OpenCanary is a configurable open-source honeypot solution provided by Thinkst. This wrapper script helps install and configure your OpenCanary appliance using sane defaults, including:
- Setting the device's hostname
- Updating the OS
- Configuring unattended upgrades for OS and application patches
- Installing dependencies
- Installing and configuring the canary
- Creating a systemd unit file to launch OpenCanary as a service
- Ubuntu or Debian based Linux distribution with Systemd
- Network connection
For more detailed installation instructions, see my post.
- Copy or download the 'opencanary-installer.sh' to your home directory
- Modify the permissions of the file to allow execution using
sudo chmod +x opencanary-installer.sh
- Run the installer using
sudo ./opencanary-installer.sh
- After the script automatically triggers a reboot, your device should be operating as a Canary
- Confirm the Canary service is running by entering
systemctl status opencanary
. You should see a returned value that includesActive: active (running)
- Ensure your configuration file at ~/opencanary.conf is valid
- Look for error messages at
/var/tmp/opencanary.log