Deploy Boundary
To deploy a self-managed Boundary environment you should:
- Deploy and configure Boundary controllers and workers
- Install end-user clients
This guide outlines the required steps to manually install and configure a single HashiCorp Boundary cluster as defined in the Recommended architecture topic. It assumes you install Boundary on virtual machines (VMs) or bare-metal servers running a Debian or Red Hat-based Linux distribution.
To learn about installing end-user clients, refer to the Install Boundary clients page.
This document includes general guidance as well as specific recommendations for popular cloud infrastructure platforms. These recommendations have also been encoded into official Terraform reference architectures for AWS, Azure, and GCP.
Pre-built Boundary packages are available from the HashiCorp Linux
Repository.
In addition to installing the Boundary binary, the official package also
provides a systemd service unit, and a local boundary
user account under which
the service runs.
Note
You must complete the following steps for each Boundary controller and worker node that you want to deploy. The binary operates as either a worker or controller, depending on the configuration that you generate for the Boundary binary.
The steps vary by Linux distribution.
Select your distribution of Boundary, and complete the steps to install the binary:
Use the following command to add the HashiCorp GPC key as a trusted package-signing key:
$ curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
Add the official HashiCorp Linux repository:
$ echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
Update the package index:
$ sudo apt update
Install Boundary Enterprise:
$ sudo apt install boundary-enterprise
You should install the binary on the controller and worker instances you configure to run in your Boundary environments.
Next, you should: