Install GoCD as two cooperating services: a GoCD server that stores configuration and coordinates pipelines, and at least one GoCD agent that checks out code and runs jobs. On a supported Debian, Ubuntu, or RHEL-compatible VPS, the reliable sequence is to prepare storage and firewall rules, install signed server and agent packages, set the agent’s server URL, approve the agent in the dashboard, and then place the server behind HTTPS for public access.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
What you are installing
GoCD is a continuous-delivery server built around a server–agent model. The server presents the web dashboard, stores pipeline configuration, schedules work, and records results. Agents are the workers: they fetch source code, execute tasks, produce test output, and upload artifacts. A usable installation therefore needs one running server and at least one registered agent; installing only the server leaves pipelines with nowhere to run.
As an Amazon Associate I earn from qualifying purchases.
The agent does not become eligible merely because its package is installed. GoCD deliberately places a new agent in a disabled state until an administrator enables it in the server interface. That approval step prevents an unexpected machine from receiving source code or credentials.
Choose a VPS that will not run out of resources
Supported operating systems and minimums
The current GoCD system-requirements page supports Debian 11 or later, Ubuntu 22 or later, and RHEL/CentOS 8 or compatible distributions such as AlmaLinux and Rocky Linux. The listed server minimum is 1 GB of RAM, two CPU cores clocked at 2 GHz, and 1 GB of free disk space; 2 GB of RAM is recommended. An agent minimum is 128 MB of RAM and a 2 GHz CPU.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
| Component | Supported Linux families | Published minimum | Practical planning point |
|---|---|---|---|
| GoCD server | Debian 11+, Ubuntu 22+, RHEL/CentOS 8+ compatibles | 1 GB RAM, 2 CPU cores at 2 GHz, 1 GB free disk | 2 GB RAM is the documented recommendation; reserve additional fast disk for artifacts and logs |
| GoCD agent | Use a distribution supported by the agent package | 128 MB RAM and a 2 GHz CPU | Build tools, compilers, containers, and test suites usually require substantially more than the agent minimum |
Those figures describe the GoCD software, not the workload. A pipeline that compiles large projects, runs browsers, builds container images, or executes several jobs concurrently can exhaust memory and CPU quickly. Size the VPS for the heaviest simultaneous build rather than for the idle dashboard.
Prepare the host before adding GoCD
- Apply the normal security updates for your Linux distribution.
- Create DNS for the hostname people and agents will use, such as
ci.example.net, and ensure it resolves to the VPS or to the TLS reverse proxy in front of it. - Reserve persistent capacity for
/var/lib/go-server/artifacts. GoCD warns that artifacts can fill the operating-system disk, so a separate partition or mounted volume is safer than sharing the root filesystem. - Configure the VPS firewall or cloud security group to allow only the administration and proxy ports you actually need. Keep the GoCD backend port private when a reverse proxy is used.
- Install every source-control client required by your pipelines on both the server and the agents that use it. GoCD does not provide those external command-line clients for you.
- Decide how snapshots and off-host backups will be retained before the first production deployment.
Install the GoCD server package
Use the signed GoCD repository rather than downloading an unverified package. Pick the package instructions for the operating-system family on the VPS. Run these commands from an account with sudo access.
Recommended Free Tools
Debian and Ubuntu
Create the APT keyring directory, convert the published signing key to the keyring format, add the repository, refresh package metadata, and install the server with recommended dependencies:
sudo install -d -m 0755 /etc/apt/keyrings
curl -fsSL https://download.gocd.org/GOCD-GPG-KEY.asc | sudo gpg --dearmor -o /etc/apt/keyrings/gocd.gpg
echo "deb [signed-by=/etc/apt/keyrings/gocd.gpg] https://download.gocd.org /" | sudo tee /etc/apt/sources.list.d/gocd.list
sudo apt-get update
sudo apt-get install --install-recommends go-serverThe Debian package is tested on LTS Ubuntu releases and Debian. If your image has no curl or gpg, install those distribution utilities first, then repeat the keyring steps. Keeping the signed-by option limits that key to the GoCD repository instead of trusting it for every APT source.
RHEL-compatible distributions
On AlmaLinux, Rocky Linux, RHEL, CentOS Stream, or another compatible RPM family, install the repository definition and then the server package:
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
sudo curl -fsSL https://download.gocd.org/gocd.repo -o /etc/yum.repos.d/gocd.repo
sudo dnf install -y --setopt=install_weak_deps=true go-serveryum and microdnf can be used on systems where those are the available package front ends. The RPM instructions are tested on AlmaLinux as a proxy for RHEL-compatible systems.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Java runtime considerations
The packages normally bring in a compatible Java runtime through recommended or weak dependencies. If your distribution cannot provide one, install a supported JRE yourself and point GoCD to it through wrapper-properties.conf. The current system requirements state that a self-supplied runtime must be Java 21 or newer. Do not assume that an older Java already present for another application is suitable.
Start the server and confirm the dashboard
Manage the service with the package’s service wrapper:
sudo service go-server start
sudo service go-server stop
sudo service go-server restart
sudo service go-server consoleAfter startup, open http://localhost:8153/go from the VPS itself, or use an SSH tunnel if the backend is not publicly exposed. A blank or unreachable page usually means the service is still starting, the process failed its Java check, or a firewall is blocking the connection. Check /var/log/go-server before changing configuration.
Install, point, and approve a GoCD agent
Install the matching agent package
Use the same signed repository configured for the server. An agent can run on the server VPS for a small installation, or on a separate node for isolation and additional build capacity.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
# Debian or Ubuntu
sudo apt-get update
sudo apt-get install --install-recommends go-agent
# RHEL-compatible RPM system
sudo dnf install -y --setopt=install_weak_deps=true go-agentSet the server address
Edit /usr/share/go-agent/wrapper-config/wrapper-properties.conf and set the GoCD server hostname or IP. The value must be reachable from the agent node. If the server is published through a reverse proxy, use the proxy’s externally reachable HTTPS endpoint and port rather than an inaccessible private address.
Start or restart the agent after saving the file:
sudo service go-agent start
sudo service go-agent restartOn a separate node, the only network requirement is that the node can reach port 8153 on the GoCD server, or the alternative HTTPS port exposed by a fronting reverse proxy. Test name resolution and TCP reachability from the agent host before troubleshooting the GoCD UI.
Enable the agent in the dashboard
Sign in to the GoCD server, open the agent administration view, locate the newly connected agent, and choose the enable action. GoCD’s security rule is explicit: “For security reasons, all newly installed GoCD agents need to be enabled on the GoCD server before work is assigned to them.” Until you approve it, the agent may appear connected but will not receive jobs.
If the agent never appears, inspect the agent log under /var/log/go-agent, verify the server URL in wrapper-properties.conf, confirm that the selected port is allowed in both VPS firewalls, and check that the server certificate is trusted when you selected an HTTPS endpoint.
Ports, firewall rules, and HTTPS
Default port and exposure model
| Connection | Default or required endpoint | Recommended exposure |
|---|---|---|
| Browser to GoCD server | HTTP port 8153, dashboard path /go |
Keep private behind a TLS reverse proxy for a public deployment |
| Agent to GoCD server | TCP 8153, or the proxy’s alternative HTTPS port | Allow only from agent addresses or a private network |
Port 8153 is the backend default, not a requirement that the Internet must reach it. A safer public layout terminates TLS at a reverse proxy, forwards requests to the GoCD server, and blocks direct external access to 8153. The proxy must preserve the connection-upgrade behavior GoCD uses for its web and agent communication; follow the proxy’s WebSocket or upgrade configuration for your chosen implementation.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Tell GoCD its public URL
In GoCD configuration, set both <siteUrl> and <secureSiteUrl> to the externally visible proxy base URL, including the correct hostname and scheme. The configured value should describe the proxy address users and agents see, not the internal address or localhost. A mismatch causes redirects to the wrong host, incorrect links in notifications, and agent connection failures when HTTPS is introduced.
Use a certificate whose name matches the public DNS name, redirect plain HTTP at the proxy to HTTPS, and limit administrative access with your firewall or private network. Keep the backend listener reachable only from the proxy and authorized agent nodes.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Secure authentication and authorization
If the <security> element is absent, GoCD allows anyone who can reach the server to use it without logging in. That is unsuitable for an Internet-facing VPS. Enable an authorization plugin and configure an authentication method appropriate to your organization, such as LDAP or a password file through the bundled plugins.
The configuration reference marks the older in-configuration LDAP and password-file tags as deprecated. Prefer the supported plugin-based configuration, create named administrator accounts, and grant pipeline permissions deliberately. Test an ordinary user account before closing the administrative session so that you know both login and authorization rules work.
Agents can access source code, credentials, and build outputs. Approve only machines you control, remove retired agents, and avoid placing untrusted workloads on an agent that can reach production credentials.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Know the important Linux paths
Knowing where GoCD stores state makes upgrades, backups, and diagnosis much faster.
| Path | Purpose |
|---|---|
/etc/go |
GoCD server configuration |
/var/lib/go-server/db |
Server database |
/var/lib/go-server/artifacts |
Published pipeline artifacts |
/var/lib/go-server/plugins |
Server plugins |
/var/log/go-server |
Server logs |
/usr/share/go-server/wrapper-config/wrapper-properties.conf |
Server startup and runtime overrides |
/var/lib/go-agent |
Agent state and working data |
/var/log/go-agent |
Agent logs |
Mount the artifact directory on storage sized for retention and build output, monitor its free space, and keep database and configuration backups separate from the machine being protected. A full artifact filesystem can stop otherwise healthy pipelines.
Back up safely and upgrade without surprises
Before an upgrade
- Open Admin > Server Maintenance Mode and enable maintenance mode so new work is controlled while the server is changed.
- Use Admin > Backups to take a GoCD backup.
- Verify that your independent backup or snapshot includes the artifact volume. GoCD considers artifact backup good practice even though restoring artifacts is not essential to the package upgrade itself.
- Record custom plugins, reverse-proxy configuration, DNS, firewall rules, and any Java override in your change notes.
Upgrade package-managed installations
On Debian or Ubuntu, refresh metadata and install the newer server package:
sudo apt-get update && sudo apt-get install --install-recommends go-serverOn RPM systems, use:
sudo dnf upgrade go-serverIf you downloaded an RPM manually, upgrade it with rpm -Uvh and then check the service status. GoCD states that agents do not need a manual upgrade in the normal case: they usually reconnect automatically, and builds already in progress are completed or rescheduled according to GoCD’s upgrade behavior. Still verify every agent after the server returns and exit maintenance mode only after a small pipeline succeeds.
Scale the VPS when workload demands it
For a small team, placing one agent on the server VPS minimizes cost and setup. A separate agent node costs more and adds network configuration, but isolates build CPU, memory, temporary files, and credentials from the coordination service. It also lets you add capacity or specialized operating systems without resizing the server.
Free tools Windows power users keep installed
One-click scans. No signup required.
| Layout | Strengths | Risks and trade-offs |
|---|---|---|
| Server and agent on one VPS | Lowest complexity, one firewall boundary, inexpensive for light pipelines | Builds compete with the dashboard and database for CPU, RAM, disk I/O, and space |
| Server and agents on separate nodes | Better build isolation, independent scaling, smaller blast radius when a job misbehaves | Additional VPS cost, agent-to-server networking, and more hosts to patch and monitor |
GoCD’s performance guidance lists default server JVM heap settings of -Xms512m and -Xmx1024m. Increase heap, CPU, memory, or file-descriptor limits only after observing pipeline concurrency, queue time, garbage collection, disk latency, and open-file usage. A larger heap cannot compensate for an artifact volume that is full or a build workload that belongs on separate agents.
Troubleshoot the common failure points
The dashboard will not load
- Confirm the process is running with
sudo service go-server consoleor the service status command provided by your distribution. - Read the newest files in
/var/log/go-serverfor Java errors, configuration syntax failures, or a port already in use. - Test locally at
http://localhost:8153/go. If local access works, investigate the firewall, DNS, or reverse proxy rather than GoCD startup. - Check free space on the root and artifact filesystems; a full disk can prevent startup and database writes.
The agent is connected but cannot run jobs
- Enable the agent in the GoCD administration view; installation alone never grants work.
- Confirm the server hostname, scheme, and port in
/usr/share/go-agent/wrapper-config/wrapper-properties.conf. - Check TCP access from the agent to port 8153 or to the proxy’s HTTPS port and inspect
/var/log/go-agent. - Verify that the agent has the source-control clients and build tools required by the pipeline.
HTTPS redirects or agent connections fail
- Ensure the certificate matches the public DNS name and that the agent trusts its issuing certificate.
- Set
<siteUrl>and<secureSiteUrl>to the proxy’s public base URL, not the internal GoCD address. - Check that the reverse proxy forwards the required upgrade/WebSocket behavior and does not rewrite the
/gopath unexpectedly. - Close direct Internet access to backend port 8153 after proxy access is confirmed.
Upgrades leave the service unhealthy
- Review the package manager output and GoCD logs for an unsupported Java runtime or failed plugin load.
- Confirm custom startup overrides still point to valid paths in
wrapper-properties.conf. - Check that the database and artifact mounts are present before starting the service.
- Use the GoCD backup and your VPS snapshot according to your recovery plan rather than deleting state directories.
Production readiness checklist
- Supported Linux release with current security updates.
- At least 2 GB RAM planned for the server, with additional capacity sized to build concurrency.
- Persistent artifact storage on a separate partition or volume and free-space monitoring.
- Signed APT or RPM repository configured and package signature verification functioning.
- Java 21 or newer installed when supplying a JRE yourself.
- Server started and reachable locally on port 8153.
- At least one agent installed, pointed at the correct endpoint, and explicitly enabled.
- Source-control clients and build dependencies installed on the agents that need them.
- Public DNS, TLS reverse proxy, correct
siteUrl/secureSiteUrl, and restricted backend access. - Authentication and authorization enabled before exposing the dashboard.
- GoCD backup, artifact backup, VPS snapshots, and an upgrade recovery procedure tested.
When a single VPS is enough
A single VPS is a reasonable starting point for a personal project or a small team with short, low-concurrency pipelines: run the server and one agent, keep 8153 private, and use a reverse proxy for HTTPS. Move agents to separate nodes when builds contend with the dashboard, when jobs require incompatible toolchains, when untrusted code needs isolation, or when a failed build must not consume the coordination service’s resources. In both layouts, the essentials remain the same: signed packages, an approved agent, reachable networking, protected authentication, dedicated artifact capacity, and recoverable backups.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
