Installation and Update of Oplon Secure Access

• DELEGATED_USERNAME: falls back to USERNAME
• DELEGATED_PASSWORD: falls back to PASSWORD
• ZTNA_MODE: y or n, falls back to y

wget -N "https://www.oplon.net/OPLON_INSTALL_LASTUPDATE.sh" && \
USERNAME="root" \
PASSWORD="!1AdminAdmin" \
WORKSPACE_ADDRESS="0.0.0.0" \
ZTNA_MODE="n" \
DELEGATED_USERNAME="root" \
DELEGATED_PASSWORD="!1AdminAdmin" \
LICENSE="/path/to/license" \
bash OPLON_INSTALL_LASTUPDATE.sh

Use this method if:

• The system does not have Internet access
• You need to install a specific version (not the latest)
• You need to comply with corporate software distribution policies

Phase 1: Download necessary files

Perform these steps from a machine with Internet access:

1. Access the download page and download the .zip package of the desired version.

2. For first installation only: Also download the instscratch bootstrap files:

   # Replace VERSION with the downloaded version (e.g., OPLON_011_003_000)
   VERSION="OPLON_011_003_000"
    
   wget -N "https://download.oplon.net/private_members/${VERSION}/distributions/instscratch.sh"
   wget -N "https://download.oplon.net/private_members/${VERSION}/distributions/instscratchDocker.sh"

   The instscratch files are required only for the first installation on a new system. For updates of existing systems, you can skip this step.

3. Transfer all downloaded files to the destination server (use scp, USB, or other available method).

Phase 2: Installation on the server

1. Log in as root or use sudo for all following commands.

2. Create the /share directory (if it doesn’t exist) and assign correct permissions:

   mkdir -p /share && chmod 777 /share

3. Transfer all downloaded files to the /share directory.

4. Move to the /share directory:

   cd /share

5. Extract the package (replace ${VERSION} with the downloaded version):

   # Example: unzip OPLON_011_003_000_OPLON_NETWORKS_SUITE.zip
   unzip ${VERSION}_OPLON_NETWORKS_SUITE.zip

6. For first installation only: Run the bootstrap files:

   bash instscratch.sh && bash instscratchDocker.sh

   This step initializes the Docker environment and necessary dependencies. It is required only for new installations.

7. Run the update script:

   bash OPLON_INSTALL_UPDATE.sh

   For updates, environment variables are not required.

There are cases where you want to customize the configuration of Docker containers used by Oplon Secure Access. For example, to modify allocated resources, networks used, or recording paths.

Download OPLON_INSTALL_CONTAINERS.sh

# Replace VERSION with the downloaded version (e.g., OPLON_011_003_000)
VERSION="OPLON_011_003_000"
 
wget -N "https://download.oplon.net/private_members/${VERSION}/distributions/OPLON_INSTALL_CONTAINERS.sh"

Available parameters

The OPLON_INSTALL_CONTAINERS.sh script accepts the following optional parameters:

Usage examples

Change Docker network

bash OPLON_INSTALL_CONTAINERS.sh --changenet 172.18.0.0/16

Configure Browser Isolation listening address

# Listen on localhost (default case for single-node installation)
bash OPLON_INSTALL_CONTAINERS.sh --bilistner 127.0.0.1
 
# Listen on specific IP (case for dedicated multi-node browser isolation installation)
bash OPLON_INSTALL_CONTAINERS.sh --bilistner 192.168.1.100

Set memory limit for Browser Isolation

# 4GB limit (4096 MB)
bash OPLON_INSTALL_CONTAINERS.sh --bimemory 4096
 
# No memory limit
bash OPLON_INSTALL_CONTAINERS.sh --bimemory 0

Modify recording paths

# Change only RDP path
bash OPLON_INSTALL_CONTAINERS.sh --changerdlogpath /mnt/recordings/rdp
 
# Change only SSH path
bash OPLON_INSTALL_CONTAINERS.sh --changesshlogpath /mnt/recordings/ssh
 
# Change both paths
bash OPLON_INSTALL_CONTAINERS.sh \
  --changerdlogpath /mnt/recordings/rdp \
  --changesshlogpath /mnt/recordings/ssh