Installation

Get RedFox Bastion running in under 5 minutes.

Prerequisites

  • Docker Engine 24+ and Docker Compose v2
  • 2 GB RAM, 2 vCPU, 5 GB disk
  • Entra ID App Registration with OIDC redirect URI (setup guide)
  • Network: port 3000 (frontend), port 7443 (proxy), outbound to login.microsoftonline.com and license.coderaft.io

Install

One command installs the CodeRaft Dashboard. The dashboard handles licence activation and product deployment.

Linux / macOS

Terminal
$ curl -fsSL https://install.coderaft.io | bash

Windows (PowerShell)

Terminal
$ irm https://install.coderaft.io/win | iex

The dashboard's Setup Wizard guides you through:

  • Licence activation — deploys RedFox containers automatically
  • Entra ID configuration (Client ID, Tenant ID, Client Secret)
  • First target creation and SSH session
Your licence determines which products are deployed. The dashboard deploys only the containers you need. mTLS certificates and JWT keypairs are generated automatically.

Verify installation

Terminal
$ docker compose ps

All services should show Up (healthy). The web UI is available at http://localhost:3000.

Updating

Re-run the installer to update to the latest version. All data persists through updates.

Linux / macOS

Update
$ curl -fsSL https://install.coderaft.io | bash

Windows (PowerShell as Administrator)

Update
$ irm https://install.coderaft.io/win | iex

Update behaviour

  • Hotfix (patch version, e.g., 1.2.3 → 1.2.4) — containers updated in-place. Redirected to the dashboard immediately. No re-login required.
  • Minor update (e.g., 1.2.x → 1.3.0) — may include database migrations. Re-login to verify licence. Data persists.
  • Major update (e.g., 1.x → 2.0) — re-login required. Read the release notes for breaking changes.
Data persistence guarantee: All customer data is stored in named Docker volumes (postgres_data, redis_data, dashboard_data). These volumes are never deleted by the installer or update process. Licences are valid for a minimum of 1 year.

Production deployment

CodeRaft Platform handles TLS automatically. When deployed via the CodeRaft Platform installer, HTTPS is configured in the Setup Wizard (Let's Encrypt or custom certificate). See the Platform Deployment Guide for details.

Supported platforms

Linux amd64
Binary + Docker
Linux arm64
Binary + Docker
macOS Intel
Docker Desktop
macOS Apple Silicon
Docker Desktop
Windows amd64
Docker Desktop / WSL2

Next steps