Antivirus causes installation issues

Configure antivirus exclusions for Automation Suite folders, processes, and ports on Linux.

Description

Using an antivirus results in an Automation Suite installation issue.

Solution

If your antivirus application leads to issues, it's recommended to raise a support ticket with the antivirus provider.

You can also consider the following actions:

• You can include the following folders in the antivirus allowlist:

  /var/lib/rancher
  /var/lib/kubelet
  /opt/UiPathAutomationSuite
  /datadisk
  /var/lib/rancher/rke2/server/db
  /run/k3s
  /var/lib/rook
  /var/lib/rancher/rke2
  /etc/rancher/rke2
  /tmp    
  /run/containerd
  /var/run
  /var/lib/containerd
  /var/log/pods
  /var/log/containers
  /etc/cni
  /opt/cni
  /sys
  /proc
  

  Note:

  The exclusion applied to these folders must be recursive.

• You can include the following list of processes/services in the antivirus allowlist:

  rke2-server          # For control-plane nodes
  rke2-agent           # For worker nodes
  containerd
  kubelet
  etcd
  kube-apiserver
  kube-controller-manager
  kube-scheduler
  containerd
  runc
  ctr
  

• You can include the following list of ports in the antivirus allowlist:

  6443        Kubernetes API server
  9345        RKE2 supervisor (node registration)
  2379-2380    etcd (control-plane nodes only)
  2334        Support bundle HTTP file server (transient, node-to-node)
  2381        etcd metrics endpoint (loopback only)
  2382        etcd loopback peer endpoint (loopback only)
  4240        Cilium cluster health probe (node-to-node)
  5001        RKE2 embedded image registry (bootstrap node)
  6444        RKE2 agent supervisor load-balancer (loopback only, worker nodes)
  8472/udp    VXLAN overlay network
  9100        Prometheus node_exporter metrics (intra-cluster)
  9234        Cilium operator health API (loopback only)
  9879        cilium-agent health endpoint (loopback only)
  9963        cilium-operator metrics (intra-cluster)
  10250       Kubelet API (metrics, logs, exec)
  10256       kube-proxy healthz endpoint (loopback only)
  10257       kube-controller-manager secure port (loopback only, control-plane)
  10259       kube-scheduler secure port (loopback only, control-plane)
  

Important:

Make sure that these exclusions are persisted across node reboots.