Air-Gapped Install

For servers without internet access, Presswerk provides an air-gapped installation method.

Overview

1. On an internet-connected machine: Create a bundle containing all Docker images and configuration
2. Transfer the bundle to the air-gapped server (USB drive, internal file share, etc.)
3. On the air-gapped server: Load images and install

Step 1: Create Bundle

On a machine with Docker and internet access:

curl -fsSL https://presswerk.app/install.sh | bash -s -- --bundle

To bundle a specific version:

APP_VERSION=1.2.3 curl -fsSL https://presswerk.app/install.sh | bash -s -- --bundle

This creates presswerk-bundle-<version>.tar.gz containing:

• Docker images for PostgreSQL, Keycloak, and Presswerk (~800 MB compressed)
• Docker Compose file
• Install script
• Database init script

Step 2: Transfer

Copy the bundle to the target server using your preferred method:

# USB drive
cp presswerk-bundle-latest.tar.gz /media/usb/

# SCP to bastion host
scp presswerk-bundle-latest.tar.gz bastion:/tmp/

# Internal file share
cp presswerk-bundle-latest.tar.gz /mnt/fileshare/

Step 3: Install

On the air-gapped server:

tar xzf presswerk-bundle-latest.tar.gz
cd presswerk-bundle-latest
./install.sh --offline

The installer will:

1. Load Docker images from the bundle
2. Generate configuration (prompts for domain)
3. Start all services

Manual Air-Gapped Install

If you prefer not to use the install script, you can prepare images manually.

Save images (internet-connected machine)

docker pull ghcr.io/fs2-software/presswerk:1.2.3
docker pull ghcr.io/fs2-software/presswerk-keycloak:1.2.3
docker pull postgres:16-alpine

docker save \
  ghcr.io/fs2-software/presswerk:1.2.3 \
  ghcr.io/fs2-software/presswerk-keycloak:1.2.3 \
  postgres:16-alpine \
  | gzip > presswerk-images.tar.gz

Load images (air-gapped machine)

docker load < <(gzip -dc presswerk-images.tar.gz)

Then follow the Manual Install steps.

Air-Gapped Updates

To update an air-gapped installation:

1. Create a new bundle with the target version on an internet-connected machine
2. Transfer to the air-gapped server
3. Load the new images:

   docker load < <(gzip -dc images.tar.gz)

4. Update APP_VERSION in .env
5. Restart:

   docker compose up -d

Container Registry Mirroring

For organizations with many air-gapped servers, consider setting up an internal container registry:

# On a registry server accessible from the air-gapped network
docker pull ghcr.io/fs2-software/presswerk:1.2.3
docker tag ghcr.io/fs2-software/presswerk:1.2.3 registry.internal:5000/presswerk:1.2.3
docker push registry.internal:5000/presswerk:1.2.3

Update docker-compose.yml to reference your internal registry:

services:
  app:
    image: registry.internal:5000/presswerk:${APP_VERSION:-latest}
  keycloak:
    image: registry.internal:5000/presswerk-keycloak:${APP_VERSION:-latest}