Try JFrog
Guides
Contact SupportTry JFrog
  1. Install Individual Products
  2. Individual JFrog Products Installation
  3. JAS Service Mode Installation

Standalone JAS Installation ( Separate VM )

Install JFrog Advanced Security in standalone service mode on dedicated VMs separate from Xray, on RPM, Debian, Linux Archive, and Docker Compose.

Install JFrog Advanced Security (JAS) on one or more dedicated VMs, separate from Xray. This is the recommended setup for production. The Xray VM runs Xray only and hands the JAS scans to the JAS VMs, which run the JAS services together with the router and observability services.

Before you begin, review the prerequisites and sizing requirements.

RPM / Debian

On the Xray VM

  1. Download the Xray compressed archive, extract its contents, and go to the extracted folder.

    tar -xvf jfrog-xray-<version>-<rpm|deb>.tar.gz
cd jfrog-xray-<version>-<rpm|deb>

  2. Run the installer script with the --include-jas flag. The script prompts you with a series of mandatory inputs, including the jfrogURL, joinKey, database, and RabbitMQ details.

    ./installV2.sh --include-jas

  3. When prompted to choose the JAS deployment mode, select option 2 (Standalone).

    How should JFrog Advanced Security (JAS) be deployed?
1) Bundled    - the JAS services run on this node, alongside Xray
2) Standalone - the JAS services run on a separate node; this node runs Xray only

  4. Start and manage the Xray service.

    systemctl start|stop xray.service

On Each JAS VM

Repeat steps 5 to 8 on each JAS VM. For the number of JAS VMs to deploy, see the sizing requirements.

  1. Download the same version of the Xray compressed archive that you installed on the Xray VM, extract its contents, and go to the extracted folder.

    tar -xvf jfrog-xray-<version>-<rpm|deb>.tar.gz
cd jfrog-xray-<version>-<rpm|deb>

  2. Run the installer script with the --jas-node flag. The script prompts you with a series of mandatory inputs, including the jfrogURL, joinKey, master key, external database details, and external RabbitMQ details.

    ./installV2.sh --jas-node

  3. Start and manage the JAS services. JAS is started along with the router and observability services.

    systemctl start|stop xray.service

  4. Verify the JAS service logs in jascontextual.log and jasexposures.log under $JFROG_HOME/xray/var/log.

Linux Archive

On the Xray VM

  1. Download the Xray compressed archive.

    When running Xray, the installation script creates a user called xray by default, which must have run and execute permissions on the installation directory. We recommend that you extract the Xray download file into a directory that gives run and execute permissions to all users, such as /opt.

    tar -xvf jfrog-xray-<version>-linux.tar.gz
mv jfrog-xray-<version>-linux xray
sudo mkdir -p /opt/jfrog
sudo mv xray /opt/jfrog/

  2. Go to $JFROG_HOME/xray/app/bin and run the installer script with the --include-jas flag. The script prompts you with a series of mandatory inputs, including the jfrogURL, joinKey, database, and RabbitMQ details.

    cd /opt/jfrog/xray/app/bin
sudo ./installV2.sh --include-jas

  3. When prompted to choose the JAS deployment mode, select option 2 (Standalone).

    How should JFrog Advanced Security (JAS) be deployed?
1) Bundled    - the JAS services run on this node, alongside Xray
2) Standalone - the JAS services run on a separate node; this node runs Xray only

  4. Switch to the xray user, and start and manage the Xray service.

    sudo chown -R xray:xray /opt/jfrog/xray
sudo su xray
/opt/jfrog/xray/app/bin/xray.sh start|stop

On Each JAS VM

Repeat steps 5 to 8 on each JAS VM. For the number of JAS VMs to deploy, see the sizing requirements.

  1. Download the same version of the Xray compressed archive that you installed on the Xray VM and extract it into a directory that gives run and execute permissions to all users, such as /opt.

    tar -xvf jfrog-xray-<version>-linux.tar.gz
mv jfrog-xray-<version>-linux xray
sudo mkdir -p /opt/jfrog
sudo mv xray /opt/jfrog/

  2. Go to $JFROG_HOME/xray/app/bin and run the installer script with the --jas-node flag. The script prompts you with a series of mandatory inputs, including the jfrogURL, joinKey, master key, external database details, and external RabbitMQ details.

    cd /opt/jfrog/xray/app/bin
sudo ./installV2.sh --jas-node

  3. Switch to the xray user, and start and manage the JAS services. JAS is started along with the router and observability services.

    sudo chown -R xray:xray /opt/jfrog/xray
sudo su xray
/opt/jfrog/xray/app/bin/xray.sh start|stop

  4. Verify the JAS service logs in jascontextual.log and jasexposures.log under $JFROG_HOME/xray/var/log.

Docker Compose

On the Xray VM

  1. Download the Xray compressed archive, extract its contents, and go to the extracted folder.

    tar -xvf jfrog-xray-<version>-compose.tar.gz
cd jfrog-xray-<version>-compose

  2. Run the installer script with the --include-jas flag. The script prompts you with a series of mandatory inputs, including the jfrogURL, joinKey, database, and RabbitMQ details.

    ./configV2.sh --include-jas

  3. When prompted to choose the JAS deployment mode, select option 2 (Standalone).

    How should JFrog Advanced Security (JAS) be deployed?
1) Bundled    - the JAS services run on this node, alongside Xray
2) Standalone - the JAS services run on a separate node; this node runs Xray only

  4. Start and manage the Xray service.

    docker-compose -p xray-rabbitmq -f docker-compose-rabbitmq.yaml up -d
docker-compose -p xray-postgres -f docker-compose-postgres.yaml up -d
docker-compose -p xray up -d
    📘

    Note

    Start the xray-rabbitmq and xray-postgres projects only if you selected the bundled RabbitMQ and the bundled PostgreSQL during installation.

On Each JAS VM

Repeat steps 5 to 8 on each JAS VM. For the number of JAS VMs to deploy, see the sizing requirements.

  1. Download the same version of the Xray compressed archive that you installed on the Xray VM, extract its contents, and go to the extracted folder.

    tar -xvf jfrog-xray-<version>-compose.tar.gz
cd jfrog-xray-<version>-compose

  2. Run the installer script with the --jas-node flag. The script prompts you with a series of mandatory inputs, including the jfrogURL, joinKey, master key, external database details, and external RabbitMQ details.

    ./configV2.sh --jas-node

  3. Start and manage the JAS services. JAS is started along with the router and observability services.

    docker-compose -p xray up -d

  4. Check the logs of the JAS containers.

    docker logs -f xray_jascontextual
docker logs -f xray_jasexposures

Related Topics

Updated 6 days ago

Did this page help you?