💡 Still using the classic Drata experience? Refer to Installing the Drata Agent via Mac OS, Installing the Drata Agent via Ubuntu Linux, Installing the Drata Agent via Windows OS, or Manually update the Drata Agent- v2.0.0 and above for the original UI.
The Drata Agent is a lightweight application. It has read-only access to specific system settings so Drata can verify required security configurations, such as disk encryption, screen lock, antivirus, and automatic updates.
The agent runs daily and helps your organization meet device-related compliance requirements.
Prerequisites
Ubuntu Linux requirements:
Drata supports Debian-based Ubuntu 22.04 and 24.04
Hard drive encryption evidence must be uploaded manually for Ubuntu devices
You must be able to install applications on your device
Ubuntu 24.04 LTS enables AppArmor by default.
Ubuntu 24.04 and AppArmor behavior
Ubuntu 24.04 and AppArmor behavior
To ensure compatibility:
Drata Agent version 3.8.0 installs with an unconfined AppArmor profile
This aligns with Ubuntu 24.04 recommendations
You do not need to use the
--no-sandboxflag
Optional advanced configurations
If your organization requires stricter controls, you can:
Create a custom AppArmor profile using Ubuntu’s AppArmor documentation, or
Run the Drata Agent using the AppImage package
AppImage is a portable application format for Linux. It packages an app and all its dependencies into a single executable file that runs on most distributions without installation.
Download latest AppImage release at https://github.com/drata/agent-releases/releases/latest/download/Drata-agent-linux.AppImage
Install the Drata Agent
During employee onboarding on My Drata page, one of the tasks is to Install the Drata Agent.
Log in to Drata and navigate to the My Drata page.
Locate Install the Drata Agent and expand the task.
Select the installer file that fits your needs the best.
Open the downloaded file and follow the installation prompts.
Return to Drata and select Register Drata Agent.
Check and select your email for the Verify Drata Agent message.
Once verified, the agent runs automatically in the background.
Expected outcome: The Drata Agent is installed, registered to your account, and begins reporting device security status.
What the agent does (and does not do)
✔ Reads system configuration settings required for compliance
✔ Runs automatically once installed
✖ Does not modify system settings
✖ Does not monitor personal activity or files
Automatic updates
The Drata Agent stays up to date with the latest required version.
The agent updates automatically
Updates are required
You may be prompted for permission during an update
Additional Resources
Ubuntu Linux
Hard drive encryption (manual evidence)
Anti-Virus software
Your company may have alternate specific guidance for how you should use anti-virus software. Verify with your IT and compliance teams first.
Ubuntu antivirus overview: https://help.ubuntu.com/community/Antivirus
Avast for Linux (cost associated): https://www.avast.com/business/products/linux-antivirus
ClamAV (free): http://www.clamav.net