Pandora RC Installation
To install Pandora RC (formerly called eHorus), the installers must be downloaded according to the operating system used as a client.
Pandora RC installation in MS Windows
Normal installation for MS Windows
Download the agent for MS Windows® (32 or 64 bit CPU):
You need administrator permissions to install the Pandora RC agent. Once downloaded, decompress and run the installer. This agent has been tested on the available versions of MS Windows®, from Windows XP® to Windows 10®. Since the installer is not signed, it may show a warning on installation and then proceed with the installation.
The license terms must be accepted:
For normal installations click Typical. To change the installation directory, click Custom.
For normal installations click on Typical. To change the installation directory, click Custom.
In this screen you will need to enter the user name that you have in the Pandora RC platform so that the agent can provision and work correctly.
In addition, and very important, an agent password can be set for this installation. This password can be added or modified later. To set a password at this point, enter it in the Password to protect access to this computer text box (image above).
You will be asked if you want to start the Pandora RC agent on that machine and add a shortcut icon on the desktop:
If you have correctly configured the agent (setting the provision user) and the agent has internet connection, you can start using Pandora RC. The installation will be finished successfully.
You should see the Pandora RC status icon in the MS Windows® notification area:
The green icon means that the agent is running and provisioned. Red means that it could not be provisioned.
Right-clicking on the icon displays the following options:
You will only be able to stop/restart Pandora RC subcomponents if the manager (Pandora RC Agent Menu) has been started with Administrator privileges. A user without privileges cannot stop Pandora RC nor change its configuration. If you press Configuration you will be able to see the identifier of that machine. The EKID is a unique number for each host managed by Pandora RC.
This machine, already provisioned and connected, should be visible in the Pandora RC portal.
The Pandora RC agent has been installed as a service. This means that the machine, even if it is restarted, will start again the Pandora RC services and it will still be available.
Unattended installation on MS Windows
It runs with a privileged user, usually the “Administrator” user, with several parameters (all optional):
msiexec /i pandorarc_installer_windows-XX.msi /q PARAM1="value2" PARAM2="value2" ...
Example:
msiexec /i pandorarc_installer_windows-XX.msi /q EHUSER="userXXX" EHKEY="`d877cb3c-82de-4b27-8dbf-1761f3345e7c`" EHPASS="5555" EHORUSINSTALLFOLDER="C:\path\to\install" STARTEHORUSSERVICE="1" DESKTOPSHORTCUT="0"
Where:
- EHUSER: Pandora RC user.
- EHKEY: Unique key.
- EHPASS: Agent password.
- STARTEHORUSSERVICE: Start the agent at the end of the installation (default 1).
- DESKTOPSHORTCUT: Create a shortcut on the desktop (default 1).
- EHORUSINSTALLFOLDER: Folder where you want to install the agent (default
%ProgramFiles%\ehorus_agent
)
Important notice:
- The quiet installation of Pandora RC agent must always be executed from a terminal with administrator permissions.
- Hyphens are reserved character words in MSI installers, so you have to escape them. In the example given, EHKEY is escaped since in order for it to take the entire chain as a literal, you have to enter double quotation marks.
- EHORUSINSTALLFOLDER should not have single quotation marks inside the existing ones. Respect spaces only with double quotation marks, which are always necessary for this purpose.
- Microsoft Framework .NET 4.0® must be installed to run on Windows XP® and Windows Server 2003®:
MS Windows agent update
Like the other platforms (GNU/Linux®, macOS®) the MS Windows® agent can be updated centrally from the Web Console, but if it is required to be updated manually, it can be done with the same installation package. The system will detect that it is updating the software and will not overwrite the configuration files, updating only the code automatically.
GNU/Linux installation
Several RPM files are available depending on the RHEL version and processor architecture (32-bit or 64-bit). Installation on any version and architecture is similar.
Because the remote desktop is optional you will have to manually install some dependencies. It is possible that if you already have a desktop environment these dependencies are already installed. If it does not work, you should try to reinstall them, restart the Pandora RC agent and verify if it works.
Rocky Linux / RHEL 8
Install the following dependencies:
dnf install tigervnc-server gdm gnome-classic-session \
gnome-terminal nautilus-open-terminal control-center \
liberation-mono-fonts metacity libnsl
Install the RPM file (recommended):
yum install pandorarc_agent-el8-x64-XX.rpm
Or by tarball:
tar xvzf pandorarc_agent_linux-XX.tar.gz cd ehorus_agent/ ./ehorus_agent_installer --install
Pandora RC is not currently compatible with Wayland, so it should be disabled by placing the parameter WaylandEnable=False
in the file /etc/gdm/custom.conf
. This change may require a reboot.
You must manually configure the provisioning user in the file /etc/ehorus/ehorus_agent.conf
and start the service:
systemctl start pandorarc_agent_daemon
Rocky Linux / RHEL 9
Install the following dependencies:
dnf install \
tigervnc-server gdm \
gnome-classic-session \
gnome-terminal nautilus-open-terminal \
control-center liberation-mono-fonts gnome-kiosk libnsl
The RPM file is installed:
dnf install pandorarc_agent-el9-x64-XX.rpm
Or by tarball:
tar xvzf pandorarc_agent_linux-XX.tar.gz cd ehorus_agent/ ./ehorus_agent_installer --install
Pandora RC is not currently compatible with Wayland, so it should be disabled by placing the parameter WaylandEnable=False
in the file /etc/gdm/custom.conf
. This change may require a reboot.
Manually configure the provisioning user in the file:
/etc/ehorus/ehorus_agent.conf
And start the service:
systemctl start pandorarc_agent_daemon
Installation on Ubuntu 22.04
Because the remote desktop is optional, a number of dependencies will have to be installed manually. To do this, run the following command:
apt install tigervnc-standalone-server gnome-core gnome-panel \
gnome-settings-daemon metacity nautilus gnome-terminal
Run the following command with administrative permissions:
dpkg -i pandorarc_agent_installer-x64-1.X.X.deb
Or install the tarball if you prefer:
tar xvzf pandorarc_agent_linux-XX.tar.gz cd ehorus_agent/ ./ehorus_agent_installer --install
Manually configure the provisioning user in the file /etc/ehorus/ehorus_agent.conf
and restart the service:
/etc/init.d/pandorarc_agent_daemon start
It is possible that, if you already have a desktop environment, these dependencies are already installed. If you cannot connect to the desktop with Pandora RC the first time, try to reinstall them, restart the Pandora RC agent and check again.
Pandora RC is not currently compatible with Wayland, so you should disable it by setting the WaylandEnable=False
parameter in the file:
/etc/gdm3/custom.conf
This change may require a reboot.
Installing Pandora RC on GNU/Linux (Tarball)
Depending on the distro (Rocky Linux / RHEL 8], Rocky Linux / RHEL 9 or Ubuntu 22.04) the dependencies must be installed manually.
To know the processor architecture:
uname -p
If it shows x86_64
it is 64-bit, otherwise 32-bit.
After downloading, copy the tarball file (*.tgz) to a temporary directory, open a terminal window with root rights (via su
or sudo
):
sudo -s
Or:
su -
Execute where the tarball file was copied:
tar xvzf pandorarc_agent_linux-XX.tar.gz cd ehorus_agent/ ./ehorus_agent_installer --install
Additional installation options
Syntax:
./ehorus_agent_installer --install < option >
Options:
- To specify the user to which the agent will connect:
--eh_user < user >
- To specify the identification key to be used by the agent (only for advanced users):
--eh_key < key >
- So that the installer does not create the
ehorus
user (only recommended if you are not going to use the Display function):
--no_user
- Configure the custom temporary directory for the agent:
Useful in case you have the /tmp
directory (default) and it is mounted with the noexec
parameter:
--tmp_dir < custom_folder >
- Perform the entire installation without configuring the service and without starting it automatically when the computer starts:
--disabled
Execution of the service
The file /etc/ehorus/ehorus_agent.conf
is edited and the token eh_user
is replaced by its user in Pandora RC.
To start the service:
systemctl start pandorarc_agent_daemon
To stop the service:
systemctl stop pandorarc_agent_daemon
Tarball uninstallation
To uninstall a Pandora RC agent installed by tarball, it has to be executed:
./ehorus_agent_installer --uninstall
Installation on macOS
macOS 11 or later is supported.
Normal installation
This installer is fully graphical, and once the process is finished, it will register and stay running on the machine.
1. The installer for MacOS in .DMG format can be downloaded from the Pandora FMS website.
When opening this file you will find the Pandora RC installer named pandorarc_agent.pkg
which should also be opened.
2. You must accept the license terms and choose the installation folder, by default /usr/local/ehorus_agent/
(important).
3. Enter the user name previously created on the Pandora RC website.
4. It is recommended to provide a password to access the agent. This password is only used for your private use and is not stored in the Pandora RC website.
5. Access the Privacy & Security menu in Settings. The Accessibility, Screen Recording and Full Disk Access permissions should be assigned to the Pandora RC agent executable, located in the default directory /usr/local/ehorus_agent/
(or the different directory chosen in step number one, take into account for the following steps).
The Full Disk Access permission is optional, and is only required for file transfers.
These permissions can be assigned in two ways:
- Manually find the directory from the + button of the accessibility menu (the folder
/usr/local/
is a system folder, so to access it you must press the key combinationCMD + Shift + .
) and choose the fileehorus_agent
. - You can open the folder
/usr/local/ehorus_agent
(or the different directory chosen in step number one) in another window with the utility Finder (the key combinationCMD + Shift + G
) and drag and drop the executableehorus_agent
onto the corresponding permission in Settings.
Accessibility permits:
Screen recording permissions:
Data storage access permissions:
6. Once the three permissions have been added, the only thing left to do is to restart the Pandora RC agent. To do this, start Pandora RC Menu from the Applications menu, access the tray icon and activate the administrator actions by entering the respective password:
7. The menu is accessed again, the agent is stopped and restarted:
Installation by tarball
The installer for macOS in tarball format can be downloaded from the Pandora FMS website.
The file must be unzipped with:
tar -xvzf pandorarc_agent_installer-darwin-XXX.tgz
Enter the unzipped folder with:
cd ehorus_agent
It is recommended to install with a normal user (not root).
Install with:
./ehorus_agent_installer --install
Installation options
macOS has two custom options, one to specify the user to which the agent will connect:
--eh_user < user >
And another advanced option to specify the identification key to be used by the agent:
--eh_key < key >
Execution of the service
Start the service:
launchctl bootstrap system /Library/LaunchDaemons/com.pandorafms.pandorarc_agent.plist
Stop the service:
launchctl bootout system /Library/LaunchDaemons/com.pandorafms.pandorarc_agent.plist
Uninstalling Pandora RC on macOS
Access Programs and run the uninstaller named Pandora RC uninstaller.