Bundled JAS Installation ( Not Production-Ready )

In the bundled mode, the JAS services run on the same VM as Xray. Before you begin, review the prerequisites.

Sizing Requirements

The following table applies only for up to 100,000 artifacts and 1,000 builds per day.

RPM / Debian

1. Download the Xray compressed archive, extract its contents, and go to the extracted folder.

   Bash

   tar -xvf jfrog-xray-<version>-<rpm|deb>.tar.gz
   cd jfrog-xray-<version>-<rpm|deb>

2. Run the installer script with the --include-jas flag. The script prompts you with a series of mandatory inputs, including the jfrogURL, joinKey, database, and RabbitMQ details.

   Bash

   ./installV2.sh --include-jas

3. When prompted to choose the JAS deployment mode, select option 1 (Bundled).

   Text

   How should JFrog Advanced Security (JAS) be deployed?
   1) Bundled    - the JAS services run on this node, alongside Xray
   2) Standalone - the JAS services run on a separate node; this node runs Xray only

4. Start and manage the Xray service. JAS is started along with the other Xray services.

   Bash

   systemctl start|stop xray.service

5. Verify the JAS service logs in jascontextual.log and jasexposures.log under $JFROG_HOME/xray/var/log.

Linux Archive

1. Download the Xray compressed archive.

   When running Xray, the installation script creates a user called xray by default, which must have run and execute permissions on the installation directory. We recommend that you extract the Xray download file into a directory that gives run and execute permissions to all users, such as /opt.

   Bash

   tar -xvf jfrog-xray-<version>-linux.tar.gz
   mv jfrog-xray-<version>-linux xray
   sudo mkdir -p /opt/jfrog
   sudo mv xray /opt/jfrog/

2. Go to $JFROG_HOME/xray/app/bin and run the installer script with the --include-jas flag. The script prompts you with a series of mandatory inputs, including the jfrogURL, joinKey, database, and RabbitMQ details.

   Bash

   cd /opt/jfrog/xray/app/bin
   sudo ./installV2.sh --include-jas

3. When prompted to choose the JAS deployment mode, select option 1 (Bundled).

   Text

   How should JFrog Advanced Security (JAS) be deployed?
   1) Bundled    - the JAS services run on this node, alongside Xray
   2) Standalone - the JAS services run on a separate node; this node runs Xray only

4. Switch to the xray user, and start and manage the Xray service. JAS is started along with the other Xray services.

   Bash

   sudo chown -R xray:xray /opt/jfrog/xray
   sudo su xray
   /opt/jfrog/xray/app/bin/xray.sh start|stop

5. Verify the JAS service logs in jascontextual.log and jasexposures.log under $JFROG_HOME/xray/var/log.

Docker Compose

1. Download the Xray compressed archive, extract its contents, and go to the extracted folder.

   Bash

   tar -xvf jfrog-xray-<version>-compose.tar.gz
   cd jfrog-xray-<version>-compose

2. Run the installer script with the --include-jas flag. The script prompts you with a series of mandatory inputs, including the jfrogURL, joinKey, database, and RabbitMQ details.

   Bash

   ./configV2.sh --include-jas

3. When prompted to choose the JAS deployment mode, select option 1 (Bundled).

   Text

   How should JFrog Advanced Security (JAS) be deployed?
   1) Bundled    - the JAS services run on this node, alongside Xray
   2) Standalone - the JAS services run on a separate node; this node runs Xray only

4. Start and manage the Xray service. JAS is started along with the other Xray services.

   Bash

   docker-compose -p xray-rabbitmq -f docker-compose-rabbitmq.yaml up -d
   docker-compose -p xray-postgres -f docker-compose-postgres.yaml up -d
   docker-compose -p xray up -d

   📘

   Note

   Start the xray-rabbitmq and xray-postgres projects only if you selected the bundled RabbitMQ and the bundled PostgreSQL during installation.

5. Check the logs of the JAS containers.

   Bash

   docker logs -f xray_jascontextual
   docker logs -f xray_jasexposures

Related Topics

• JAS Service Mode Installation
• Standalone JAS Installation ( Separate VM )
• Helm JAS Installation
• Advanced Security Readiness Checking
• Xray Single Node Interactive Script Installation