This document explains how to perform a major upgrade for an
existing remote agent using the installer for RHEL 8.7.
To install an agent on a fresh deployment, refer to
Create an agent with installer on RHEL.
Agent 2.0.0
This major upgrade to remote agents with version 2.0.0 and higher consists of five procedures:
Install Linux packages
Install OpenSSL 3.0.7
OpenSSL 3.0.7 environment variables configuration
Install Python 3.11
Install Python 3.11 pip
Install Linux packages
dnfinstallperl-core-y
Install OpenSSL 3.0.7
Each command needs to be taken and run separately.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eThis guide provides instructions for performing a major upgrade of a remote agent to version 2.0.0 or higher on RHEL 8.7 using the installer.\u003c/p\u003e\n"],["\u003cp\u003eThe upgrade process involves five steps: installing Linux packages, installing OpenSSL 3.0.7, configuring OpenSSL environment variables, installing Python 3.11, and installing Python 3.11 pip.\u003c/p\u003e\n"],["\u003cp\u003eEach of the steps to perform requires individual commands to be taken and run separately within the shell session, which needs to remain open until completion of all procedures.\u003c/p\u003e\n"],["\u003cp\u003eThe target product for this agent is Google SecOps, specifically the SOAR module.\u003c/p\u003e\n"]]],[],null,["# Perform a major upgrade using installer for RHEL\n================================================\n\nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc) \n\nThis document explains how to perform a major upgrade for an\nexisting remote agent using the installer for RHEL 8.7.\nTo install an agent on a fresh deployment, refer to [Create an agent with installer on RHEL.](/chronicle/docs/soar/working-with-remote-agents/create-agent-with-installer-for-rhel)\n| **Note:** Installation requires superuser privileges. Some dependencies must be accessible to non-root users. As such, we don't recommend changing the root user's `umask` from the `0022` default value.\n\nAgent 2.0.0\n-----------\n\nThis major upgrade to remote agents with version 2.0.0 and higher consists of five procedures:\n\n- Install Linux packages\n- Install OpenSSL 3.0.7\n- OpenSSL 3.0.7 environment variables configuration\n- Install Python 3.11\n- Install Python 3.11 pip\n\n| **Important:** Keep the shell session open until you finish all steps.\n\n### Install Linux packages\n\n```bash\ndnf install perl-core -y\n```\n\n### Install OpenSSL 3.0.7\n\nEach command needs to be taken and run separately. \n\n```bash\ncd /usr/local/src\nwget https://www.openssl.org/source/openssl-3.0.7.tar.gz\ntar -xf openssl-3.0.7.tar.gz\ncd openssl-3.0.7\n./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl shared zlib\nmake -j$((`nproc`+1))\nmake install\n```\n\n### Configure OpenSSL environment variables\n\nEach command needs to be taken and run separately. \n\n```bash\ncd /etc/ld.so.conf.d/\necho /usr/local/ssl/lib64 \u003e openssl-3.0.7.conf\nldconfig -v\necho PATH=\"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/ssl/bin\" \u003e /etc/environment\nsource /etc/environment\nln -sf /usr/local/ssl/bin/openssl /usr/bin/openssl\nexport LDFLAGS=\"$LDFLAGS -L/usr/local/ssl/lib64\"\nexport LD_LIBRARY_PATH=/usr/local/ssl/lib64\n```\n\n### Install Python 3.11\n\nEach command needs to be taken and run separately. \n\n```bash\ncd /usr/src\nwget http://www.python.org/ftp/python/3.11.8/Python-3.11.8.tgz\ntar xzf Python-3.11.8.tgz\ncd Python-3.11.8\nmake clean\n./configure --prefix=/usr/local --enable-unicode=ucs4 --with-openssl=/usr/local/ssl\nmake\nmake altinstall\n```\n\n### Install Python 3.11 pip\n\nEach command needs to be taken and run separately. \n\n```bash\nwget -O get-pip-3.11.py https://bootstrap.pypa.io/get-pip.py\n/usr/local/bin/python3.11 get-pip-3.11.py\n/usr/local/bin/python3.11 -m pip install --upgrade pip\n```\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]