This ISO provides a streamlined, automated installation of Unified Security Stack v1.7.22 Community Edition on Ubuntu 24.04.3 LTSIt enforces preset system configurations and executes the Unified Security Stack installer on the first startup, which suits production rollouts that require very little hands-on work.
This ISO targets virtual machine environments and needs user-driven configuration throughout the initial setup.
Key Features
Basic security hardening is built into the system, which also ships with core system utilities already installed.
System Requirements
Before attaching the ISO to your VM, ensure it meets the following requirements:
| Component | Minimum | Recommended |
|---|---|---|
| RAM | 16 GB | 32 GB or more |
| vCPUs | 4 vCPUs | 8 vCPUs or more |
| Disk Space | 120 GB | 150 GB SSD or larger |
| Network | Active connectivity | 1 Gbps connection |
See System Requirements to obtain detailed specifications tailored to your deployment size and anticipated data volume.
Installation Flow
The installation process is designed to be straightforward with minimal user input required:
Step 1: Download the ISO
Download the Unified Security Stack v1.7.22 Community Edition ISO:
Place the ISO file somewhere your virtualization platform can reach.
Step 2: Attach ISO and Boot
Mount the Unified Security Stack ISO on your virtual machine and start from it. The automated installer will begin on its own.
Step 3: Create User Credentials
During installation, you will be prompted to:
Create a username (no default credentials exist)
Set a strong password
Keep these credentials in a secure place, as they will be needed for all future access to the system.
Step 4: Configure Network Settings
Choose your network configuration:
DHCP (automatic IP assignment)
Static IP (manual configuration)
Make sure your network configuration permits outbound connections so packages can be downloaded.
Step 5: Automatic Package Installation
The system automatically installs essential packages:
openssh-server- Remote SSH accesscurl,wget- Network utilitiesgit- Version controlvim- Text editorhtop- Process monitornet-tools- Network utilities
Step 6: First Boot Configuration
On first boot, the following occurs automatically:
Unified Security Stack installer launches
Custom MOTD with Unified Security Stack branding displays
Installation logs begin writing to
/var/log/synoti/
Installation usually takes 15 to 30 minutes, varying with hardware performance and network speed.
Post-Installation Steps
1. Log In
After the installation finishes, sign in with the credentials you created during setup.
# Login via console or SSH
ssh username@your-server-ipBy default, SSH is active and ready for remote access right after installation.
2. Track Installer Progress
The Unified Security Stack installer starts automatically on the first boot. Watch its progress:
grep -i error /var/log/synoti/installer.logcat /var/log/synoti/installer.logtail -n 50 /var/log/synoti/installer.logtail -f /var/log/synoti/installer.logLeave the log monitoring terminal open throughout installation so you can catch potential issues as they happen.
3. Optional Setup Wizard
After the main installation completes, you can run the setup wizard to configure additional settings:
synoti-setupWhat settings does the setup wizard configure?
The setup wizard currently handles:
Timezone configuration - Set your local timezone
Note: Initial installation already handles hostname configuration, so it does not need to be set again.
4. System Verification
After installation, verify your system is configured correctly:
lsb_release -a
Expected: Ubuntu 24.04.3 LTSInstalled Scripts and Symlinks
All Unified Security Stack scripts sit in a central location, making management and access easy.
Script Location
Primary Directory: /opt/synoti/
start.sh
Purpose: Main Unified Security Stack installer launcher
Execution: Runs automatically on first boot
Manual Run:
sudo /opt/synoti/start.shfinish-install-setup.sh
Purpose: Post-installation setup wizard (timezone configuration)
Execution: Optional, run manually after installation
Symlink: synoti-setup
Convenient Symlinks
For quick access, symlinks are created under /usr/local/bin/:
synoti-install → /opt/synoti/start.sh
synoti-setup → /opt/synoti/finish-install-setup.shYou can execute these commands from any directory without providing the complete path.
Log Files
Installation logs and system logs are all centralized, which simplifies troubleshooting.
Log Location
Primary Log Directory: /var/log/synoti/
| Log File | Purpose |
|---|---|
| installer.log | Main installation process log |
| Additional logs | Created by Unified Security Stack services as they start |
sudo cat /var/log/synoti/installer.logTroubleshooting
Installation appears stuck
Solution:
Check the installer log for errors:
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
tail -f /var/log/synoti/installer.log
```plaintext
2. Verify network connectivity:
```bash
ping -c 3 8.8.8.8Check if the installer process is running:
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
ps aux | grep synoti
```plaintext
</AccordionTab>
<AccordionTab title="Cannot connect via SSH" >
**Solution**:
1. Verify SSH service is running:
```bash
sudo systemctl status sshCheck firewall rules:
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
sudo ufw status
```plaintext
3. Verify network configuration:
```bash
ip addr showInstaller failed with errors
Solution:
Review the complete log:
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
```plaintext
cat /var/log/synoti/installer.log
```plaintext
2. Check for specific error messages
3. Verify system resources meet requirements
4. Contact support with log file if issue persists
</AccordionTab>
<AccordionTab title="Need to re-run the installer" >
**Solution**:
```bash
sudo /opt/synoti/start.shRunning the installer again might reset current configurations, so back up any custom settings beforehand.
Security Considerations
Post-Installation Security Recommendations
Configure Firewall
Configure UFW firewall rules to limit access. See Firewall Rules for in-depth configuration.
Enable SSL/TLS
Set up SSL certificates for secure web access. See SSL Certificate for instructions.
Update System
Keep your system updated with the latest security patches:
sudo apt update && sudo apt upgrade -yHarden SSH
Disable password authentication (use keys only)
Change default SSH port
Restrict SSH access by IP
Changelog Summary
Recent improvements to the ISO:
| Feature | Description |
|---|---|
| ✅ Ubuntu 24.04.3 LTS | Updated to the latest Long Term Support release |
| ✅ Community Edition Branding | Complete Unified Security Stack Community Edition branding throughout |
| ✅ Interactive Configuration | New interactive network and identity configuration during setup |
| ✅ Organized Scripts | Scripts moved to /opt/synoti/ for better organization |
| ✅ Command Symlinks | Convenient symlinks added for easy command access |
| ✅ Centralized Logs | All logs centralized in |
| ✅ SSH Preinstalled | SSH server preinstalled and enabled by default |
| ✅ Auto-execution | Installer runs automatically on first boot |
| ✅ Simplified Setup | Setup script simplified (timezone configuration only) |
| ✅ Verification Commands | Enhanced system verification commands included |
Support and Resources
Remember: Unified Security Stack v1.7.22 is incompatible with v1.7.21. If you are migrating from v1.7.21, do not try a direct upgrade. Wait for the official migration tool or contact support for help.