Prepare Your NixOS System for Prisma Agent Installation

Table of Contents

Disable IPv6 on Linux Devices (Optional)

Install the Required CA Certificates on Linux

Prepare Your NixOS System for Prisma Agent Installation

Configure the required services, packages, and CA certificates in your NixOS system before installing Prisma Agent.

Where Can I Use This?	What Do I Need?
Prisma Agent	NixOS with nftables enabled Prisma Agent 26.2 or later

NixOS support for Prisma Agent integrates the agent's security capabilities directly into your declarative NixOS environment. NixOS operates declaratively through your /etc/nixos/configuration.nix file, which nixos-rebuild processes.

The installation of Prisma Agent version 26.2 or later in your NixOS environment requires nftables to be enabled and the necessary CA certificates configured in your configuration.nix file for the agent's operation.

Complete the following steps so that your system has the necessary services, packages, and certificates before agent installation, aligning with NixOS's immutable system design.

In NixOS, access your NixOS configuration file:
```
sudo vim /etc/nixos/configuration.nix
```
The default editor for NixOS is Nano. This example uses the Vim editor. You can also use other supported editors of your choice, such as Emacs.
Enable nftables by adding the following statement to your NixOS configuration file:
```
networking.nftables.enable = true;
```

Add the required system packages to your NixOS configuration:

environment.systemPackages = with pkgs; [
  vim
  wget
  nftables
];

(Optional) Enable the SSH service in your configuration.nix file.
```
services.openssh.enable = true;
```
Configure trusted CA certificates for Prisma Agent:
```
security.pki.certificateFiles = [
  "/path/to/your/certs" # Replace with the actual path to your CA certificate
];
```
The following sample image shows the necessary additions to the /etc/nixos/configuration.nix file, including enabling nftables and adding required packages.
Rebuild your NixOS system to apply the changes:
```
sudo nixos-rebuild switch
```