Skip to main content

Sensor via APT Package

Install on Debian based Linux via apt

1. Install curl and gnupg

sudo apt install gnupg

sudo apt install curl

2. Configure Linux host to access Levo apt repo

curl -fsSL https://us-apt.pkg.dev/doc/repo-signing-key.gpg | sudo gpg --dearmor -o /usr/share/keyrings/us-apt-repo-signing-key.gpg
echo \
"deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/us-apt-repo-signing-key.gpg] \
https://us-apt.pkg.dev/projects/levoai apt-levo main" \
| sudo tee -a /etc/apt/sources.list.d/artifact-registry.list > /dev/null
sudo apt update

3. Download/install Sensor artifacts

sudo apt install levo-ebpf-sensor=0.42.1

4. Start the Sensor

Please take a look at the Running the Sensor as a Systemd Service section for further instructions.


Sensor Lifecycle Management

Configure Satellite Address (host:port information)

The Satellite address is configured in /etc/levo/sensor/config.yaml. The default host:port for Satellite is localhost:4317.

Edit /etc/levo/sensor/config.yaml, and set satellite-url (under Satellite Settings) to the desired host:port value.

...
# --------------------------------------------------------------------------------------------
# Satellite Settings:
# --------------------------------------------------------------------------------------------
# host:port for the collector service receiving the sensor's API traces.
# mention the scheme http/https if you decide not to use gRPC for sensor satellite communication
satellite-url: <set to desired host:port value>
# --------------------------------------------------------------------------------------------
...

Configure sensor environment

The eBPF sensor environment is configured in /etc/default/levo-ebpf-sensor. The default env value is staging

Edit /etc/default/levo-ebpf-sensor, and set LEVO_ENV to the desired env value (eg. prod, qa)

# Environment Variables for levo-ebpf-sensor.service
MALLOC_CONF="background_thread:true,narenas:1,tcache:false,dirty_decay_ms:0,muzzy_decay_ms:0,abort_conf:true"
LEVO_ENV="staging"

A Sensor restart is required for this to take effect.

Start Sensor

# Note: The default config file is located at: '/etc/levo/sensor/config.yaml'
sudo systemctl start levo-ebpf-sensor

Get Sensor Status

sudo systemctl status levo-ebpf-sensor

Stop Sensor

sudo systemctl stop levo-ebpf-sensor

Check Sensor Logs

journalctl -u levo-ebpf-sensor.service -b -f --since "15min ago"

# If journalctl isn't providing logs, you can alternatively:
sudo cat syslog | grep 'levo-ebpf-sensor'

Show Sensor Config

cat /etc/levo/sensor/config.yaml

Uninstall Sensor

sudo apt remove --purge levo-ebpf-sensor
sudo apt clean

Manage Sensor Configuration

Please refer to Sensor Configuration, and Applying Configuration Changes.