CrowdStrike Falcon Sensor Installer Script Linux

This bash script validates key CrowdStrike requirements for the European cloud (EU-1) and installs the CrowdStrike Falcon Sensor on a Linux endpoint when all prerequisites are satisfied. It performs basic environment validation, checks connectivity to the CrowdStrike cloud, and executes a silent installation of the Falcon Sensor using the provided installer.

The script has been tested in a multiple Linux environments (Alma Linux, Ubuntu, Rocky Linux) and successfully performed the installation process when all requirements were met.

Deployment

Requirements

Before running the script, ensure the following:

• Linux system (Debian, Ubuntu, RHEL, CentOS, Rocky, AlmaLinux, SUSE supported)
• CrowdStrike installer package:
  • deb (Debian/Ubuntu) or
  • rpm (RHEL-based / SUSE)
• Script file: Installer_Linux.sh
• Sudo privileges
• Network access to CrowdStrike Cloud (port 443)

---

Prepare the Environment

Copy the files to your machine and navigate to the directory, for example:

cd /home/i/Descargas

Give execution permissions to the script:

chmod +x Installer_Linux.sh

Copy the installer to /tmp, for example, you can use:

sudo cp falcon-sensor_7.35.0-18803_amd64.deb /tmp/falcon-sensor

(Optional) If the script fails to execute, you might need to fix the scrip format using:

sudo sed -i 's/\r$//' Installer_Linux.sh

Configure the Script

Before running the script, edit the following variables inside Installer_Linux.sh:

CID=""
PROVISIONING_TOKEN=""   # Optional
SENSOR_TAGS=""          # Example: "Tag1,Tag2"

Before running the script, you must update the Customer ID (CID) inside the script if you are not using a provisioning token. To obtain the CID:

1. Log in to the CrowdStrike Falcon Console
2. Go to Host Setup and Management
3. Select Sensor Downloads
4. Copy the Customer ID (CID) shown on that page

For example, before you run the script, the variables should look like something like this :

CID="1234567890ABCDEF1234567890ABCDEF-12"
PROVISIONING_TOKEN=""
SENSOR_TAGS="Production,Linux" # if you leave it blank, no sensor grouping tags will be applied

Run the script

sudo ./Installer_Linux.sh

Authors

• @irenemrtinez

Documentation

The information used in this script regarding required services, system prerequisites, and installation requirements is based on the official CrowdStrike documentation for Falcon Sensor deployment.

Falcon Sensor Deployment for Windows

CrowdStrike Cloud IP Addresses and FQDNs