Install & first run

Install Sysaro on Linux

The first Control Plane is self-hosted. The installer checks the platform and exposes the HTTPS panel; the Agent then registers the server as managed infrastructure.

Sysaro is downloaded from sysaro.webrove.tech and installed directly on the Linux server you want to manage. No domain, public IP or Let’s Encrypt certificate is required for the Control Plane: the installer creates a local CA, issues a certificate for the server's current IP addresses and exposes HTTPS on port 4000.
$ curl -fsSL https://sysaro.webrove.tech/install.sh | sudo sh
4000Control Plane HTTPS
0.0.0.0default LAN listen
not requireddomain / public IP
PHP 8.5AlmaLinux 10 profile

What the installer does

  • Detects architecture and downloads only artifacts pinned by SHA-256 for the current release.
  • On AlmaLinux 10 prepares the packages required for PHP 8.5 without disabling SELinux.
  • Installs the local Control Plane, MariaDB, nginx/PHP-FPM and the current Agent.
  • Creates a local TLS CA and a server certificate containing current server IP addresses; a domain stays optional.
  • Opens port 4000 in a supported active firewall when LAN listening is used.
  • Keeps the updater on hold until a signed Stable Agent is published, preventing an old Stable build from replacing the installed candidate.

After installation, open the URL printed by the installer, for example https://192.168.1.20:4000/. Import /etc/sysaro/pki/ca.crt on administrator devices if you want to remove the browser trust warning.