Setup and commands · Astrixion Docs

An Environment runs Misanthropic agents. Install one on a host, then select it when adding an agent to a Room. The installers download the runtime; no source checkout is needed.

Host	Guide
Debian/Ubuntu x64 — agents with the Linux arsenal	Install a Linux Environment
Windows x64 desktop — agents with visible Chrome browsers	Install a Windows Environment

Have a protected Infisical bootstrap JSON file and Misanthropic enrollment key ready. Linux also needs credentials for registry.astrixion.ai:5443. Both hosts use Tailscale for private connectivity.

The operator supplies a Universal Auth identity with read access to the host's selected secret scope. The bootstrap file contains these six required string fields; replace placeholders privately:

{
  "domain": "https://app.infisical.com",
  "clientId": "<universal-auth-client-id>",
  "clientSecret": "<universal-auth-client-secret>",
  "projectId": "<project-id>",
  "environment": "<environment-slug>",
  "secretPath": "/<folder>"
}

Use an HTTPS origin for domain and an absolute folder path for secretPath (/ for the root). Keep the file private: root-only permissions on Linux; on Windows, allow only the current user, SYSTEM and Administrators, including inherited access. Never paste its contents into logs or support messages. The installer copies it to Bootstrap/infisical.json. New bundles use HTTPS helpers, not BWS binaries or configuration. The launchers fetch static secrets at startup; this is not live credential rotation.

Need scan capacity instead? Install Sonar workers. Sonar workers use a different bootstrap secret and run scan tasks, not Room agents.