Project

General

Profile

Actions

Bug #5362

open

Suricata version is 6.0.4 on Ubuntu 22.04 "Jammy"

Added by Samiux A 5 months ago. Updated about 1 month ago.

Status:
Assigned
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

The version of Suricata for Ubuntu 22.04 "Jammy" PPA is 6.0.4 instead of 6.0.5.

Actions #1

Updated by Victor Julien 5 months ago

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Peter Manev
Actions #2

Updated by Peter Manev 5 months ago

I am not sure how this can happen.
The only way would be with the wrong tar.

I have uploaded anew build in our Suricata-6.0-test repo here
https://launchpad.net/~oisf/+archive/ubuntu/suricata-6.0-test/+packages
It will probably build and be ready in about 1hr for testing.

Actions #3

Updated by Peter Manev 4 months ago

It seems in Jammy the pkg name is updated to have "1:" prepended.(which is different then the other pkg namings in Bionic/Focal for example)
https://launchpad.net/ubuntu/+source/suricata/1:6.0.4-3
Hence that package will always be considered newest.
I have adjusted our Jammy pkg name accordingly - new pkg available here, will be published shortly (about 1hr or so) in our testing repo.
https://launchpad.net/~oisf/+archive/ubuntu/suricata-6.0-test/+packages

Actions #4

Updated by Samiux A 4 months ago

The new package in suricata-test repos does not install properly. May be the dependencies problem.

Actions #5

Updated by Peter Manev 4 months ago

What err do you get ?

Actions #6

Updated by Samiux A 4 months ago

When updating, it will delete the old version and the new version cannot be installed. Since it is my production device, I will not reproduce the error.

Actions #7

Updated by Peter Manev 4 months ago

Thank you for the update.
I will try to dig in a bit more.
Alternatively if needed you can remove the existing version and explicitly install just the one from the repo. I tested this locally and it worked in the test setup.

Actions #8

Updated by Peter Manev 4 months ago

It also seems suricata-update is a separate package in the Jammy imported deb pkg builds.

Fetched 2336 kB in 4s (528 kB/s)    
debconf: delaying package configuration, since apt-utils is not installed
(Reading database ... 13004 files and directories currently installed.)
Preparing to unpack .../libhtp2_1%3a0.5.40-0ubuntu7_amd64.deb ...
Unpacking libhtp2 (1:0.5.40-0ubuntu7) over (1:0.5.39-1) ...
Preparing to unpack .../suricata_1%3a6.0.5-0ubuntu11_amd64.deb ...
Unpacking suricata (1:6.0.5-0ubuntu11) over (1:6.0.4-3) ...
dpkg: error processing archive /var/cache/apt/archives/suricata_1%3a6.0.5-0ubuntu11_amd64.deb (--unpack):
 trying to overwrite '/usr/bin/suricata-update', which is also in package suricata-update 1.2.3-1
dpkg-deb: error: paste subprocess was killed by signal (Broken pipe)
invoke-rc.d: could not determine current runlevel
invoke-rc.d: policy-rc.d denied execution of restart.
Errors were encountered while processing:
 /var/cache/apt/archives/suricata_1%3a6.0.5-0ubuntu11_amd64.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)

Actions #9

Updated by Samiux A 3 months ago

May be it is caused by the new implemented "Linux Kernel Runtime Guard".

Actions #10

Updated by Samiux A 2 months ago

  • Affected Versions 6.0.6 added
  • Affected Versions deleted (6.0.5)

Preparing to unpack .../suricata_1%3a6.0.6-0ubuntu8_amd64.deb ...
Unpacking suricata (1:6.0.6-0ubuntu8) over (1:6.0.4-3) ...
dpkg: error processing archive /var/cache/apt/archives/suricata_1%3a6.0.6-0ubuntu8_amd64.deb (--unpack):
trying to overwrite '/usr/bin/suricata-update', which is also in package suricata-update 1.2.3-1
dpkg-deb: error: paste subprocess was killed by signal (Broken pipe)
Errors were encountered while processing:
/var/cache/apt/archives/suricata_1%3a6.0.6-0ubuntu8_amd64.deb
needrestart is being skipped since dpkg has failed
E: Sub-process /usr/bin/dpkg returned an error code (1)

Actions #11

Updated by Peter Manev 2 months ago

That is still unfixed form before - i will push a patch this week.

Actions #12

Updated by Samiux A about 1 month ago

The old version of suricata-update (1.2.2) is situated at /usr/local/bin/ while the new version of suricata-update (1.2.4?) is installed at /usr/bin/. When suricata-update is being updated, the old suricata-update cannot be overwritten correctly and it caused the installation program to quit.

I uninstall (remove) the old version of suricata-update at /usr/local/bin/ and the suricata can be installed (updated) correctly.

For your information.

Actions #13

Updated by Samiux A about 1 month ago

When I try to reinstall suricata, it produces the same error.

sudo apt reinstall suricata
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following package was automatically installed and is no longer required:
suricata-update
Use 'sudo apt autoremove' to remove it.
0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 5 not upgraded.
Need to get 0 B/2,280 kB of archives.
After this operation, 0 B of additional disk space will be used.
(Reading database ... 144363 files and directories currently installed.)
Preparing to unpack .../suricata_1%3a6.0.6-0ubuntu8_amd64.deb ...
Unpacking suricata (1:6.0.6-0ubuntu8) over (1:6.0.6-0ubuntu8) ...
dpkg: error processing archive /var/cache/apt/archives/suricata_1%3a6.0.6-0ubunt
u8_amd64.deb (--unpack):
trying to overwrite '/usr/bin/suricata-update', which is also in package surica
ta-update 1.2.3-1
dpkg-deb: error: paste subprocess was killed by signal (Broken pipe)
Errors were encountered while processing:
/var/cache/apt/archives/suricata_1%3a6.0.6-0ubuntu8_amd64.deb
needrestart is being skipped since dpkg has failed
E: Sub-process /usr/bin/dpkg returned an error code (1)

Actions #14

Updated by Peter Manev about 1 month ago

You should first remove the previous 2 packages that make the conflict.

Actions #15

Updated by Samiux A about 1 month ago

Thanks for the information. The problem is fixed.

First download the suricata package and then uninstall suricata and suricata-update. After that, install suricata package only as suricata-update is already included in the suricata package.

Actions

Also available in: Atom PDF