> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/admin-guide/33/install/deploy-defender/container.md).

# Deploy Container Defender

Install Container Defender on each host that you want Prisma Cloud to protect.

Single Container Defenders can be configured in the Console UI, and then deployed with a curl-bash script. Alternatively, you can use [twistcli to configure](/admin-guide/33/install/deploy-defender/container/single-defender-cli.md) and deploy Defender directly on a host.

## Install a single Container Defender (Console UI)

Configure how a single Container Defender will be installed, and then install it with the resulting curl-bash script.

**Prerequisites**:

* Your system meets all minimum [system requirements](/admin-guide/33/install/system-requirements.md).
* Ensure that the host machine where you installed the Defender can access the Prisma Cloud console the network.
* You have sudo access to the host where you want to deploy the Defender.

\+ image::install-defender-deploy-page.png\[width=800]

1. Under **Deployment method**, select **Single Defender**.
2. In **Defender type**, select **Container Defender - Linux** or **Container Defender - Windows**.

   When you select **Container Defender - Linux**, **Container Runtime Type** field appears.
3. In **Container Runtime Type**, select **Podman** or **Docker**.

   When you select Podman, the installation script includes the `--install-podman` argument. If your infrastructure uses a custom Podman runtime socket path, you can specify it using the `--podman-socket` argument.

   For example, to use Podman with a custom runtime socket path, the final command would look like this:

   `curl -sSL --header "<Bearer TOKEN>###" -X POST <TENANT URL>/api/v1/scripts/defender.sh | sudo bash -s — -c "stage-consoles-cwp.cloud.twistlock.com" -v --install-podman --podman-socket "<custom_runtime_socket_path>"`
4. (Optional) Set a custom communication port (4) for the Defender to use.
5. (Optional) Set a proxy (3) for the Defender to use for the communication with the Console.
6. (Optional) Under **Advanced Settings**, Enable **Assign globally unique names to Hosts** when you have multiple hosts that can have the same hostname (like autoscale groups, and overlapping IP addresses).

   After setting the option to **ON**, Prisma Cloud appends a unique identifier, such as ResourceId, to the host’s DNS name. For example, an AWS EC2 host would have the following name: Ip-171-29-1-244.ec2internal-i-04a1dcee6bd148e2d.
7. Copy the install scripts command from the right side panel, which is generated according to the options you selected. On the host where you want to install Defender, paste the command into a shell window, and run it.

## Verify the Install

Verify that the Defender is installed and connected to Console.

Defender can be deployed and run with full functionality when dockerd is configured with SELinux enabled (--selinux-enabled=true). All features will work normally and without any additional configuration steps required. Prisma Cloud automatically detects the SELinux configuration on a per-host basis and self-configures itself as needed. No action is needed from the user.

1. In Console, go to **Manage > Defenders > Defenders: Deployed**.

   Your new Defender should be listed in the table, and the status box should be green and checked.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.prismacloud.io/admin-guide/33/install/deploy-defender/container.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.