Requirements

Everything on this page is checked by the installer or needed by it. Have it ready before you start.

Every installation

A Cerberon licence key (CRB-…). The installer asks for it.
A 64-bit Intel or AMD processor. ARM machines are not supported yet.
4 CPU cores and 8 GB of memory at minimum; 16 GB recommended.
50 GB of free disk. The scanner tools are built on the machine during installation. The build alone needs about 16 GB free where Docker keeps images, and takes 10 to 25 minutes.
Port 443 free (the standard HTTPS port), and reachable from the machines your users work on. If another program uses it, the installer stops and says so; choose another port with CERBERON_PORT.
Outbound HTTPS to these addresses, directly or through your proxy (HTTP_PROXY and HTTPS_PROXY are passed on):

Used for	Addresses
Licensing and downloads	`license.cerberon.dev`, `*.r2.cloudflarestorage.com`
Images and the scanner build	`registry-1.docker.io`, `ghcr.io`, `github.com`, `deb.debian.org`, `pypi.org`, `proxy.golang.org`, `registry.npmjs.org`
Vulnerability data while scanning	`api.osv.dev`, `www.cisa.gov`, `api.first.org`, `endoflife.date`, `repo1.maven.org`

The installer names any address it cannot reach, and what that costs, before it changes anything. A machine with no internet at all uses the offline installation.

Linux

Ubuntu 22.04 or newer, Debian 12 or newer, or RHEL, Rocky Linux or AlmaLinux 9 or newer. These ship OpenSSL 3, which the installer uses to verify every download.
Docker Engine running as the system service, with the Compose plugin. If Docker is missing, the installer offers to install it from Docker's own repository. Podman and rootless Docker are not supported.
An account that can use sudo, for installing Docker and letting your account use it.
curl and openssl 3.0 or newer.
Servers run Linux. Windows is supported on Windows 11 workstations only.

Windows

Windows 11, version 22H2 or newer, 64-bit. Windows 10 and Windows Server are not supported; on a server, install Cerberon on Linux.
PowerShell run as Administrator.
Virtualisation turned on in the PC's firmware (BIOS/UEFI): Intel VT-x or AMD-V, often called "Virtualization Technology" or "SVM Mode". The installer checks it and says so if it is off.
16 GB of memory recommended (WSL is given half) and 50 GB free on the system drive.
The network marked Private or Domain for other machines to connect. Windows blocks other machines on a Public network; the installer offers to change it.
Docker Desktop is not used. If it is installed, turn off its WSL integration for Ubuntu-24.04.

On Windows, Cerberon runs in WSL 2 (Ubuntu 24.04) with Docker Engine inside it. You do not work with either: the installer sets them up, and Cerberon answers on the PC's own addresses.