Upgrade Wazuh Agent Installed from Sources?

[Aaron Laub]

Hi all,

I have several raspberry pi units with the 3.10.2 wazuh agent installed. I am working on upgrading them to 3.11.4.

I was only able to install the agent on raspbian buster with the debian install from sources guide:

https://documentation.wazuh.com/3.11/installation-guide/installing-wazuh-agent/linux/debian7-or-greater/wazuh_agent_sources_debian7_or_greater.html#wazuh-agent-sources-debian7-or-greater

I've been able to upgrade windows agents that have the agent installed from the package with the following command run from the manager that I found on slack:

/var/ossec/bin/agent_upgrade -l | awk '$1 ~ /^[0-9]+$/ {print "Starting upgrade on agent " $1; system("/var/ossec/bin/agent_upgrade -a " $1)}'

When this upgrade script gets to a raspberry pi unit i get the following error:

Error 1713: Error accessing repository: Can't access to the versions file in https://packages.wazuh.com/wpk/linux/armv7/versions

Does anyone know of a solution for this to upgrade these agents remotely? 

Or if there is an upgrade command that can be run locally on each pi?

I can always uninstall the old version and recompile the new version but am wondering if there is a simpler solution.

Any information is greatly appreciated!

Thanks,

Aaron

[Aaron Laub]

Error 1713: Error accessing repository: The WPK for this platform is not available.

[Miguel Casares]

Hello Aaron,

Wazuh can support many OS such as Raspberry, BSD based systems, etc and a wide variety of architectures but there is no official Raspberry package yet. However, it is in our roadmap to provide packages for more OS. Since there is no official package for Raspberry the WPK is not available.

Regarding your question, there is a possibility described here by a colleague: https://github.com/wazuh/wazuh-packages/issues/365. You can build the Agent in one computer, compress the sources repository, distribute it to other computers and install the agent using the install.sh script.

I hope it helps.

Let me know if you need anything else.

Regards,

Miguel Casares

[Aaron Laub]

Miguel,

Thanks for the tip!