# Instalação e Configuração Portainer
# Install Portainer CE with Docker on Linux
##### Link: [https://docs.portainer.io/start/install-ce/server/docker/linux](https://docs.portainer.io/start/install-ce/server/docker/linux)
##### **Introduction**
#####
Portainer consists of two elements, the Portainer Server, and the Portainer Agent. Both elements run as lightweight Docker containers on a Docker engine. This document will help you install the Portainer Server container on your Linux environment. To add a new Linux environment to an existing Portainer Server installation, please refer to the Portainer Agent installation instructions.
##### To get started, you will need:
- ##### The latest version of Docker installed and working. We recommend following the official installation instructions for Docker - in particular, we advise against installing Docker via snap on Ubuntu distributions as you may run into compatibility issues.
- sudo access on the machine that will host your Portainer Server instance;
- By default, Portainer Server will expose the UI over port 9443 and expose a TCP tunnel server over port 8000. The latter is optional and is only required if you plan to use the Edge compute features with Edge agents.
##### The installation instructions also make the following assumptions about your environment:
- ##### Your environment meets our requirements. While Portainer may work with other configurations, it may require configuration changes or have limited functionality.
- You are accessing Docker via Unix sockets. Alternatively, you can also connect via TCP.
- SELinux is disabled on the machine running Docker. If you require SELinux, you will need to pass the --privileged flag to Docker when deploying Portainer.
- Docker is running as root. Portainer with rootless Docker has some limitations, and requires additional configuration.
##### **Deployment**
##### First, create the volume that Portainer Server will use to store its database:
##### *docker volume create portainer\_data*
##### Then, download and install the Portainer Server container:
##### *docker run -d -p 8000:8000 -p 9443:9443 --name portainer --restart=always -v /var/run/docker.sock:/var/run/docker.sock -v portainer\_data:/data portainer/portainer-ce:2.21.0*
#####
By default, Portainer generates and uses a self-signed SSL certificate to secure port 9443. Alternatively you can provide your own SSL certificate during installation or via the Portainer UI after installation is complete.
##### If you require HTTP port 9000 open for legacy reasons, add the following to your docker run command:
##### -p 9000:9000
##### Portainer Server has now been installed. You can check to see whether the Portainer Server container has started by running docker ps:
##### root@server:~# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
de5b28eb2fa9 portainer/portainer-ce:2.21.0 "/portainer" 2 weeks ago Up 9 days 0.0.0.0:8000->8000/tcp, :::8000->8000/tcp, 0.0.0.0:9443->9443/tcp, :::9443->9443/tcp portainer
#####
**Logging In**
##### Now that the installation is complete, you can log into your Portainer Server instance by opening a web browser and going to:
##### *[https://localhost:9443](https://localhost:9443)*
##### Replace localhost with the relevant IP address or FQDN if needed, and adjust the port if you changed it earlier.
##### You will be presented with the initial setup page for Portainer Server.
# Updating on Docker Standalone
Link: [https://docs.portainer.io/start/upgrade/docker](https://docs.portainer.io/start/upgrade/docker)
Always match the agent version to the Portainer Server version. In other words, when you're installing or updating to Portainer 2.21.0 make sure all of the agents are also on version 2.21.0.
Before beginning any update, we highly recommend [taking a backup](https://github.com/portainer/portainer-docs/blob/2.21/admin/settings/general/README.md#back-up-portainer) of your current Portainer configuration.
**Updating your Portainer Server**
Starting from Portainer CE 2.9 and BE 2.10, HTTPS is enabled by default on port `9443.` These instructions will configure Portainer to use 9443 for HTTPS and do not expose 9000 for HTTP. If you need to retain HTTP access, you can add: `-p 9000:9000`to your command.
You can also choose to [completely disable HTTP](https://github.com/portainer/portainer-docs/blob/2.21/admin/settings/general/README.md#force-https-only) after the update. Before you make Portainer HTTPS only, make sure you have all your Agents and Edge Agents already communicating with Portainer using HTTPS.
This article assumes that you used our recommended deployment scripts.
To update to the latest version of Portainer Server, use the following commands to stop then remove the old version. Your other applications/containers will not be removed.
**docker rm portainer**
Now that you have stopped and removed the old version of Portainer, you must ensure that you have the most up to date version of the image locally. You can do this with a `docker pull` command:
**docker pull portainer/portainer-ce:2.21.0**
Finally, deploy the updated version of Portainer:
**docker run -d -p 8000:8000 -p 9443:9443 --name=portainer --restart=always -v /var/run/docker.sock:/var/run/docker.sock -v portainer\_data:/data portainer/portainer-ce:2.21.0**
These `docker run` commands include opening port `8000` which is used for Edge Agent communication as included in our [installation instructions](https://docs.portainer.io/start/install/server/docker/linux). If you do not need this port open, you can remove it from the command.
To provide your own SSL certs you may use `--sslcert` and `--sslkey` flags as below to provide the certificate and key files. The certificate file needs to be the full chain and in PEM format. For example, for Business Edition:
**docker run -d -p 8000:8000 -p 9443:9443 --name=portainer --restart=always -v /var/run/docker.sock:/var/run/docker.sock -v portainer\_data:/data portainer/portainer-ee:2.21.0 --sslcert /path/to/cert/portainer.crt --sslkey /path/to/cert/portainer.key**
The newest version of Portainer will now be deployed on your system, using the persistent data from the previous version, and will also upgrade the Portainer database to the new version.
When the deployment is finished, go to `https://your-server-address:9443` or `http://your-server-address:9000` and log in. You should notice that the update notification has disappeared and the version number has been updated.
**Agent-only upgrade**
To update to the latest version of Portainer Agent, use the following commands to stop then remove the old version. Your other applications/containers will not be removed.
docker stop portainer\_agent
If you have set a custom `AGENT_SECRET` on your Portainer Server instance (by specifying an `AGENT_SECRET` environment variable when starting the Portainer Server container) you must remember to explicitly provide the same secret to your Agent in the same way (as an environment variable) when updating your Agent:
`-e AGENT_SECRET=yoursecret`