Installing the ASGARD Agent Manually

Last update: 2026-02-13
Last verified version: AMC 3.2.1

This article explains how to manually install the ASGARD agent. For example, this method can bypass CIS benchmark restrictions that block executions from the /var/tmp partition.

The following instructions apply to Rocky Linux 9 with SELinux enabled.

1. Upload the appropriate RPM package, downloaded from your ASGARD Management Center, to your asset's root folder.

2. Unpack the RPM package:

su
cd /root
rpm2cpio asgard2-agent-linux-amd64.rpm | cpio -idmv

3. Copy the unpacked files into their designated directories:

cp -a usr/. /usr/
cp -a var/. /var/

4. Set SELinux to permissive mode (if active) and clear the SELinux audit log:

setenforce 0
truncate -s 0 /var/log/audit/audit.log

5. Install the asgard2 service and verify it is running:

var/lib/asgard2-agent/asgard2-agent -install
systemctl status asgard2-agent.service

6. Install the asgard2 service and check if he is running:

# var/lib/asgard2-agent/asgard2-agent -install
# systemctl status asgard2-agent.service

7. Run SELinux audit to check the issues in the audit file:

# audit2allow -w -a

8. Create a SELinux policy for the asgard2-agent.service and enable it:

# cat /var/log/audit/audit.log | grep AVC | grep denied | tail -1 | audit2allow -M asgard2-agent-service
# semodule -i asgard2-agent-service.pp

9. Initiate the relabeling of the whole system files and reboot the system:

# touch /.autorelabel
# reboot

10. Check if the asset requests the access to your AMC:

11. Perform a test scan