Installing the standalone software

This procedure applies only if you are installing the standalone software (.run file format).

Before you begin

You must be logged in as the root user or use sudo to complete this task.

Before you begin, download the Edge Gateway standalone file (apphost-<version>.run) from IBM Support Fix Central.

If it is not already installed, install the createrepo package:
sudo yum install -y createrepo
If it is not already installed, install the container-selinux package.
  • For example, for RHEL 7:
    sudo subscription-manager repos --enable=rhel-7-server-extras-rpms &&
    sudo yum install container-selinux
  • For example, for RHEL 8:
    sudo subscription-manager repos --enable=rhel-8-for-x86_64-appstream-rpms &&
    sudo yum install container-selinux

Procedure

  1. Make sure that your system is up to date with all of the required operating system security updates.
  2. If downloaded to a different machine, transfer the software package that you acquired from IBM Security to the system that is to host the Edge Gateway.
  3. Run the following firewall rules:
    systemctl start firewalld
    
    sudo firewall-cmd --permanent --zone=trusted --add-interface=cni0 &&
    sudo firewall-cmd --permanent --zone=trusted --add-interface=flannel.1 &&
    sudo firewall-cmd --permanent --zone=trusted --add-port=443/tcp &&
    sudo firewall-cmd --permanent --zone=trusted --add-port=6443/tcp &&
    sudo firewall-cmd --permanent --zone=trusted --add-port=10250/tcp
    sudo firewall-cmd --permanent --zone=public --add-port=22/tcp
    sudo firewall-cmd --reload &&
    systemctl restart firewalld
  4. Enter the following command to install the Edge Gateway, where <x.x.x> is the version number.
    sudo bash apphost-<x.x.x>.run

    The apphost-<x.x.x>.run file prompts you for the default Kubernetes k3s cluster settings. You can confirm by pressing the Y key to proceed, or change as described below.

    The default Kubernetes k3s cluster settings are:
    • Cluster CIDR is 10.42.0.0/16
    • Service CIDR is 10.43.0.0/16
    The command line options available are:
    • --cluster-cidr=<CIDR> to specify the cluster CIDR, such as 10.44.0.0/16
    • --service-cidr=<CIDR> to specify the service CIDR, such as 10.45.0.0/16
    • --yes to accept the default Kubernetes k3s cluster settings.

    To accept the default Kubernetes k3s cluster setting without requesting confirmation, enter the following with the two hyphens -- before the option:

    sudo apphost-<version>.run -- --yes

    To change the Kubernetes k3s cluster CIDR to 10.44.0.0/16, enter the following with the two hyphens -- before the option:

    sudo apphost-<version>.run -- --cluster-cidr=10.44.0.0/16

    To change the Kubernetes k3s cluster CIDR to 10.44.0/16 and the service CIDR to 10.45.0.0/16, enter the following with the two hyphens -- before the option:

    sudo apphost-<version>.run -- --cluster-cidr=10.44.0.0/16 --service-cidr=10.45.0.0/16

Results

The Edge Gateway image is successfully installed.