Support for Ubuntu 16.04 (Xenial)?

523 views
Skip to first unread message

beeg98

unread,
Jun 3, 2016, 2:16:20 PM6/3/16
to Wazuh mailing list
Do we have a timeline on when support for 16.04 will be supported? I keep watching http://ossec.wazuh.com/repos/apt/ubuntu/dists/ in hopes of seeing a link for Xenial, but it hasn't shown up yet. 

Should I try installing the packages meant for wily instead?

Thanks.

Santiago Bassett

unread,
Jun 9, 2016, 9:53:50 AM6/9/16
to beeg98, Wazuh mailing list
Hi,

just FYI, Xenial packages are now available. You can install those following our documentation:


Please let us know if you find any issue.

Thank you

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/544455fc-3c2f-4e9e-a953-5d7e78b63dfc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

beeg98

unread,
Jun 9, 2016, 11:00:07 AM6/9/16
to Wazuh mailing list, b...@somedayhappened.net
Awesome! Thanks!


On Thursday, June 9, 2016 at 7:53:50 AM UTC-6, Santiago Bassett wrote:
Hi,

just FYI, Xenial packages are now available. You can install those following our documentation:


Please let us know if you find any issue.

Thank you
On Fri, Jun 3, 2016 at 8:16 PM, beeg98 <b...@somedayhappened.net> wrote:
Do we have a timeline on when support for 16.04 will be supported? I keep watching http://ossec.wazuh.com/repos/apt/ubuntu/dists/ in hopes of seeing a link for Xenial, but it hasn't shown up yet. 

Should I try installing the packages meant for wily instead?

Thanks.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

beeg98

unread,
Jun 9, 2016, 12:49:40 PM6/9/16
to Wazuh mailing list, b...@somedayhappened.net
I just now noticed that this is only for ossec-hids, and not for ossec-wazuh. I'm surprised you guys maintain a repo for ossec-hids and expect people to compile code for ossec-wazuh. That's unfortunate. I believe in using repos wherever possible so that my servers can receive patches when they are released (hence why I was anxiously waiting for xenial to be supported). Otherwise, I may not know when a patch is released, and if I do know, I have to do a manual reinstall of that package separate from my other server maintenance updates. For security, this is not the ideal setup.

Anyways, I do appreciate that you got ossec-hids out for xenial. I will let you know if I run into any issues installing it or using it. Thanks!

Santiago Bassett

unread,
Jun 9, 2016, 2:12:29 PM6/9/16
to beeg98, Wazuh mailing list
Hi, 

you are totally right in regards to Wazuh packages and we are working on that. In the meanwhile my advice is to compile OSSEC Wazuh manager and use existing OSSEC installers for the agents.

In the next few months we plan to release a new version that will include significant changes both in OSSEC manager and agents capabilities. Our goal is to provide good documentation and installers at the same time.

Thank you for the feedback.

Santiago.

On Thu, Jun 9, 2016 at 6:49 PM, beeg98 <b...@somedayhappened.net> wrote:
I just now noticed that this is only for ossec-hids, and not for ossec-wazuh. I'm surprised you guys maintain a repo for ossec-hids and expect people to compile code for ossec-wazuh. That's unfortunate. I believe in using repos wherever possible so that my servers can receive patches when they are released (hence why I was anxiously waiting for xenial to be supported). Otherwise, I may not know when a patch is released, and if I do know, I have to do a manual reinstall of that package separate from my other server maintenance updates. For security, this is not the ideal setup.

Anyways, I do appreciate that you got ossec-hids out for xenial. I will let you know if I run into any issues installing it or using it. Thanks!


On Thursday, June 9, 2016 at 9:00:07 AM UTC-6, beeg98 wrote:
Awesome! Thanks!


On Thursday, June 9, 2016 at 7:53:50 AM UTC-6, Santiago Bassett wrote:
Hi,

just FYI, Xenial packages are now available. You can install those following our documentation:


Please let us know if you find any issue.

Thank you
On Fri, Jun 3, 2016 at 8:16 PM, beeg98 <b...@somedayhappened.net> wrote:
Do we have a timeline on when support for 16.04 will be supported? I keep watching http://ossec.wazuh.com/repos/apt/ubuntu/dists/ in hopes of seeing a link for Xenial, but it hasn't shown up yet. 

Should I try installing the packages meant for wily instead?

Thanks.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/544455fc-3c2f-4e9e-a953-5d7e78b63dfc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.

beeg98

unread,
Jun 9, 2016, 3:12:25 PM6/9/16
to Wazuh mailing list, b...@somedayhappened.net
Ok, I'll look forward to that release.  Thanks!


On Thursday, June 9, 2016 at 12:12:29 PM UTC-6, Santiago Bassett wrote:
Hi, 

you are totally right in regards to Wazuh packages and we are working on that. In the meanwhile my advice is to compile OSSEC Wazuh manager and use existing OSSEC installers for the agents.

In the next few months we plan to release a new version that will include significant changes both in OSSEC manager and agents capabilities. Our goal is to provide good documentation and installers at the same time.

Thank you for the feedback.

Santiago.
On Thu, Jun 9, 2016 at 6:49 PM, beeg98 <b...@somedayhappened.net> wrote:
I just now noticed that this is only for ossec-hids, and not for ossec-wazuh. I'm surprised you guys maintain a repo for ossec-hids and expect people to compile code for ossec-wazuh. That's unfortunate. I believe in using repos wherever possible so that my servers can receive patches when they are released (hence why I was anxiously waiting for xenial to be supported). Otherwise, I may not know when a patch is released, and if I do know, I have to do a manual reinstall of that package separate from my other server maintenance updates. For security, this is not the ideal setup.

Anyways, I do appreciate that you got ossec-hids out for xenial. I will let you know if I run into any issues installing it or using it. Thanks!


On Thursday, June 9, 2016 at 9:00:07 AM UTC-6, beeg98 wrote:
Awesome! Thanks!


On Thursday, June 9, 2016 at 7:53:50 AM UTC-6, Santiago Bassett wrote:
Hi,

just FYI, Xenial packages are now available. You can install those following our documentation:


Please let us know if you find any issue.

Thank you
On Fri, Jun 3, 2016 at 8:16 PM, beeg98 <b...@somedayhappened.net> wrote:
Do we have a timeline on when support for 16.04 will be supported? I keep watching http://ossec.wazuh.com/repos/apt/ubuntu/dists/ in hopes of seeing a link for Xenial, but it hasn't shown up yet. 

Should I try installing the packages meant for wily instead?

Thanks.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/544455fc-3c2f-4e9e-a953-5d7e78b63dfc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.

Conor Scully

unread,
Jun 10, 2016, 4:31:12 AM6/10/16
to Santiago Bassett, beeg98, Wazuh mailing list
Hi Santiago,

Great to hear you will be release a more feature rich version soon.

Will you be providing SALT or Ansible deployment script as well?
I know you have Puppet scripts but I would like to use something that
is agentless.

Regards,

Conor Scully
IT Infrastructure - Security


Aeria Games GmbH
Berlin | Seoul | San Francisco

Conor....@aeriagames.com
http://www.aeriagames.com

GPG PublicKey: 9F4D ACEF 345E 4518 772D A99B 4C95 857E 8D14 9387

___________________________________________________

Berlin: Schlesische Str. 27, Aufgang C, 10997 Berlin
Seoul: 141-31 Samseongdong, EK Tower 4th Floor, Gangnam-gu, Seoul 135-876
San Francisco: 143 2nd Street, Suite #400, San Francisco, CA 94105

___________________________________________________

Sitz Berlin | Amtsgericht Berlin-Charlottenburg | HRB 114841 B |
Steueridentifikationsnr.: DE260816529
Geschäftsführer: Oliver Strutynski, Thomas Nichols

Santiago Bassett

unread,
Jun 10, 2016, 4:58:48 AM6/10/16
to Conor Scully, beeg98, Wazuh mailing list
Hi Conor,

right now we are preparing documentation for Chef (in addition to the one we have for Puppet). In the past we have also deployed OSSEC with other automation tools (CFEngine and Ansible) but it was not in our roadmap to publish scripts/playbooks soon.

In any case I believe there is a Github repository with them: https://github.com/dj-wasabi/ansible-ossec-agent

On the other hand, one important change in terms of deployment is that users should be able to use the API to register agents (instead of the traditional ossec-authd service). This should help with automation. A good example of how to do this is in our blog:


I hope it helps,

Santiago.



Reply all
Reply to author
Forward
0 new messages