Installation with installer script

It is recommended that you use the shell script installer. Using the installer is quicker and follows our conventions by default.

  1. Download the Airlock IAM installer script and transfer it to the target host. The latest Airlock IAM installer (airlock-iam-installer-<version>.sh) can be downloaded from https://techzone.ergon.ch/downloads/airlock-iam. This requires an Airlock Techzone account.
  2. Run the installer script as root: su # if this doesn't work, try running sudo su
    3. copy
    chmod u+x ./airlock-iam-installer-7.7.sh
./airlock-iam-installer-7.7.sh

The installer will print a preview of what the installation will do and wait for confirmation.
 

In summary, the following actions will be performed:

  • The Airlock IAM distribution will be installed to /opt/airlock-iam-<version>/ and linked to /opt/airlock-iam/
  • The default user is named airlock. If the user does not exist, a new user will be created. 
  • A configuration directory will be created in the users home. By default this will be in /home/airlock/iam.
    • In the configuration directory, a default instance named auth will be created.
    • The application-level configuration file will be /home/airlock/iam/instances/auth/instance.properties. See: Application parameters
  • Bash integration will be installed to ~/.bashrc and ~/.bash_completion.d/. By default, those files will be in /home/airlock.
    • The PATH will be set to allow for the "iam" command to be typed directly instead of "/opt/airlock-iam/bin/iam".
    • The default IAM_CONFIG_ROOT will be set to /home/airlock/iam. The "-c" options can therefore be omitted when using the CLI.
    • Bash auto/tab-completion will be enabled.

Once the installer has finished you may switch to the airlock user and start using the CLI:

copy
su - airlock
iam -h       # List available options and subcommands
iam init -h  # List available options for the "init" subcommand

iam run      # Launch the default "auth" instance in the foreground
iam systemd  # Create systemd service files for the default instance

Installer customization options

To see all available customization options, run the installer with the -h option:

copy
./airlock-iam-installer-7.7.sh -h

For automation and scripting, the installer can run without interaction/confirmation, with the -f option.

Unattended installation:

copy
./airlock-iam-installer-7.7.sh -f

The installation target, configuration directories, and the user name can be configured. In order to see all available customization options, run the installer with the -h option.