Linux devices
Oneleet manages company-owned Linux workstations through the Oneleet Agent, alongside your Apple and Windows fleet in the same Devices view. The agent ships as DEB and RPM packages and an install script, supports x86_64 and arm64, and starts reporting within minutes of installation — no enrollment infrastructure to set up first.
What Oneleet can do today
Section titled “What Oneleet can do today”Continuous security checks
Section titled “Continuous security checks”The agent checks each device’s security posture every few minutes and reports results to the device view, where they roll up into the device’s compliance status:
- Disk encryption — the system drive is encrypted;
- Firewall — a supported firewall is enabled, covering UFW, firewalld, nftables, and iptables;
- Local user accounts — which accounts exist and their permissions;
- Device inventory — hardware model and serial number, OS version, and storage capacity;
- Virtual machine detection — VMs are identified so your device scope stays accurate.
See Data collection for the full list of what the agent reports.
Remote wipe
Section titled “Remote wipe”Remote wipe securely erases the device using cryptographic methods if available, with a hard disk wipe fallback. This is a destructive action and should be used only when the device should no longer keep company data. A full OS reinstall will be necessary to continue using the device.
Use this when:
- a device is lost or stolen and should be treated as unrecoverable;
- an employee has left the company and the device needs to be reset;
- a device is being prepared for reassignment, return, or disposal.
Restart
Section titled “Restart”Restart lets an admin reboot a Linux device remotely — useful for troubleshooting or applying changes when the user cannot easily restart the device themselves.
Manage local user accounts
Section titled “Manage local user accounts”Admins can manage a device’s local accounts remotely: create an account (optionally with administrator rights), disable or re-enable it, reset its password, or delete it — handy for offboarding or reclaiming a device.
Every action above is recorded in the device activity log, and the agent keeps itself up to date after installation — see the Oneleet MDM introduction for these shared capabilities.
Device configuration policies for Linux are in progress — today, policies are available for Windows and Apple devices.
Getting started
Section titled “Getting started”- Have the employee open the Oneleet Portal and download the Oneleet Agent for their Linux distribution from the Devices tab.
- Install the package (or run the install script as root) and sign in with the work email address.
- The device appears in the Oneleet Dashboard under Devices, with security checks reporting within a few minutes.
See Setup for detailed install and uninstall steps.