Linux (generic)

This guide covers generic Linux hosts running CentOS and compatible distributions (RHEL, Rocky Linux, AlmaLinux, and similar).

CentOS and compatible distributions

Create a backup account. Create a dedicated local user for QUARK:

useradd -m netwatch-backup
passwd netwatch-backup

A regular unprivileged user is sufficient for QUARK to collect the network and system configuration it backs up. If you want QUARK to capture files readable only by root, grant the account narrowly scoped sudo rights to read those specific files rather than full root access.

Enable SSH. The OpenSSH server is installed and enabled by default on most distributions; if not:

dnf install openssh-server
systemctl enable --now sshd

To restrict access to the Netwatch collector, allow SSH from the collector's IP address in your host firewall (for example a firewalld rich rule), or limit the account in /etc/ssh/sshd_config:

AllowUsers [email protected]

Replace 203.0.113.10 with the collector's address, and reload sshd after editing.

Platform notes. SSH key authentication is supported and recommended over passwords; add the collector's public key to /home/netwatch-backup/.ssh/authorized_keys.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.