Air gap installation

This topic provides guidance for installing Anaconda Server in an air-gapped environment.

​

Installing Anaconda Server

Obtain the Anaconda Server installer location and your Anaconda Server license from your Anaconda representative before proceeding.

1. Download Anaconda Server:

   # Replace <INSTALLER_LOCATION> with the provided installer URL
   curl -O <INSTALLER_LOCATION>
   

2. Make it executable:

   # Replace <INSTALLER> with the installer you just downloaded
   chmod +x <INSTALLER>
   

3. Run one of the following installation commands. Choose the command that corresponds with your setup.

   • HTTP
   • HTTPS
   • Grafana monitoring
   • External Postgres and Redis

   # Replace <INSTALLER> with the installer you just downloaded
   # Replace <FQDN> with the fully qualified domain name of your Anaconda Server instance
   sudo bash <INSTALLER> --keep -- --domain <FQDN> --default-user anaconda 2>&1 | tee as.install.output
   

   # Replace <INSTALLER> with the installer you just downloaded
   # Replace <FQDN> with the fully qualified domain name of your Anaconda Server instance
   sudo bash <INSTALLER> --keep -- --domain <FQDN> --default-user anaconda 2>&1 | tee as.install.output
   

   If you are using TLS/SSL certificates, run this command to install Anaconda Server:

   # Replace <INSTALLER> with the installer you just downloaded
   # Replace <FQDN> with the fully qualified domain name of your Anaconda Server instance
   # Replace <PATH_TO_CERT> with the path to your TLS/SSL cert
   # Replace <PATH_TO_KEY> with the path to your TLS/SSL key
   sudo bash <INSTALLER> --keep -- --domain <FQDN> --tls-cert <PATH_TO_CERT> --tls-key <PATH_TO_KEY> --default-user anaconda 2>&1 | tee as.install.output
   

   To include Grafana monitoring dashboards in your installation of Anaconda Server, add the following argument to your installation command:

   --grafana-monitor-stack
   

   For example:

   sudo bash <INSTALLER> --keep -- --domain <FQDN> --grafana-monitor-stack --default-user anaconda 2>&1 | tee as.install.output
   

   You must be using Postgres version 9.6 or later and Redis version 6.0 or later.

   # Replace <INSTALLER> with the installer file you just downloaded
   # Replace <FQDN> with the fully qualified domain name of your Anaconda Server instance
   # Replace <PATH_TO_CERT> with the path to your TLS/SSL cert
   # Replace <PATH_TO_KEY> with the path to your TLS/SSL key
   # Replace <EXTERNAL_PS/RD_INSTANCE_IP4> with your external instance IP4 address (in both locations)
   # Replace <ASSIGNED_PORT> with the port used for communication
   # Replace <POSTGRES_USERID> with your postgres user ID
   # Replace <POSTGRES_PASSWORD> with your postgres password
   chmod +x <INSTALLER>
   bash <INSTALLER> --keep -- --domain <FQDN> --tls-cert <PATH_TO_CERT> --tls-key <PATH_TO_KEY> -e redis://<EXTERNAL_PS/RD_INSTANCE_IP4> -h <EXTERNAL_PS/RD_INSTANCE_IP4> -p <ASSIGNED_PORT> -u <POSTGRES_USERID> -pw <POSTGRES_PASSWORD> --default-user anaconda -y 2>&1 | tee as.install.output
   

​

Installing packages and CVEs

In a standard installation, Anaconda Server would be pointed to a web URL that contains artifacts for your users to view or download. However, on an air-gapped network, you’ll need to provide network directory folder locations for Anaconda Server to look in when searching for artifacts, and populate those folders with artifacts.

The .zip files you downloaded during environment preparation will be the source of your packages for Anaconda Server. Move these files to the correct folders by running the following commands:

mv conda_main.zip /opt/anaconda/repo/airgap/
mv conda_msys2.zip /opt/anaconda/repo/airgap/
mv conda_r.zip /opt/anaconda/repo/airgap/
mv cve.zip /opt/anaconda/repo/airgap/

With the files in place, you’ll now need to instruct Anaconda Server to create a mirror using the cve.zip file as a source of data.

1. Open your Anaconda Server installer directory.

   # Replace <INSTALLER> with your installer directory
   cd <INSTALLER>
   

   You can run the command ls -la to show a list of files contained in your installer file directory. The docker-compose.yml and .env files are stored here.

2. Open your .env file using your preferred file editor and add the following line:

   REPO_CVE_DEFAULT_MIRROR=file://opt/anaconda/repo/airgap/cve.zip
   

3. Save your work and close the file, then apply your changes to Anaconda Server by running the following:

   docker-compose up -d
   

4. Monitor the status of your instance by running the following command:

   docker ps
   

​

Adding hosted miniconda installers

Because air-gapped users do not have access to the internet, Anaconda provides Miniconda installers for your company’s use through Anaconda Server.

1. Download a valid installers.zip file from the s3 bucket:

   curl -O https://anaconda-airgap-te.s3.amazonaws.com/installers.zip
   

2. Move the installers.zip file to the airgap folder of the Anaconda Server repositoryby running the following command:

   mv /installers.zip /opt/anaconda/repo/airgap/
   

3. If necessary, open your Anaconda Server installer directory.

4. Using your preferred file viewer, open the docker-compose.yml file.

5. Verify that the following line is present in the volumes section for both the repo_api and repo_worker objects:

   ${BASE_INSTALL_DIR}/airgap:${BASE_INSTALL_DIR}/airgap
   

   If the above line is not present, add it to both locations. This allows docker to have access to the /opt/anaconda/repo/airgap directory.

6. Add the following line to the environment section for both the repo_api and repo_worker objects:

   REPO_MINICONDA_INSTALLERS_ZIP_PATH=/opt/anaconda/repo/airgap/installers.zip
   

7. Save your work and close the file, then apply your changes to Anaconda Server by running the following command:

   docker-compose up -d