Zwall
Talk to an Engineer
Talk to an Engineer
Documentation
Docs Home › Getting Started › System Requirements

System Requirements

Status: mix of SUPPORTED facts and NOT_VERIFIED ranges — read the qualifiers

SharedAudience: deployment engineer, Linux administrator

Purpose

State what must exist before installation without inventing a certified OS matrix.

Verified requirements

Manager

  • A Linux host that can run the Manager binary
  • PostgreSQL as the Manager system of record (example database name zwall_centralized_security, example port 5432)
  • Operator-managed TLS certificate and key files if server.tls.enabled is true
  • Network path from operator browsers and Agents to the Manager API port

Community README additionally states:

  • PostgreSQL 15+
  • Go 1.25+ and Node.js 18+ for source builds
  • clang, llvm, and libbpf-dev or equivalent for eBPF builds

Agents

  • Linux hosts (enforcement Agents load eBPF)
  • Virtualization Agent: root is required to load eBPF (the Agent exits if it is not root, unless Hosting is enabled)
  • Hosting Agent: unprivileged zwall-hosting identity plus a separate privileged zwall-hosting-ebpf-loader for pass-only programs
  • For Virtualization: KVM/libvirt on the host. Other hypervisors are not described as shipping integrations

Kernel

Multiple in-tree numbers exist. This package does not collapse them into a single certified minimum.

Scroll sideways to see the full table. Use the arrow keys when focused.

SourceStatement
Community READMELinux kernel 4.15+ (5.4+ recommended)
Enterprise configs/agent.example.ymlebpf.min_kernel_version: "5.8.0" with strict_kernel_version_check: true
Hosting v2 capability matrixIsolated attach tests on Ubuntu 20.04 5.4.0-216-generic

There is no published “fully supported” OS/kernel matrix. Owner/engineering must publish one before these pages may name distributions as fully supported. That matrix is not a customer contract yet.

Do not treat unpublished distro lists as a customer guarantee.

Hardware sizing

Unpublished CPU/RAM/disk figures are not independently verified as product SLOs. Do not treat them as a customer sizing contract.

Ports (example configuration)

Scroll sideways to see the full table. Use the arrow keys when focused.

ListenerExampleSource
Manager API / web (combined)8443configs/manager.example.yml server.port / server.api_port / web.port
PostgreSQL5432same file database.port
Prometheus path/metrics (auth-gated when enabled)configs/manager.example.yml metrics.enabled
Hosting observer socket/run/zwall-hosting-ebpf/observer.sockHosting example YAML

Split mode (server.split_mode_enabled) can separate API and web ports. It is optional and false in the example.