Linux deployment

Linux devices are deployed with a deployment package you download from the portal. Each package is a ZIP containing two artifacts plus a README:

• A managed managed policy (inputguard-policy.json) that carries your organization’s static configuration — and, in production, force-installs and locks the extension.
• A generic enrollment script that gives the device a stable identity, captures hostname and OS, and writes the device-specific managed configuration.
• A README with the exact steps for this platform.

The administrator workflow is the same on every platform: install the profile or policy, then run the enrollment script. The user never visits the Chrome Web Store or installs anything manually.

Deployment packages are generated per organization from a deployment profile in the portal, so there is nothing to download here — you get the Linux package from your own workspace.

1. 1

   Open Deployment in the InputGuard portal

   Go to the Deployment page in your workspace.
2. 2

   Create or select a deployment profile

   A profile carries your organization’s enrollment settings and can be reused across devices.
3. 3

   Open Deploy and download the package

   Open the profile’s actions (⋮) menu, choose Deploy…, then select Download deployment package under Linux. You get a ZIP with the managed policy, the enrollment script (inputguard-enroll.sh), and a README.

Unzip the package on the Linux device, keeping both files together, then:

1. 1

   Install the managed policy

   Copy inputguard-policy.json into /etc/opt/chrome/policies/managed/ (and /etc/chromium/policies/managed/), or push it through config management. In production it also force-installs and pins the extension.
2. 2

   Run the enrollment script

   With inputguard-policy.json next to it, run as root: sudo ./inputguard-enroll.sh. It creates (or reuses) a stable device identity, captures hostname and OS, and writes the complete managed policy.
3. 3

   Reload Chrome policy

   Restart Chrome (or open chrome://policy and click Reload policies) so the managed configuration takes effect.

After running the enrollment script, open the portal and go to the Devices page. The Linux device should appear in the device list, confirming it registered with your organization. Once it is listed, you can assign policy to it.