Installing the Toolbox

If the Toolbox has been installed, skip this section.
The Ascend-DMI tool has been preset in the Atlas 500 AI edge station. The installation path of the tool is /home/data/Ascend-DMI.
This section describes how to install the Toolbox using commands. For details about how to harden system security, see Security Hardening.

Downloading the Software Package

The software is classified into the commercial edition and community edition. The functions of the two editions are the same except the download permission and use of purpose. The community edition can be downloaded directly without applying for related permissions, but it cannot be used for commercial purpose. To download the commercial edition, you need to apply for related permissions.

Obtain the Toolbox software package and digital signature file listed in the following table.

**Table 1** Software packages
Type	Software Package	Description	How to Obtain
Toolbox	Ascend-mindx-toolbox_{version}_linux-{arch}.run	It contains container engine plugins, such as Ascend-DMI tool.	Commercial edition: Link Community edition: Link

You can obtain software packages in .deb format from the links provided in the preceding table. For details about how to install the software packages, see Installing the Toolbox Software Package (.deb). The links also provide packages in *.zip format. The following table describes the content of compressed packages.

**Table 2** Files in the package
File	Description
Ascend-mindx-toolbox_{version}_linux-{arch}.zip	Toolbox, which contains the following files: *Ascend-mindx-toolbox_{version}_linux-{arch}.run: executable runfile of the Toolbox. Ascend-mindx-toolbox_{version}_linux-{arch}.sh: ToolBox script. The acceptable parameters are show_info, uninstall, and a custom directory, which are used to query information about installation and uninstallation operations, installation log storage, and operation results (installation or upgrade). Note that this script is designed to adapt to FusionDirector or iBMA. You are not advised to use it directly. toolbox.sh: ToolBox script, which can be followed by options show_info* and uninstall. They are used to query the installation information and uninstall the Toolbox. Note that this script is designed to adapt to FusionDirector or iBMA. You are not advised to use it directly. version.xml: software description, including the version number.
Ascend-mindx-toolbox_{version}_linux-{arch}.zip.cms	Signature for the *Ascend-mindx-toolbox_{version}_linux-{arch}.zip* package. When upgrading the Toolbox, you can refer to Using the ascend-cert Tool to check the integrity of the file.
Ascend-mindx-toolbox_{version}_linux-{arch}.zip.crl	Certificate revocation list (CRL) of the *Ascend-mindx-toolbox_{version}_linux-{arch}.zip* package. When upgrading the Toolbox, you can refer to Using the ascend-cert Tool to check the integrity of the file.
software.xml	Software description file.
software.xml.cms	Signature of the software description file.
software.xml.crl	CRL of the software description file.

{version} indicates the software version, and {arch} indicates the CPU architecture.

Verifying the Digital Signatures of Software Packages

To prevent a software package from being maliciously tampered with during transfer or storage, download also the corresponding digital signature file for integrity verification while downloading the software package.

After the software package is downloaded from the Huawei Support website, verify its PGP digital signature. See OpenPGP Signature Verification Guide. If the verification fails, do not use the software package, and contact Huawei technical support engineers.

Before a software package is used in installation or update, its digital signature also needs to be verified according to OpenPGP Signature Verification Guide to ensure that the software package is not tampered with.

For carriers: http://support.huawei.com/carrier/digitalSignatureAction.

For enterprises, visit https://support.huawei.com/enterprise/en/tool/pgp-verify-TL1000000054.

Preparing Installation and Running Users

You can install the Toolbox as the root user or a non-root user.

Installation as the root user: After the installation, all users can run the Toolbox.
Installation as a non-root user: The installation and running users must be the same.
Run the following commands as the root user to create a non-root user.
1. Create a non-root user.
```
groupadd usergroup     
useradd -g usergroup -d /home/username -m username -s /bin/bash
```
2. Set the password for the non-root user.
```
passwd username
```

The password must meet the password complexity requirements. The password validity period is advised to be set to 90 days. You can change the validity period in the /etc/login.defs file or using the chage command. For details, see Setting User Account Validity Period.

Procedure

Log in to the installation environment as the installation user of the software package.
For security purposes, ensure that the following directories and files meet security requirements before installing and using the software:
1. Installation directories: /usr/local/Ascend/toolbox (for the root user), ~/Ascend/toolbox (for a common user)
2. Configuration directories and files, such as /etc/ascend_install.info and /etc/Ascend/.
3. Log directories and files, such as /var/log/ascend_seclog/ and /var/log/ascend-dmi.
Upload the Toolbox to a path (for example, /home) that meets the security requirements of your organization in the installation environment.
Go to the directory where the software package is stored.
Grant the execute permission on the software package.
chmod +x Ascend-mindx-toolbox_{version}_linux-{arch}.run
Run the following command to check the consistency and integrity of the software package installation file:
./Ascend-mindx-toolbox_{version}_linux-{arch}.run --check
Run the following commands to install the software. (The following commands support parameters such as --install-path=<path>. For details about the parameters, see Parameter Description.)
- If the installation is performed by the root user, do not to specify the installation path in the directory of a non-root user. Otherwise, the root user file may be replaced by a non-root user for privilege escalation.
- If you specify a path for installation, ensure that the path meets the security requirements of your organization.
- If you do not specify an installation path, the software is installed in the default path. The default installation paths are as follows:
  root user: /usr/local/Ascend
  Non-root user: ${HOME}/Ascend
  ${HOME} indicates the directory of the current user.
./Ascend-mindx-toolbox_{version}_linux-{arch}.run --install
If the following information is displayed, the software is successfully installed:
```
[INFO] xxx install success
```
xxx indicates the name of a software package to be installed.
- The running of the Toolbox depends on the driver and CANN. For details about how to configure the account, see the CANN Software Installation Guide.
- The source code of the Toolbox involves the open source software at gcc.gnu.org. For details about email addresses and websites, see the source code of the software.