdsec/script.deb.sh | sudo bash

Install the Security Engine​

Before installing the package, you might want to check the ports that will be used.

apt install crowdsec

You now have the Security Engine running ! You can move forward and install a remediation component, or take a tour of the software beforehand !

Directories:

  • The application lives in the folder \etc\crowdsec using less than 0.5 MBytes of storage.
  • The data is stored in the folder \lib\crowdsec\data and needs around 97 MBytes of storage.
caution

Keep in mind that a CrowdSec package is only in charge of the "detection", and won't block anything on its own. You need to deploy a Remediation Component to enforce decisions.

Install a Remediation Component​

info

While we're suggesting to install the firewall remediation component it may not be best suited for your setup.

Please refer to remediation components section about different components we have.

apt install crowdsec-firewall-bouncer-iptables

Running CrowdSec on Raspberry Pi OS/Raspbian​

Please keep in mind that Raspberry Pi OS is designed to work on all Raspberry Pi versions. Even if the port target is known as armhf, it's not exactly the same target as the debian named armhf port.

The best way to have a CrowdSec version for such an architecture is to do:

  1. install golang (all versions from 1.20 will do)
  2. export GOARCH=arm
  3. export CGO=1
  4. Update the GOARCH variable in the Makefile to arm
  5. install the arm gcc cross compiler (On debian the package is gcc-arm-linux-gnueabihf)
  6. Compile CrowdSec using the usual make command
CrowdSec ConsoleCrowdSec Console