Deployment
Silent installation on Windows, Linux and macOS, proxies, offline endpoints, upgrades and removal.
Updated
The agent is designed for unattended rollout with the tools you already use. Every installer accepts the enrolment token as a parameter and completes without a reboot.
Windows
Install the MSI silently. The token binds the endpoint to your tenant and site.
msiexec /i krupiq-agent-3.4.0.msi ENROL_TOKEN=<token> /qn /l*v C:\Windows\Temp\krupiq-install.logOptional properties: SITE=<site name> to override the site encoded in the token, PROXY=http://proxy.corp:8080 for an explicit proxy, and TAGS=finance,laptop for grouping in the console. Intune, SCCM and Group Policy can deploy the MSI with the same properties.
Linux
Packages are provided for Debian and Ubuntu (.deb) and for RHEL, Rocky, Alma and SLES (.rpm) on x64 and arm64. The agent runs as a systemd service.
sudo KRUPIQ_ENROL_TOKEN=<token> dpkg -i krupiq-agent_3.4.0_amd64.deb
sudo KRUPIQ_ENROL_TOKEN=<token> rpm -i krupiq-agent-3.4.0.x86_64.rpmA signed APT and YUM repository is available for organisations that prefer to manage upgrades through their package manager. Ansible and Puppet examples are included in the archive.
macOS
Deploy the .pkg with your MDM (Jamf, Kandji or Intune) together with the configuration profile from the archive, which pre-approves the system extension and network filter.
sudo installer -pkg krupiq-agent-3.4.0.pkg -target /
sudo krupiqctl enrol --token <token>Proxies and offline endpoints
Agents use the system proxy by default and honour PROXY or KRUPIQ_PROXY overrides. Endpoints that are offline remain fully protected: detection, isolation and rollback are local, and events are buffered until the console is reachable again.
Upgrades
Upgrades are staged from the console in rings (pilot, early, broad) and applied without a reboot. You can pin a ring to a specific version, and every update is signed and verified by the agent before it runs.
Removal
Tamper protection requires a time-limited removal code from the console:
msiexec /x krupiq-agent-3.4.0.msi REMOVAL_CODE=<code> /qnsudo krupiqctl uninstall --code <code>Verifying an installation
krupiqctl status prints the agent version, enrolment state, engine health and the time of the last console check-in. The same information is shown on the endpoint page in the console.