Skip to content

DOCS-3629 Added Alpine Linux to NGINX AIO #1831

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
egoverdovskaya-wallarm wants to merge 2 commits into
base: master
Choose a base branch
from
Open

DOCS-3629 Added Alpine Linux to NGINX AIO #1831

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
3c8b13a
DOCS-3629 Added Alpine Linux to NGINX AIO
egoverdovskaya-wallarm Dec 10, 2025
de9bc98
DOCS-3629 Fixed according to the comments
egoverdovskaya-wallarm Dec 11, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
31 changes: 29 additions & 2 deletions docs/latest/admin-en/installation-postanalytics-en.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,11 @@ To download all-in-one Wallarm installation script, execute the command:
=== "ARM64 version"
```bash
curl -O https://meganode.wallarm.com/6.7/wallarm-6.7.1.aarch64-glibc.sh
```
```
=== "x86_64 version of Alpine Linux"
```bash
curl -O https://meganode.wallarm.com/6.7/wallarm-6.7.1.x86_64-musl.sh
```

## Step 2: Prepare Wallarm token

Expand Down Expand Up @@ -66,6 +70,9 @@ To install postanalytics separately with all-in-one installer, use:

# If using the ARM64 version:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.aarch64-glibc.sh postanalytics

# If using the x86_64 version of Alpine Linux:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.x86_64-musl.sh postanalytics
```

The `WALLARM_LABELS` variable sets group into which the node will be added (used for logical grouping of nodes in the Wallarm Console UI).
Expand All @@ -77,6 +84,9 @@ To install postanalytics separately with all-in-one installer, use:

# If using the ARM64 version:
sudo sh wallarm-6.7.1.aarch64-glibc.sh postanalytics

# If using the x86_64 version of Alpine Linux:
sudo sh wallarm-6.7.1.x86_64-musl.sh postanalytics
```

## Step 4: Configure the postanalytics module
Expand Down Expand Up @@ -163,6 +173,9 @@ Once the postanalytics module is installed on the separate server:

# If using the ARM64 version:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.aarch64-glibc.sh filtering

# If using the x86_64 version of Alpine Linux:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.x86_64-musl.sh filtering
```

The `WALLARM_LABELS` variable sets group into which the node will be added (used for logical grouping of nodes in the Wallarm Console UI).
Expand All @@ -174,6 +187,9 @@ Once the postanalytics module is installed on the separate server:

# If using the ARM64 version:
sudo sh wallarm-6.7.1.aarch64-glibc.sh filtering

# If using the x86_64 version of Alpine Linux:
sudo sh wallarm-6.7.1.x86_64-musl.sh filtering
```

## Step 8: Connect the NGINX-Wallarm module to the postanalytics module
Expand Down Expand Up @@ -222,6 +238,10 @@ Once the configuration file changed, restart NGINX/NGINX Plus on the NGINX-Walla
```bash
sudo systemctl restart nginx
```
=== "Alpine Linux"
```bash
sudo rc-service nginx restart
```

## Step 9: Check the NGINX‑Wallarm and separate postanalytics modules interaction

Expand Down Expand Up @@ -334,6 +354,10 @@ To enable a secure SSL/TLS connection from the NGINX-Wallarm module to the posta
```bash
sudo systemctl restart nginx
```
=== "Alpine Linux"
```bash
sudo rc-service nginx restart
```
1. [Check the integration](#step-9-check-the-nginxwallarm-and-separate-postanalytics-modules-interaction).

### Mutual TLS (mTLS)
Expand Down Expand Up @@ -382,7 +406,10 @@ To enable mutual authentication, where both the NGINX-Wallarm module and the pos
```bash
sudo systemctl restart nginx
```

=== "Alpine Linux"
```bash
sudo rc-service nginx restart
```
1. On the postanalytics server, enable mTLS in `/opt/wallarm/wstore/wstore.yaml`:

```yaml
Expand Down
6 changes: 6 additions & 0 deletions docs/latest/updating-migrating/nginx-modules.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -95,6 +95,9 @@ To upgrade the end‑of‑life node (3.6 or lower), please use the [different in

# If using the ARM64 version:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.aarch64-glibc.sh filtering

# If using the x86_64 version of Alpine Linux:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.x86_64-musl.sh filtering
```

The `WALLARM_LABELS` variable sets group into which the node will be added (used for logical grouping of nodes in the Wallarm Console UI).
Expand All @@ -106,6 +109,9 @@ To upgrade the end‑of‑life node (3.6 or lower), please use the [different in

# If using the ARM64 version:
sudo sh wallarm-6.7.1.aarch64-glibc.sh filtering

# If using the x86_64 version of Alpine Linux:
sudo sh wallarm-6.7.1.x86_64-musl.sh filtering
```

## Step 6: Transfer NGINX and postanalytics configuration from old node machine to new
Expand Down
6 changes: 6 additions & 0 deletions docs/latest/updating-migrating/older-versions/nginx-modules.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -109,6 +109,9 @@ The module operation can cause [false positives](../../about-wallarm/protecting-

# If using the ARM64 version:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.aarch64-glibc.sh filtering

# If using the x86_64 version of Alpine Linux:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.x86_64-musl.sh filtering
```

The `WALLARM_LABELS` variable sets group into which the node will be added (used for logical grouping of nodes in the Wallarm Console UI).
Expand All @@ -120,6 +123,9 @@ The module operation can cause [false positives](../../about-wallarm/protecting-

# If using the ARM64 version:
sudo sh wallarm-6.7.1.aarch64-glibc.sh filtering

# If using the x86_64 version of Alpine Linux:
sudo sh wallarm-6.7.1.x86_64-musl.sh filtering
```

## Step 7: Migrate allowlists and denylists from the previous Wallarm node version to 6.x (only if upgrading node 2.18 or lower)
Expand Down
6 changes: 5 additions & 1 deletion include/waf/installation/all-in-one-installer-download.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,4 +12,8 @@ To download all-in-one Wallarm installation script, execute the command:
=== "ARM64 version"
```bash
curl -O https://meganode.wallarm.com/6.7/wallarm-6.7.1.aarch64-glibc.sh
```
```
=== "Alpine Linux x86_64 version"
```bash
curl -O https://meganode.wallarm.com/6.7/wallarm-6.7.1.x86_64-musl.sh
```
6 changes: 6 additions & 0 deletions include/waf/installation/all-in-one-installer-run.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,9 @@

# If using the ARM64 version:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.aarch64-glibc.sh

# If using the x86_64 version of Alpine Linux:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.x86_64-musl.sh
```

The `WALLARM_LABELS` variable sets group into which the node will be added (used for logical grouping of nodes in the Wallarm Console UI).
Expand All @@ -18,6 +21,9 @@

# If using the ARM64 version:
sudo sh wallarm-6.7.1.aarch64-glibc.sh

# If using the x86_64 version of Alpine Linux:
sudo sh wallarm-6.7.1.x86_64-musl.sh
```

1. Select [US Cloud](https://us1.my.wallarm.com/) or [EU Cloud](https://my.wallarm.com/).
Expand Down
7 changes: 6 additions & 1 deletion include/waf/installation/all-in-one-nginx-latest.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,4 +29,9 @@ Install the latest NGINX version of:
```bash
sudo yum -y update
sudo yum install -y nginx
```
```
=== "Alpine Linux"
```bash
doas -u root apk upgrade && doas -u root apk --no-cache --upgrade add sudo bash grep runuser
sudo apk add --no-cache nginx
```
6 changes: 6 additions & 0 deletions include/waf/installation/all-in-one-postanalytics.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,9 @@ To install postanalytics separately with all-in-one installer, use:

# If using the ARM64 version:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.aarch64-glibc.sh postanalytics

# If using the x86_64 version of Alpine Linux:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.x86_64-musl.sh postanalytics
```

The `WALLARM_LABELS` variable sets group into which the node will be added (used for logical grouping of nodes in the Wallarm Console UI).
Expand All @@ -18,4 +21,7 @@ To install postanalytics separately with all-in-one installer, use:

# If using the ARM64 version:
sudo sh wallarm-6.7.1.aarch64-glibc.sh postanalytics

# If using the x86_64 version of Alpine Linux:
sudo sh wallarm-6.7.1.x86_64-musl.sh postanalytics
```
1 change: 1 addition & 0 deletions include/waf/installation/all-in-one-requirements-latest.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@
* CentOS 7, 8 Stream, 9 Stream, 10 Stream
* Alma/Rocky Linux 9
* AlmaLinux 10
* Alpine Linux 3.14-3.22
* RHEL 8.x
* RHEL 9.x
* RHEL 10.x
Expand Down
16 changes: 16 additions & 0 deletions include/waf/installation/all-in-one/launch-options.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,9 @@ Below are examples of commands to run the script in batch mode for node installa

Copy link
Collaborator

@AnastasiaTWW AnastasiaTWW Dec 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

articles that should be changed in addition to the current diff

docs/latest/admin-en/installation-postanalytics-en.md
docs/latest/updating-migrating/nginx-modules.md
docs/latest/updating-migrating/older-versions/nginx-modules.md
include/waf/installation/all-in-one-postanalytics.md

# If using the ARM64 version:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.aarch64-glibc.sh -- --batch -t <TOKEN> -c US

# If using the x86_64 version of Alpine Linux:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.x86_64-musl.sh -- --batch -t <TOKEN> -c US
```
=== "EU Cloud"
```bash
Expand All @@ -47,6 +50,9 @@ Below are examples of commands to run the script in batch mode for node installa

# If using the ARM64 version:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.aarch64-glibc.sh -- --batch -t <TOKEN>

# If using the x86_64 version of Alpine Linux:
sudo env WALLARM_LABELS='group=<GROUP>' sh wallarm-6.7.1.x86_64-musl.sh -- --batch -t <TOKEN>
```

### Separate execution of node installation stages
Expand All @@ -69,6 +75,11 @@ This functionality is supported starting from version 4.10.0 of the all-in-one i
curl -O https://meganode.wallarm.com/6.7/wallarm-6.7.1.aarch64-glibc.sh
sudo sh wallarm-6.7.1.aarch64-glibc.sh -- --batch --install-only
sudo env WALLARM_LABELS='group=<GROUP>' /opt/wallarm/setup.sh --batch --register-only -t <TOKEN> -c US

# If using the x86_64 version of Alpine Linux:
curl -O https://meganode.wallarm.com/6.7/wallarm-6.7.1.x86_64-musl.sh
sudo sh wallarm-6.7.1.x86_64-musl.sh -- --batch --install-only
sudo env WALLARM_LABELS='group=<GROUP>' /opt/wallarm/setup.sh --batch --register-only -t <TOKEN> -c US
```
=== "EU Cloud"
```
Expand All @@ -81,6 +92,11 @@ This functionality is supported starting from version 4.10.0 of the all-in-one i
curl -O https://meganode.wallarm.com/6.7/wallarm-6.7.1.aarch64-glibc.sh
sudo sh wallarm-6.7.1.aarch64-glibc.sh -- --batch --install-only
sudo env WALLARM_LABELS='group=<GROUP>' /opt/wallarm/setup.sh --batch --register-only -t <TOKEN>

# If using the x86_64 version of Alpine Linux:
curl -O https://meganode.wallarm.com/6.7/wallarm-6.7.1.x86_64-musl.sh
sudo sh wallarm-6.7.1.x86_64-musl.sh -- --batch --install-only
sudo env WALLARM_LABELS='group=<GROUP>' /opt/wallarm/setup.sh --batch --register-only -t <TOKEN>
```

Finally, to complete the installation, you need to [enable Wallarm to analyze traffic][enable-traffic-analysis-step] and [restart NGINX][restart-nginx-step].
Expand Down
27 changes: 24 additions & 3 deletions include/waf/installation/restart-nginx-systemctl.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,26 @@
Restart NGINX using the following command:

```bash
sudo systemctl restart nginx
```
=== "Debian"
```bash
sudo systemctl restart nginx
```
=== "Ubuntu"
```bash
sudo systemctl restart nginx
```
=== "CentOS"
```bash
sudo systemctl restart nginx
```
=== "AlmaLinux, Rocky Linux or Oracle Linux"
```bash
sudo systemctl restart nginx
```
=== "RHEL"
```bash
sudo systemctl restart nginx
```
=== "Alpine Linux"
```bash
sudo rc-service nginx restart
```