Install

Run every command on the server, as root or with sudo. Replace 1.4.2 with your version and tn with your map pack's countries. Before starting, check the requirements.

1. Copy and check the delivery

Copy the bundle and the map pack to the server (USB drive, internal file share, scp…), then check that the bundle is the one Oloom sent you:

sha256sum tadbir-onprem-1.4.2.tar

Compare the result with the checksum Oloom gave you separately. If it differs, stop and contact Oloom.

tar -xf tadbir-onprem-1.4.2.tar
cd tadbir-onprem-1.4.2

2. Create the settings file

The first run creates /opt/tadbir/.env and stops:

sudo compose/onprem/install.sh --geo /path/to/geo-bundle-tn.tar

[tadbir] verifying checksums
[tadbir] created /opt/tadbir/.env
[tadbir] ERROR: set DOMAIN and TADBIR_BOOTSTRAP_ADMIN_EMAIL in /opt/tadbir/.env, then rerun

Edit /opt/tadbir/.env and set the two required values:

DOMAIN=tadbir.acme.lan
TADBIR_BOOTSTRAP_ADMIN_EMAIL=it-admin@acme.com

Leave the passwords blank: the installer generates them. The other settings are optional; see Configuration.

3. Certificate (optional)

To use your company's certificate, put cert.pem (full chain) and key.pem in /opt/tadbir/tls/ (or the directory set in TLS_DIR) now. Otherwise the installer generates a self-signed certificate there.

4. Install

Run the same command again:

sudo compose/onprem/install.sh --geo /path/to/geo-bundle-tn.tar

It checks the bundle's signature, generates the passwords, unpacks the maps, loads the images from the bundle (no download), starts Tadbir and waits until the application, sign-in, web interface and maps answer. This takes a few minutes. At the end:

[tadbir] waiting for services (up to 15 min)
[tadbir] healthy
[tadbir] daily backup timer enabled (/srv/tadbir/backups)

Tadbir 1.4.2 is running: https://tadbir.acme.lan
  1. Sign in as it-admin@acme.com with the temporary password
     TADBIR_BOOTSTRAP_ADMIN_PASSWORD from /opt/tadbir/.env; you will choose a new one.
  2. Open Settings > License and upload the license file from Oloom.

If a step fails, fix the cause shown and run the same command again: the installer can be rerun safely and never overwrites your settings or passwords. See Troubleshooting.

5. First sign-in

1. Open https://tadbir.acme.lan in a browser. With a self-signed certificate, trust it first (or accept the warning once to continue).
2. Sign in with the administrator email and the temporary password from TADBIR_BOOTSTRAP_ADMIN_PASSWORD in /opt/tadbir/.env.
3. Choose your own password when asked. The temporary password no longer works afterwards.

6. Upload your license

Open Settings > License, choose the license file from Oloom and upload it. The status changes to Valid and your modules appear without restarting. Until then, only the core features (users, settings, files) are available. See Your license.

7. Complete your organization and invite users

Tadbir shows a banner until your organization details are complete. Then invite your users from the Users page (see Users and roles). Invitations are sent by email: configure email first.