Project

General

Profile

Actions
Copy link

Feature #1216

open
GL CT

Debian repository

Feature #1216: Debian repository

Added by god lol about 12 years ago. Updated 14 days ago.

Status:
Feedback
Priority:
Low
Assignee:
Community Ticket
Target version:
Packaging/PPA
Effort:
high
Difficulty:
low
Label:

Description

The official wiki recommends installing Suricata via "sudo make install" which is maintenance hell: https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Debian_Installation
According to bug https://redmine.openinfosecfoundation.org/issues/378 there is Debian build server might be available.
It would be great if installation through debian repository is recommended as a proper official way to do things - if such repository does not exist it would be great to have it in addition to ubuntu ppa.

VJ Updated by Victor Julien about 12 years ago Actions
Copy link
 #1

  • Subject changed from Debian install outdated - no repo to Debian repository
  • Assignee set to Anonymous
  • Target version set to TBD

Not sure what the 'outdated' referred to.

VJ Updated by Victor Julien over 11 years ago Actions
Copy link
 #2

  • Target version changed from TBD to Packaging/PPA

AH Updated by Andreas Herz over 10 years ago Actions
Copy link
 #3

I guess he means the outdated suricata version included in debian itself.

PM Updated by Peter Manev over 10 years ago Actions
Copy link
 #4

There is packaging available for both Debian and Ubuntu. The difference is that for Ubuntu we support our own Ubuntu PPA packaging where we make the latest Suricata versions a available right after every release. The Debian repository (for Jessie for example) currently has Suricata 2.0.7 - which is lagging behind.

We can consider adding Debian packaging to provide the latest versions.

PM Updated by Peter Manev over 10 years ago Actions
Copy link
 #5

Peter Manev wrote:

There is packaging available for both Debian and Ubuntu. The difference is that for Ubuntu we support our own Ubuntu PPA packaging where we make the latest Suricata versions available right after every release. The Debian repository (for Jessie for example) currently has Suricata 2.0.7 - which is lagging behind.

We can consider adding Debian packaging to provide the latest versions.

VJ Updated by Victor Julien about 10 years ago Actions
Copy link
 #6

  • Priority changed from Normal to Low

Suricata is kept up to date in Debian Backports as well now.

VJ Updated by Victor Julien about 10 years ago Actions
Copy link
 #7

  • Tracker changed from Support to Feature

VJ Updated by Victor Julien about 8 years ago Actions
Copy link
 #8

  • Effort set to high
  • Difficulty set to low

AH Updated by Andreas Herz over 7 years ago Actions
Copy link
 #9

  • Assignee set to Community Ticket

TS Updated by Timo Sigurdsson over 6 years ago Actions
Copy link
 #10

I would like to second this feature request of a Debian repository.

1) At the moment, there are no backports for the current stable release (Buster). And for oldstable (Stretch), the backports are stuck at 4.1.2 as well.

2) Even if the backporting activity would resume, it's only a matter of time until a gap between the maintenance releases and backports arises again. That is, when the freeze period for the next release begins, backports to stable will also be stuck at whatever version was "frozen" for the next Debian release. So. I don't think the backports repository is the best place for a stable and maintained package archive.

PA Updated by Philippe Antoine 18 days ago Actions
Copy link
 #11

  • Status changed from New to Feedback

Is this still needed ?

AD Updated by Andreas Dolp 14 days ago Actions
Copy link
 #12

Philippe Antoine wrote in #note-11:

Is this still needed ?

Regarding a dedicated Suricata Debian repository I think yes, it is.

We (Sascha and me as the Debian package maintainers) are trying to keep the native Debian packages up to date as good as possible.
But there are Debian specific restrictions, which prevent packages in backports to be newer than in the next Debian stable/testing release. So the version in oldstable-backports can't be newer than the one in stable. See [1] for an overview.

As a consequence it's not possible to have every supported Suricata major version to be available for every supported Debian release.

I would also second a dedicated OISF Suricata DEB repository, which can provide every supported Suricata major version for every supported Debian release. This could probably support users to install a more current Suricata version, because they do not depend on Debian releases or Debian restrictions any more.

If there is some interest in building such a dedicated DEB repo, I can offer help for that.

[1] https://tracker.debian.org/pkg/suricata

Actions
Copy link

Also available in: PDF Atom