Theseus

Appearance

Upgrade ​

Stacks connected to the control plane ​

There is no one-click upgrade yet coming soon. We move a server to a new release by re-installing it from the control plane:

  • the current stack directory is moved aside on the server, to /opt/theseus.prev-<timestamp>, not deleted;
  • the new release is installed with your stack's existing secrets and certificates, so endpoints and user accounts stay valid;
  • the Docker volumes (your data) are not deleted.

We schedule this with you. During the re-install the console and the agents' connection are down; agents buffer events and send them when the manager is back.

Stacks installed from a bundle ​

  1. Back up first: sudo ./theseus backup.

  2. Extract the new bundle over the stack directory:

    bash
    tar -xzf theseus-<new version>.tar.gz --strip-components=1 -C /opt/theseus

  3. Apply, which pulls the new images and recreates the containers:

    bash
    cd /opt/theseus && sudo ./theseus config apply

  4. Check with sudo ./theseus status.

The Wazuh agent on endpoints ​

New enrolments install the Wazuh agent version AGENT_VERSION. Existing agents are not upgraded automatically; on Debian and Ubuntu the package is held so routine upgrades do not change it.

Theseus documentation