Install ECE Without Internet Accessedit

Elastic Cloud Enterprise supports installation on hosts without internet access, commonly referred to as an offline or air-gapped installation.

To install offline, you must first download the installation images and installation script from Elastic and push them to your private Docker registry. After pushing the images, point the installation script to your private Docker registry with the --docker-registry parameter to install ECE on your hosts.

Alternatively, you can also install ECE offline without your own Docker registry.

Before you Beginedit

To use these instructions, you must have your own private Docker registry set up already. To learn more, see Deploy a registry server.

To run the installation script, a user must be part of the docker group. You should not install Elastic Cloud Enterprise as the root user.

Additional requirements:

  • The Elasticsearch and Kibana images that you use during the installation process must be prepared to work with Elastic Cloud Enterprise. All images listed in this section are suitable. You must not try to substitute other images, unless guided by someone from Elastic.
  • The Elasticsearch and Kibana images you use must be compatible with each other:

    • For versions before 5.0, refer to the Support Matrix to see which versions of can be used together and download the correct Docker images for ECE listed in this section.
    • For version 5.0 and later, the versioning of Elasticsearch and Kibana is synchronized and versions where the major, minor, and patch levels match can be used together. Differences in build versions indicated by a dash and number suffix do not affect compatibility (5.5.1-1, for example).

If you plan to use one, you should also have set up your wildcard DNS record already.

Available Docker Imagesedit

The following ECE and Elastic Stack images are available for offline installation. When installing a specific version of Elastic Cloud Enterprise without internet access, you must download the ECE image and all the Elastic Stack images that originally shipped with the version of ECE that you are installing.

Download the images you need with the docker pull IMAGE command, where IMAGE is a Docker image. For example:

docker pull
docker pull
docker pull
Elastic Cloud Enterprise 1.1.5

Elastic Cloud Enterprise 1.1.4

Elastic Cloud Enterprise 1.1.3

Elastic Cloud Enterprise 1.1.2

Elastic Cloud Enterprise 1.1.1

Elastic Cloud Enterprise 1.1.0

Additional Elastic Stack versions are available as Docker images that you can use with ECE. For offline installations, you also need to download the corresponding Elastic Stack pack. To learn more, see Manage Elastic Stack Versions.

All Elastic Stack images

1 Requires Elastic Cloud Enterprise 1.1.4 or later.

2 Requires Elastic Cloud Enterprise 1.1.2 or later.

3 Requires Elastic Cloud Enterprise 1.1.0 or later.

Push Images to a Docker Registryedit

Before you can start setting up a new ECE installation in an air-gapped environment, you need to download the installation images and push them to your private Docker registry:

  1. On an internet-connected host that has Docker installed, pull the Docker images required by the installation script. For example, for Elastic Cloud Enterprise 1.1.5 and the Elastic Stack versions it shipped with, you need:

    • Elastic Cloud Enterprise 1.1.5
    • Elasticsearch 6.4.0-0 and Kibana 6.4.0-0
    • Elasticsearch 5.6.11-0 and Kibana 5.6.11-0
    • Elasticsearch 2.4.6-1 and Kibana 4.6.6-2

    To pull the Docker images:

    docker pull
    docker pull
    docker pull
    docker pull
    docker pull
    docker pull
    docker pull
  2. Tag the Docker images with your private registry, where REGISTRY is my.private.repo:5000, for example:

    docker tag REGISTRY/cloud-enterprise/elastic-cloud-enterprise:1.1.5
    docker tag REGISTRY/cloud-assets/elasticsearch:6.4.0-0
    docker tag REGISTRY/cloud-assets/kibana:6.4.0-0
    docker tag REGISTRY/cloud-assets/elasticsearch:5.6.11-0
    docker tag REGISTRY/cloud-assets/kibana:5.6.11-0
    docker tag REGISTRY/cloud-assets/elasticsearch:2.4.6-1
    docker tag REGISTRY/cloud-assets/kibana:4.6.6-2
  3. Push the Docker images to your private Docker registry, where REGISTRY is my.private.repo:5000, for example:

    docker push REGISTRY/cloud-enterprise/elastic-cloud-enterprise:1.1.5
    docker push REGISTRY/cloud-assets/elasticsearch:6.4.0-0
    docker push REGISTRY/cloud-assets/kibana:6.4.0-0
    docker push REGISTRY/cloud-assets/elasticsearch:5.6.11-0
    docker push REGISTRY/cloud-assets/kibana:5.6.11-0
    docker push REGISTRY/cloud-assets/elasticsearch:2.4.6-1
    docker push REGISTRY/cloud-assets/kibana:4.6.6-2

Perform the Offline Installationedit

An offline installation points the Elastic Cloud Enterprise installation script to your private Docker registry, but otherwise follows the standard ECE installation process.

You start setting up a new Elastic Cloud Enterprise installation by installing the software on your first host. This first host becomes the initial coordinator and provides access to the Cloud UI, where you can manage your installation. You then install Elastic Cloud Enterprise on additional hosts to add them as resources to an existing installation.

Setting up a production system? Don’t forget to take a look at the examples in our Playbook for Production. The playbook provides sample installation commands that are tailored to different deployment sizes and high availability.

To perform an offline installation:

  1. On an internet-connected host, download the installation script:

    curl -L -O
  2. Copy the installation script to each host where you plan to install Elastic Cloud Enterprise. (Alternatively, you can place the installation script in a secure network location where your other hosts can access it.)
  3. Invoke the installation script on each host with the --docker-registry REGISTRY parameter, where REGISTRY is my.private.repo:5000, for example:

    1. On the first host:

      bash install --docker-registry REGISTRY
    2. On additional hosts, include the --coordinator-host HOST_IP and --roles-token 'TOKEN' parameters provided to you when you installed on the first host, along with the --docker-registry REGISTRY parameter:

      bash install --coordinator-host HOST_IP  --roles-token 'TOKEN' --docker-registry REGISTRY

      If you are creating a larger Elastic Cloud Enterprise installation:

      • To make your installation fault tolerant or highly available, include the --availability-zone ZONE_NAME parameter to specify the name of an availability zone for the additional host, which determines which failure domain the host should belong to. Hosts should go into three different availability zones for production systems. For example, including the parameter --availability-zone ece-region-1c when you install on additional hosts places the additional host into availability zone ece-region-1c.
      • To simplify the steps for assigning roles so that you do not have to change the roles in the Cloud UI later on, include the --roles parameter. For example, to bring up additional allocators to scale out your installation, specify the --roles "allocator" parameter. You do need to generate a roles token that has the right permissions for this to work; the token generated during the installation on the first host will not suffice.

After installation completes, additional hosts come online as runners with some roles assigned to them already. If you did not specify additional roles with the --roles parameter, you can assign new roles to nodes in the Cloud UI later.