Skip to content

Install on one box

A single DGX Spark (or Asus GX10) runs the whole appliance: the Garrison console, the AI models and the monitoring stack. Check the requirements first.

  • The box runs DGX OS as delivered, is on the network with a fixed address, and can reach the internet.
  • You can sign in to it over SSH as a user with sudo (not as root).
  • You have the install command and access token from Garrison sales. Garrison AI is commercial software; the token lets the installer download it.

On the box, run the command you received from Garrison sales:

The install command comes with your Garrison licence.

Reach sales for a POC or pricing →

--email is the administrator’s address: it becomes the console’s admin account and is recorded as the person who accepted the software licences. The access token is read from the environment and never appears on a command line, in the process list or in shell history.

The installer asks you to accept the NVIDIA and model licences, then works on its own. A first install takes 30 to 60 minutes, mostly downloading about 100 GiB of models and the first start of the main model. It runs in this order:

Step What happens
Preflight Checks the architecture, sudo, Docker, disk space, and containers already running
Platform Installs Open Agent Fabric: the AI gateway, the models, Grafana, Prometheus, Loki and Langfuse
Garrison Installs the console and backend, creates the appliance’s certificates and the admin account
Self-enrolment Installs the Garrison agent on the appliance itself and makes it a log collector, so the appliance shows in Systems and Observe
Checks 13 end-to-end checks: console, models, embeddings, logs, metrics, keys

When it finishes it prints the console address:

==> Done
Garrison: https://192.0.2.10/ (admin: you@company.com; the password is in /opt/garrison/.env, ADMIN_PASSWORD)

Read the admin password from the file shown (sudo grep ADMIN_PASSWORD /opt/garrison/.env), then continue with First sign-in.

Option Use
--email ADDR Admin account and licence acceptance (required)
--garrison Install the Garrison console on top of the platform
--no-self-enrol Leave the appliance itself out of Systems
--address IP The appliance’s LAN address (default: the address of the default route)
--name NAME The box’s name (default: its hostname)
--accept-licences Accept the licences without a prompt (unattended installs)
--util 0.75 The share of memory the main model may use
--no-model Install without the chat model (not useful for Garrison)
Address What
https://<appliance>/ The Garrison console
https://<appliance>/grafana/ Dashboards (also inside the console under Observe)
https://<appliance>:8080 Where agents and log collectors connect
  1. First sign-in
  2. Enrol your systems
  3. Connect your SIEM