RHEL Setup Script¶
Setup RHEL for Running NodeZero¶
OVA is preferred
We highly recommend using our OVA for NodeZero installation, as it is the preferred method to ensure a seamless setup.
If deploying the NodeZero OVA is not a viable option for your infrastructure, Horizon3.ai provides a script to help set up a base Ubuntu 20.04/24.04 LTS for use with NodeZero.
Before Setting Up¶
If your environment restricts access to external sites through an outbound proxy or similar mechanism, please make sure that it allows connections to the following sites:
downloads.horizon3ai.com
Please see Red Hat Repository documentation and Red Hat CDN update
EDRs on NodeZero Host
Do not install or configure any EDR (Endpoint Detection and Response) services on the NodeZero host. EDRs are known to disable NodeZero once they detect the deliberately malicious actions that our tests conduct. To get a complete test of your overall environment, NodeZero attacks must launch from the host machine unimpeaded.
Downloads¶
Tip
Always verify the files download come from Horizon3.
NodeZero RHEL Setup Script¶
Running the Script¶
User permissions
A user with sudo permission is required. Do not install as root.
Download the script onto the host that is going to be running NodeZero, execute and run the script. After running the script it can be removed.
curl -o convert-rhel10.sh https://downloads.horizon3ai.com/utilities/convert-rhel10.sh
bash convert-rhel10.sh
sudo rm -f convert-rhel10.sh
System updates and reboots
Executing this script "as is" will update the OS libraries that do not require user interaction. The script will automatically reboot the OS upon completion.
What the Script Does¶
This script sets up RHEL with the required libraries for NodeZero to run successfully on the host machine. It sets the MOTD letting users that login know they are logging into a NodeZero host and it installs 2 utilities (h3-cli and n0)
h3-cli allows for communication and management of NodeZero on the host.
Host Utility enables management of the NodeZero hosts settings.
This script does the following:
- Disables systemd-journald
- Disables firewalld
- Updates the OS
- Installs the following libraries:
- wget,
- curl,
- nmap,
- tcpdump,
- bind-utils,
- jq,
- net-tools,
- cloud-init,
- telnet,
- traceroute,
- podman,
- hyperv-daemons,
- open-vm-tools
- Sets up Message of the Day (MOTD)
- downloads h3-cli
- downloads Host Utility
- Enables Rootless Podman