Two install paths today: the snap-only path (you already have an Ubuntu Core or Ubuntu Server host) and the image path (you're flashing a fresh appliance).

Path A — snap on existing host

1. Ubuntu Core 24 or Ubuntu Server 24 with snapd present.
2. sudo snap install --dangerous datab-app_*.snap
3. sudo snap services datab-app — verify ~14 entries.
4. sudo /snap/datab-app/current/scripts/doctor.sh — expect exit 0.
5. Populate $SNAP_COMMON/secrets/postgres.env.
6. Restart datab-app.flyway; the migration runs once and the backend comes up.

Path B — flash node image

1. Pick the image — amd64 for Intel/AMD, arm64 for Pi 5 + ARM appliances.
2. Verify the SHA-256 against the value published on the Releases page.
3. Flash to the boot disk (USB key writer + dd, or balenaEtcher).
4. Boot the node; wait ~5 minutes for snapd to enable services.
5. Run doctor.sh from the console or from a SSH session.

Required configuration after install

• DATAB_INTERNAL_API_KEY — non-blank in production. Set via snap set or environment.
• POSTGRES_* in $SNAP_COMMON/secrets/postgres.env.
• (Optional) GU_WAZUH_* if a Wazuh manager exists on the LAN.

Operator runbook: see Operator Docs for what to do during a healthy daily-ops day.