How to Install
This section is for the operator setting up Open EPM on a fresh ARM64 Google Cloud machine. Read the installation overview first to choose between the pinned public source build and a signed package. The source build reaches healthy core services and a verified unsigned denial. The packaged administrator sign-in procedure uses a signed release with its authenticated gateway.
Use the ordered installation checklist to prepare the cloud resources, verify the host, configure identity, and initialize a fresh database. If administrator sign-in is your goal, check the required publisher artifacts before provisioning.
In this section
- OverviewIdentify the pinned source revision, supported profiles and the administrator sign-in dependency.
- How to InstallFollow the ordered installation stages and record the checkpoint reached.
- 1. Prepare the prerequisitesCheck ARM capacity, network ownership, domain, identity and operator permissions.
- 2. Provision Google CloudSelect the exact image, provision an internal VM and verify IAP before attaching the reserved address.
- 3. Prepare the hostConnect through IAP, verify Ubuntu ARM64, and prepare Docker and the pinned checkout.
- 4. Configure Open EPMMatch the issuer and audiences and validate the private Compose configuration.
- 5. Build and initialize a fresh databaseBuild the pinned images, initialize the database and enroll the initial operator.
- 6. Start and inspect the core servicesStart the approved Compose profile and verify each listener’s readiness.
- 7. Verify fail-closed accessCheck loopback bindings and confirm that unsigned access is denied.
- 8. Complete administrator browser sign-inCheck the signed release, independently trusted keys, authenticated gateway and first scoped administrator session.
- 9. Stop without deleting dataStop the development Compose project while retaining its data volumes.
- Completion checklistRecord what passed, what was retained and which packaged checks still need evidence.