Install: Linux

System Requirements

• Distributions: Ubuntu 20.04+, CentOS 7+, RHEL 7+, Debian 10+
• Architecture: x64 (Intel/AMD) or arm64 (ARM)
• RAM: 256 MB minimum
• Disk: 500 MB
• Network: Internet connectivity
• Sudo Rights: Required for installation

Installation (Debian/Ubuntu)

Step 1: Add Repository

# Add TruthVouch repository key
curl -fsSL https://repo.truthvouch.io/apt/gpg.key | sudo gpg --dearmor -o /usr/share/keyrings/truthvouch-archive-keyring.gpg

# Add repository
echo "deb [signed-by=/usr/share/keyrings/truthvouch-archive-keyring.gpg] https://repo.truthvouch.io/apt/ focal main" | sudo tee /etc/apt/sources.list.d/truthvouch.list

Step 2: Install Package

# Update package list
sudo apt update

# Install Sentinel
sudo apt install sentinel-agent

# Start service
sudo systemctl start sentinel-agent
sudo systemctl enable sentinel-agent  # Auto-start on boot

Step 3: Configure

Create config file:

sudo nano /etc/truthvouch/sentinel/config.yaml

Example:

organization_id: org_123
user_email: user@company.com

monitoring:
  monitor_chatgpt: true
  monitor_claude: true
  monitor_copilot: true

reporting:
  auto_upload: true
  upload_interval_minutes: 60

dlp:
  enabled: true
  block_pii: true

Restart service:

sudo systemctl restart sentinel-agent

Installation (RHEL/CentOS/Fedora)

Step 1: Add Repository

# Add TruthVouch repository
sudo yum-config-manager --add-repo https://repo.truthvouch.io/yum/truthvouch.repo

# Import key
sudo rpm --import https://repo.truthvouch.io/rpm/gpg.key

Step 2: Install

# Install package
sudo yum install sentinel-agent

# Start service
sudo systemctl start sentinel-agent
sudo systemctl enable sentinel-agent

Step 3: Configure

sudo nano /etc/truthvouch/sentinel/config.yaml
# (Same as Ubuntu above)

sudo systemctl restart sentinel-agent

Manual Installation

If repository not available:

# Download latest
wget https://repo.truthvouch.io/releases/sentinel-agent-latest-amd64.deb

# Install
sudo dpkg -i sentinel-agent-latest-amd64.deb

# Or for RPM
sudo rpm -ivh sentinel-agent-latest-x86_64.rpm

# Start service
sudo systemctl start sentinel-agent

Systemd Service

Sentinel runs as systemd service:

# Check status
sudo systemctl status sentinel-agent

# Start/stop
sudo systemctl start sentinel-agent
sudo systemctl stop sentinel-agent

# Restart
sudo systemctl restart sentinel-agent

# View logs
sudo journalctl -u sentinel-agent -f

# Enable auto-start
sudo systemctl enable sentinel-agent

Configuration Files

Key locations:

/etc/truthvouch/sentinel/           # Config directory
/etc/truthvouch/sentinel/config.yaml # Main config
/var/log/truthvouch/sentinel.log     # Logs
/var/lib/truthvouch/sentinel/        # Data/cache

Edit config:

sudo nano /etc/truthvouch/sentinel/config.yaml
sudo systemctl restart sentinel-agent

Updates

Automatic

Repository auto-notifies when updates available:

# Check for updates
sudo apt update  # Debian/Ubuntu
sudo yum check-update  # RHEL/CentOS

# Install latest
sudo apt upgrade sentinel-agent
sudo yum update sentinel-agent

Manual

# Download specific version
wget https://repo.truthvouch.io/releases/sentinel-agent-1.5.2-amd64.deb

# Install/update
sudo dpkg -i sentinel-agent-1.5.2-amd64.deb

# Restart
sudo systemctl restart sentinel-agent

Logging

View logs:

# Real-time logs
sudo journalctl -u sentinel-agent -f

# Last 100 lines
sudo journalctl -u sentinel-agent -n 100

# Errors only
sudo journalctl -u sentinel-agent -p err

# Full log file
sudo tail -f /var/log/truthvouch/sentinel.log

Debugging

Enable debug logging:

# Set environment variable
export SENTINEL_DEBUG=1

# Or in config:
sudo nano /etc/truthvouch/sentinel/config.yaml
# Add: debug: true

sudo systemctl restart sentinel-agent

Uninstall

# Debian/Ubuntu
sudo apt remove sentinel-agent
sudo apt purge sentinel-agent  # Also removes config

# RHEL/CentOS
sudo yum remove sentinel-agent

# Verify removed
sudo systemctl status sentinel-agent  # Should fail

Firewall Rules

If firewall blocks outbound:

# Allow HTTPS outbound (needed for policy sync, reporting)
sudo ufw allow out 443/tcp  # UFW (Ubuntu)
sudo firewall-cmd --permanent --add-port=443/tcp --zone=public  # Firewalld

# Optional: specific domains
# Allow outbound to app.truthvouch.io:443

Container Deployment

If running in Docker:

FROM ubuntu:22.04

# Install Sentinel
RUN apt-get update && apt-get install -y sentinel-agent

# Configure
COPY config.yaml /etc/truthvouch/sentinel/

# Start
CMD ["sentinel-agent", "--foreground"]

Run:

docker run -d \
  -v /etc/truthvouch:/etc/truthvouch \
  -v /var/log/truthvouch:/var/log/truthvouch \
  truthvouch/sentinel-agent:latest

Troubleshooting

Service not starting

# Check status
sudo systemctl status sentinel-agent

# View error logs
sudo journalctl -u sentinel-agent -n 50

# Check config syntax
sentinel-agent --validate-config /etc/truthvouch/sentinel/config.yaml

High CPU/Memory

# Monitor usage
top -p $(pgrep -f sentinel-agent)

# Reduce monitoring:
sudo nano /etc/truthvouch/sentinel/config.yaml
# Set: max_memory_mb: 200
# Disable screenshots

sudo systemctl restart sentinel-agent

Network issues

# Test connectivity
curl -I https://app.truthvouch.io

# Check DNS
nslookup app.truthvouch.io

# Test with curl
curl -v https://api.truthvouch.io/health

Support

• Logs: /var/log/truthvouch/sentinel.log
• Status: sudo systemctl status sentinel-agent
• Config: /etc/truthvouch/sentinel/config.yaml

Related Topics

• Sentinel Overview
• Windows Installation
• macOS Installation
• Configuration