Upgrade

Upgrading uses the same command as installing. On the appliance:

export GARRISON_TOKEN=•••••••••••••••••••••
curl -fsSL https://•••••••••••••/install.sh \
  | bash -s -- --email you@company.com --garrison

The install command comes with your Garrison licence.

Reach sales for a POC or pricing →

The installer fetches the latest release of the platform and of Garrison, rebuilds what changed, and restarts only those parts. Your settings, users, cases, integrations and the admin password are kept. It finishes with the same 13 checks as a first install.

What	During the upgrade
Console	Unavailable for 1 to 3 minutes while it restarts
Agents	Reconnect on their own when the backend is back
Models	Keep serving unless the release changes them
Scheduled jobs	A job due during the restart runs at its next scheduled time

Note

Agents on your systems are not upgraded by the appliance yet. To move an agent to the latest version, re-run its install command from Systems → Add system on that machine. It replaces the agent in place and keeps its identity.

Before you upgrade

• Read the release notes from your Garrison contact.
• Back up /opt/garrison/.env and /etc/oaf (they hold the appliance’s secrets and configuration). See Backups.

Backups

Path	Holds
/opt/garrison/.env	Admin password, encryption key for stored credentials, database settings
/opt/garrison/certs, /etc/garrison/ca	The appliance’s certificates and its CA key
/etc/oaf	The platform’s configuration, CA and secrets
Docker volume vclocal_postgres_data	Garrison’s database: users, cases, findings, integrations, audit log

Keep backups somewhere safe: together they can decrypt every stored credential.