Argus Server Offline Installation

Prerequisites

Linux x86_64 (Ubuntu 22.04 recommended; see OS compatibility for NixOS)
Docker & Docker Compose installed
Open ports: 32300, 9200, 5601, 9090, 9093, 8080..8085, 21, 20, 21100–21110 (or auto-fallback to high ports)

Extract to a target dir, e.g. /opt/argus-deploy/versions/<YYYYMMDD>
./server-install.sh (non‑root is supported: it will precreate minimal dirs and auto-fix Kibana/ES/Bind in containers)
./server-status.sh
./server-selfcheck.sh (on failure it auto-runs diagnose and writes logs under logs/)
./server-uninstall.sh to tear down

Loads local images (images/all-images.tar.gz)
Generates OS-compat override (security_opt: ["label=disable"], userns_mode: host, bind tmpfs:/run/named)
Starts server-only services: bind/master/es/kibana/ftp/prometheus/grafana/alertmanager/web-frontend/web-proxy
DNS Bootstrap:
- Ensure /private/argus/etc/dns.conf exists (write 172.31.0.2 if missing);
- Run /private/argus/etc/update-dns.sh in dependent containers so /etc/resolv.conf points to bind;
- Wait for *.argus.com hint files, then reload bind;
- Restart web‑proxy to re-render nginx resolver from dns.conf;
Writes logs/selfcheck.json as final summary

NixOS / non-xattr FS: containers run with security_opt: ["label=disable"] and userns_mode: host.
If you cannot use sudo, the installer will:
- create minimal data dirs (incl. private/argus/log/{elasticsearch,kibana}) with permissive perms when possible;
- ensure inside containers: Kibana data → /private/argus/log/kibana, Elasticsearch data → /private/argus/log/elasticsearch, and Bind rndc.key is generated. (Manual pre-creation scripts are no longer required.)

Run ./server-selfcheck.sh → see logs/selfcheck.json
Run ./server-diagnose.sh → produces timestamped logs:
- logs/diagnose_details_YYYYMMDD-HHMMSSZ.log
- logs/diagnose_error_YYYYMMDD-HHMMSSZ.log And updates diagnose_details.log/diagnose_error.log to the latest
Error lines are tagged [service][source], e.g. [kibana][http] /api/status=503

Common issues:

Kibana 503: wait cold start or fix DNS so es.log.argus.com resolves
web‑proxy 504: check nginx resolver includes 172.31.0.2 127.0.0.11
EACCES/locks: ensure sudo ./server-prepare-dirs.sh ran and ownership matches UID:GID