Install the DataNivra agent in your environment

Install methods

Docker, one command

Put the enrollment token in a tmpfs secrets directory readable only by uid 10001, then start the hardened container (read-only root filesystem, no capabilities, no published port). Nothing but Docker and the public image is needed; the console's Install agent page prints the same command with your control-plane address filled in:

sudo install -d -m 0700 -o 10001 -g 10001 /run/datanivra-secrets
# Paste the one-time enrollment token at the prompt (input is hidden, nothing is saved)
read -rsp 'Enrollment token: ' DATANIVRA_ENROLLMENT_TOKEN && echo
printf %s "$DATANIVRA_ENROLLMENT_TOKEN" | sudo install -m 0600 -o 10001 -g 10001 /dev/stdin /run/datanivra-secrets/enrollment-token
unset DATANIVRA_ENROLLMENT_TOKEN
docker run -d --name datanivra-agent --restart unless-stopped \
  --read-only --tmpfs /tmp --cap-drop ALL --security-opt no-new-privileges:true \
  -e DATANIVRA_AGENT_CONTROL_PLANE_URL=https://<your-control-plane-api> \
  -e DATANIVRA_AGENT_AGENT_NAME=<agent-name> \
  -e DATANIVRA_AGENT_SECRETS_DIR=/etc/datanivra/secrets \
  -e DATANIVRA_AGENT_ENROLLMENT_TOKEN_REF=file://enrollment-token \
  -v /run/datanivra-secrets:/etc/datanivra/secrets:ro \
  -v datanivra-agent-state:/var/lib/datanivra-agent \
  ghcr.io/manuelbomi/datanivra-agent@sha256:13590eaa85d789385f124b5c5a54446fc7561d1510b7893705d8d9a4816e882c

Behind a proxy set HTTPS_PROXY / NO_PROXY; with a TLS-inspecting proxy set CA_BUNDLE (Compose and Helm: DATANIVRA_AGENT_CA_BUNDLE).

Windows: the agent is a Linux container. On Windows, use Docker Desktop with the WSL 2 backend and run these commands in a WSL terminal (for example Ubuntu), not in PowerShell or the Command Prompt.

Docker Compose

Download and extract the Compose package, then follow the README.md in its directory (enrollment token file, .env from .env.example, docker compose up -d):

curl -fsSLO https://www.datanivra.com/downloads/agent/0.3.0/datanivra-agent-docker-compose-0.3.0.tar.gz
tar -xzf datanivra-agent-docker-compose-0.3.0.tar.gz
cd datanivra-agent-docker-compose-0.3.0/infra/agent-packages/docker-compose
# Now follow README.md in this directory

Kubernetes (Helm)

helm install datanivra-agent https://www.datanivra.com/downloads/agent/0.3.0/datanivra-agent-0.3.0.tgz \
  --set image.repository=ghcr.io/manuelbomi/datanivra-agent \
  --set image.digest=sha256:13590eaa85d789385f124b5c5a54446fc7561d1510b7893705d8d9a4816e882c

The same chart is published as a signed OCI artifact:

helm install datanivra-agent oci://ghcr.io/manuelbomi/charts/datanivra-agent --version 0.3.0 \
  --set image.repository=ghcr.io/manuelbomi/datanivra-agent \
  --set image.digest=sha256:13590eaa85d789385f124b5c5a54446fc7561d1510b7893705d8d9a4816e882c

The chart runs a single-replica StatefulSet (one agent identity per volume) and reads secrets as mounted Kubernetes Secrets. The Kubernetes manifests without Helm and the Terraform modules for your own Azure VNet and AWS VPC are in the packages listed above; each package explains its steps in a README.md, and the documentation package holds the runbooks.