Requirements

To install Manifest in a self-hosted environment, two virtual machines, or physical nodes, are required. The first machine is referred to as the installation client, and the second is the target server. The sections below detail the requirements for both the server and client machines.


Server Requirements

Supported Operating Systems

  • Debian 12
  • RHEL 9
  • Ubuntu 24.04

Only x86_64 architectures are supported at this time.

Resource Requirements

MinimumRecommended
Compute16 vCPU48 vCPU
Memory64 GB192 GB
Storage300 GB3 TB

Additional Packages

The following tools and packages are required to be pre-installed on the target server before running the Manifest installation wizard.

  • Python3
  • SSH server

Installation Client Requirements

The machine being used as the installation client must be a Linux machine with a bash compatible shell. It also requires the following software dependencies. The AWS CLI is used to pull the self-hosted installation bundle from Manifest's S3 bucket, as well as access the installation tools container.

  • AWS CLI
  • Docker1
  • SSH Client

Manifest provides a container image that contains all run-time dependencies required by the installation wizard. Running the wizard from this container is recommended wherever possible.

1Podman is not supported.

Network Requirements

The client machine running the Manifest installation must also be able to SSH to the target server. Additionally, if network traffic is restricted between the client and the server, the following ports must be open to the client:

  • TCP 22 (SSH)
  • TCP 80 (HTTP)
  • TCP 443 (HTTPS)
  • TCP 6443 (Kubernetes API)
  • TCP 30000-32767 (Kubernetes NodePorts)

Network Environment Requirements

DNS

You will need to configure DNS records pointing to your server's IP address. This includes records for the main application, API, authentication service, and object storage buckets. Review the DNS Configuration guide to understand the required DNS records and plan your DNS setup.

Firewall

If your environment restricts outbound traffic, you must allow access to external services required for installation and runtime operations. Review the Firewall Configuration guide for the complete list of domains that must be accessible.


Next Steps

Once you have verified that your environment meets these requirements, proceed to gather the required credentials.