> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/admin-guide/32/install/deploy-defender/container/single-defender-cli.md).

# Install a single Container Defender using the CLI

Use the `twistcli` CLI tool to install a single Container Defender on a Linux host.

**Prerequisites**:

* Your system meets all minimum [system requirements](/admin-guide/32/install/system-requirements.md).
* You have sudo access to the host where you want to deploy the Defender.
* You’ve created a service account with the Defender Manager role. twistcl uses the service account to access Console.

1. Verify that the host where you install Defender can connect to the Prisma Cloud console.
2. SSH to the host where you want to install Defender.
3. Download twistcli.

   ```
   $ curl -k \
     -u <USER> \
     -L \
     -o twistcli \
     https://<CONSOLE>/api/v1/util/twistcli
   ```
4. Make the twistcli binary executable.

   ```
   $ chmod a+x ./twistcli
   ```
5. Install Defender.

   ```
   $ sudo ./twistcli defender install standalone container-linux \
     --address https://<CONSOLE> \
     --user <USER>
   ```
6. Verify Defender was installed correctly.

   ```
   $ sudo docker ps
   CONTAINER ID   IMAGE                                  COMMAND                  CREATED          STATUS         PORTS     NAMES
   677c9883c4b6   twistlock/private:defender_21_04_333   "/usr/local/bin/defe…"   11 seconds ago   Up 10 seconds            twistlock_defender_21_04_333
   ```

## Verify the install

Verify that Defender is installed and connected to Console.

Defender can be deployed and run with full functionality when dockerd is configured with SELinux enabled (--selinux-enabled=true). All features will work normally and without any additional configuration steps required. Prisma Cloud automatically detects the SELinux configuration on a per-host basis and self-configures itself as needed. No action is needed from the user.

1. In the Prisma Cloud console, go to **Manage > Defenders > Defenders: Deployed**.

   Your new Defender should be listed in the table, and the status box should be green and checked.

   <figure><img src="/files/YZrFmPTjlI340lywRcN1" alt="install defender deploy page"><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.prismacloud.io/admin-guide/32/install/deploy-defender/container/single-defender-cli.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.