General description

When deploying in an isolated network environment (without internet access or with significant restrictions on access to external websites), the offline NAICE installation method must be used. This installation process includes:

  1. Preparing the required VMs for deployment.
  2. Installing the required software available in the operating system repositories.
  3. Downloading the archive containing NAICE Docker container images and installation playbooks.
  4. Preparing installation playbook variables according to the deployment requirements.
  5. Installing the system using Ansible playbooks.

For a detailed description of the deployment scheme, refer to: v1.2_3.5 High-availability installation (using VRRP)

Preparing the VM

To deploy NAICE in a high-availability configuration, it is necessary to prepare the target VMs in accordance with the requirements specified in v1.2_3.1 System requirements.

The IP addresses of the VMs on which NAICE is deployed must be configured statically.

To deploy the VM, it is required to install a set of packages available in the official repositories of the operating system in use.

A local mirror of the official repository, deployed within an isolated network and accessible from the target machine, can be used to install these packages via a package manager such as APT (Ubuntu, Astra Linux) or YUM (RedOS).

A separate VM for running Ansible playbooks must also be prepared.

Preparing the VM for NAICE and PostgreSQL deployment

Deploy the VM in accordance with the requirements specified in section v1.2_3.1 System requirements.

Install the docker.io and docker-compose packages according to the official instructions: https://docs.docker.com/engine/install/ubuntu/

sudo apt-get update && \
sudo apt-get install ca-certificates curl && \
sudo install -m 0755 -d /etc/apt/keyrings && \
sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc && \
sudo chmod a+r /etc/apt/keyrings/docker.asc && \
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu \
  $(. /etc/os-release && echo "${UBUNTU_CODENAME:-$VERSION_CODENAME}") stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null && \
sudo apt-get update && \
sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin -y


Verify the installation and versions of Docker and Docker Compose (the versions must not be lower than the required ones):

$ sudo docker --version
Docker version 29.2.1, build a5c7197

$ sudo docker compose version
Docker Compose version v5.1.0


Install packages and all required dependencies from the official Ubuntu repository corresponding to the OS version in use:

Deploying NAICE on 2 VMs:

sudo apt install python3-psycopg2 python3-apt keepalived logrotate -y

Deploying NAICE on 4 VMs:

VMs hosting the PostgreSQL cluster:

sudo apt install python3-psycopg2 python3-apt -y

VMs hosting the NAICE cluster:

sudo apt install python3-psycopg2 python3-apt keepalived logrotate -y

The IP addresses of the VMs on which NAICE is deployed must be configured statically.

To deploy the VM, it is required to install a set of packages available in the official Astra Linux repositories.

A local mirror of the official repository, deployed within an isolated network and accessible from the target machine, can be used to install these packages via a package manager such as APT.

Install packages from the official Astra Linux repository:

sudo apt install docker.io python3-apt python3-psycopg2 python3-requests -y

The Docker Compose plugin cannot be installed from the Astra Linux repository, as it contains an outdated version. It must be downloaded from the following link to the target host: https://cloud.eltex-co.ru/index.php/s/yKlAcy83VVPEfzx.

If necessary, the file can be downloaded to any PC with Internet access to the website https://cloud.eltex-co.ru (using the link above) and then transferred to the target host using any available SCP client into the home directory of the user who will perform the installation.

Example download using wget:

wget https://cloud.eltex-co.ru/index.php/s/yKlAcy83VVPEfzx/download -O docker-compose-linux-x86_64

On the target host, create a directory:

sudo mkdir -pv /usr/local/lib/docker/cli-plugins

Place the downloaded download file into this directory and rename it to docker-compose:

sudo mv -v docker-compose-linux-x86_64 /usr/local/lib/docker/cli-plugins/docker-compose

Change the file owner to root:

sudo chown root:root -v /usr/local/lib/docker/cli-plugins/docker-compose

Make the file executable:

sudo chmod 755 -v /usr/local/lib/docker/cli-plugins/docker-compose

Verify the installation and versions of Docker and Docker Compose (the versions must not be lower than the required ones):

$ sudo docker --version
Docker version 28.3.3.astra1, build

$ sudo docker compose version
Docker Compose version v2.2.3


sudo apt install docker.io -y && \
wget https://cloud.eltex-co.ru/index.php/s/yKlAcy83VVPEfzx/download -O docker-compose-linux-x86_64 && \
sudo mkdir -pv /usr/local/lib/docker/cli-plugins && \
sudo mv -v docker-compose-linux-x86_64 /usr/local/lib/docker/cli-plugins/docker-compose && \
sudo chown root:root -v /usr/local/lib/docker/cli-plugins/docker-compose && \
sudo chmod 755 -v /usr/local/lib/docker/cli-plugins/docker-compose && \
sudo docker --version && \
sudo docker compose version


Install packages required for deploying NAICE services on the virtual machines:

sudo apt install keepalived logrotate -y

The IP addresses of the VMs on which NAICE is deployed must be configured statically.

Install the required packages along with all dependencies from the official Astra Linux repository on all hosts that will be used for the installation:

sudo apt install docker.io docker-compose-v2 python3-apt python3-psycopg2 python3-requests -y

Verify the installation and versions of Docker and Docker Compose (the versions must not be lower than the required ones):

$ sudo docker --version
Docker version 28.3.3.astra1, build

$ sudo docker compose version
Docker Compose version 2.39.2.astra1

Install packages required for deploying NAICE services on the virtual machines:

sudo apt install keepalived logrotate -y

Install Docker and Docker Compose packages from the official RedOS repository:

sudo yum install docker-ce docker-compose python3-psycopg2 python3-requests -y

Verify the installation and versions of Docker and Docker Compose (the versions must not be lower than the required ones):

$ sudo docker --version
Docker version 28.1.1, build 4eba377

$ sudo docker compose version
Docker Compose version 5.0.2


Install packages required for deploying NAICE services on the virtual machines:

sudo yum install keepalived logrotate -y


Install the docker.io and docker-compose packages according to the official instructions: https://docs.docker.com/engine/install/debian/

sudo apt-get update && \
sudo apt-get install ca-certificates curl && \
sudo install -m 0755 -d /etc/apt/keyrings && \
sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc && \
sudo chmod a+r /etc/apt/keyrings/docker.asc && \
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian \
  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null && \
sudo apt-get update && \
sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin python3-docker -y


Verify the installation and versions of Docker and Docker Compose (the versions must not be lower than the required ones):

$ sudo docker --version
Docker version 29.2.1, build a5c7197

$ sudo docker compose version
Docker Compose version v5.1.0


Install packages and all required dependencies from the official Debian repository corresponding to the OS version in use:

Deploying NAICE on 2 VMs:

sudo apt install python3-psycopg2 python3-apt keepalived logrotate -y

Deploying NAICE on 4 VMs:

VMs hosting the PostgreSQL cluster:

sudo apt install python3-psycopg2 python3-apt -y

VMs hosting the NAICE cluster:

sudo apt install python3-psycopg2 python3-apt keepalived logrotate -y

Preparing the VM for running Ansible playbooks

Requirements for the host OS running Ansible playbooks

To run Ansible playbooks, use a VM running Ubuntu 24.

Installing Ansible

Install the Ansible package along with all dependencies and other required software.

sudo apt install ansible sshpass -y

If Astra Linux 1.7.X is used as the target OS for NAICE deployment, ensure that the Ansible version is 2.16.3:

$ ansible --version
ansible [core 2.16.3]
  config file = None
  configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python3/dist-packages/ansible
  ansible collection location = /home/tester/.ansible/collections:/usr/share/ansible/collections
  executable location = /usr/bin/ansible
  python version = 3.12.3 (main, Jun 18 2025, 17:59:45) [GCC 13.3.0] (/usr/bin/python3)
  jinja version = 3.1.2
  libyaml = True

Using a different Ansible version may cause unexpected behavior during installation.

If necessary, reinstall Ansible and explicitly downgrade to the required version, 2.16.3:

sudo apt install ansible-core=2.16.3-0ubuntu2


Checking and updating the community.docker version

Check the community version:

ansible-galaxy collection list | grep community.docker

If the version is lower than 4.7.0, update the Ansible community.docker. Download and place the community-docker-4.7.0.tar.gz file on the target host:

Direct link to download the file: https://cloud.eltex-co.ru/index.php/s/9Hv6p4yz611fDXb

If necessary, the file can be downloaded to any PC with Internet access to the website https://cloud.eltex-co.ru (using the link above) and then transferred to the target host using any available SCP client into the home directory of the user who will perform the installation.

Download it directly to the target host using the wget command if the address https://cloud.eltex-co.ru is accessible:

wget https://cloud.eltex-co.ru/index.php/s/9Hv6p4yz611fDXb/download -O community-docker-4.7.0.tar.gz

Install community using the command (without using sudo):

$ ansible-galaxy collection install community-docker-4.7.0.tar.gz

Check the community version:

$ ansible-galaxy collection list | grep community.docker
community.docker                         4.7.0  <--- Latest version
community.docker                         X.X.X  <--- Previous version

Downloading the NAICE archive for installation in an isolated network and preparing for installation

Download the archive containing NAICE container images and installation playbooks to the host used for running the Ansible playbooks.

Download the latest stable version of NAICE for installation in an isolated network from the page: v1.2_1.5 Stable versions.

If necessary, the file can be downloaded to any PC with Internet access to the website https://cloud.eltex-co.ru (using the link above) and then transferred to the target host using any available SCP client into the home directory of the user who will perform the installation.

Download it directly to the target host using the wget command if the address https://cloud.eltex-co.ru is accessible:

wget https://cloud.eltex-co.ru/index.php/s/Bnc2ntTyWDjOCeR/download -O naice_install_2026-08-07.tar.gz

Extract the downloaded archive on the target host and navigate to the ansible directory inside the extracted directory:

tar xzvf naice_install_2026-08-07.tar.gz
cd naice_install/ansible

Preparing the file with host IP addresses and access credentials

Edit the inventory/hosts-cluster.yml file by specifying the required target installation addresses and username/password credentials:

---
# Local actions
all:
  hosts:
    localhost:
      ansible_connection: local
      ansible_user: <username of the host user running the playbook>
      ansible_ssh_pass: <password of the host user running the playbook>
      ansible_become_password: <sudo password of the host user running the playbook>

# Host group for high-availability NAICE deployment
reservation:
  hosts:
    master_host:
      ansible_host: <IP address of host 1 for NAICE>
      ansible_port: 22
      ansible_user: <username>
      ansible_ssh_pass: <user password>
      ansible_become_password: <sudo password>
      keepalived_interface: <interface name on which the VIP address will be configured, e.g. eth0>

    backup_host:
      ansible_host: <IP address of host 2 for NAICE>
      ansible_port: 22
      ansible_user: <username>
      ansible_ssh_pass: <user password>
      ansible_become_password: <sudo password>
      keepalived_interface: <interface name on which the VIP address will be configured, e.g. eth0>
  vars:
    keepalived_vip: <VIP address without mask, e.g. 192.168.0.11>

# Host group for postgres-cluster deployment (primary + standby)
postgres-cluster:
  hosts:
    node_primary:
      ansible_host: <IP address of the host for PostgreSQL node-1>
      ansible_port: 22
      ansible_user: <username>
      ansible_ssh_pass: <user password>
      ansible_become_password: <sudo password>
      forwarded_postgresql_port: 5432
      forwarded_ssh_port: 15432
    node_standby:
      ansible_host: <IP address of the host for PostgreSQL node-2>
      ansible_port: 22
      ansible_user: <username>
      ansible_ssh_pass: <user password>
      ansible_become_password: <sudo password>
      forwarded_postgresql_port: 5432
      forwarded_ssh_port: 15432

When deploying NAICE on two hosts, the target installation host IP addresses are the same for master_host and node_primary, as well as backup_host and node_standby.

Installing NAICE

Installing the PostgreSQL database cluster

Run the playbook:

ansible-playbook install-postgres-cluster.yml -i inventory/hosts-cluster.yml

As a result, PostgreSQL will be installed as a cluster on the servers specified in node_primary and node_standby. The master node of the cluster will be located on the node_primary host.

Example of successful playbook completion:

PLAY RECAP **********************************************************************************************************************************************************************************************************************************
node_primary               : ok=61   changed=22   unreachable=0    failed=0    skipped=26   rescued=0    ignored=0   
node_standby               : ok=45   changed=22   unreachable=0    failed=0    skipped=17   rescued=0    ignored=0

Installing the NAICE cluster

Before starting the installation, make sure that the Primary role belongs to the PostgreSQL node specified in the variable node_primary “ansible_host”. If necessary, perform a Primary role switch. If this requirement is not met, the installation cannot be completed.

If necessary, configure playbook variables in the group_vars/all.yml file. Variable preparation is the same as for online installation and is performed in the same way. For more details on variable descriptions, refer to Configuring variables in the file group_vars/all.yml.

Run the NAICE installation playbook:

ansible-playbook reservation-naice-services.yml -i inventory/hosts-cluster.yml

Example of successful playbook completion:

PLAY RECAP **********************************************************************************************************************************************************************************************************************************
backup_host                : ok=82   changed=26   unreachable=0    failed=0    skipped=32   rescued=0    ignored=0   
master_host                : ok=88   changed=32   unreachable=0    failed=0    skipped=45   rescued=0    ignored=0

After installation, verify the status of the NAICE cluster in accordance with the Checking the NAICE cluster state instructions.