ADMINISTRATOR GUIDE

Install an authorized PANTAW release

Verify the package, isolate it in a virtual environment, validate configuration and begin with one passive cycle.

Prerequisites

Linux runtime
Python 3.12 or 3.13
venv and pip supplied by the distribution
systemd only if scheduled user automation is required
read permission for selected procfs/sysfs facilities
optional smartctl for SMART and nvidia-smi for proprietary NVIDIA telemetry

Obtain and verify

Release packages are currently provided through an approved deployment or support engagement.

sha256sum -c PANTAW-0.0.2.SHA256
python3 -m venv /opt/pantaw/venv
/opt/pantaw/venv/bin/python -m pip install ./pantaw-0.0.2-py3-none-any.whl

Use the checksum supplied through the same approved engagement. Do not install an unverified archive.

Prepare configuration

install -d -m 0750 /etc/pantaw/sops /var/lib/pantaw /var/log/pantaw
install -m 0640 pantaw.example.yaml /etc/pantaw/pantaw.yaml

Apply ownership for the dedicated unprivileged runtime account. Do not place passwords, tokens or private keys in the YAML file.

Validate and run once

/opt/pantaw/venv/bin/pantaw version
/opt/pantaw/venv/bin/pantaw config validate --config /etc/pantaw/pantaw.yaml
/opt/pantaw/venv/bin/pantaw check --config /etc/pantaw/pantaw.yaml --json

Scheduled collection

The validated automation model uses reviewed deployment-specific systemd user service and timer definitions around a bounded oneshot cycle. Those unit artifacts are supplied during an approved deployment; they are not fabricated by this public guide. Review them, keep the runtime unprivileged, then verify timer state, last exit status and both audit backends.

Rollback and removal

Keep the previous wheel, configuration and audit backup until health validation passes. The detailed rollback and uninstallation guides preserve audit data by default.