search

chocolatey-community / chocolatey-package-requests

Please submit your package requests as issues here
Apache License 2.0
95 stars 18 forks source link

RFP - net-snmp #1393

Open bish0polis opened 1 year ago

bish0polis commented 1 year ago

Checklist

Package Details

Software project URL : https://github.com/net-snmp/net-snmp Direct download URL for the software / installer : https://sourceforge.net/projects/net-snmp/files/net-snmp/5.9.3/net-snmp-5.9.3.zip/download Software summary / short description: SNMP Agent

Package Expectations

The main goal is an agent we can use on windows to monitor the usual suspects - disk, CPU, RAM, etc. SNMP is massively rich here, so that's not a direct issue. The agent will need services config and potential firewall exemption.

This is now important because Microsoft has removed the options to configure the agent if one expends the added effort to install it, including setting manager IPs and community strings, and in doing so has introduced a security risk and constructed motivation to ultimately remove it completely in favour of a different tool that arguably solves a different set of requirements. Soon the only source for an SNMP agent on windows will be from a third-party supplier.

Optionally - and preferably as an optional second package - Net-SNMP includes tools for interacting with a running SNMP agent/service. These definitely aren't required, and should arguably be left out of the base package, but do have value for some. (I use the same tools on Unix, but it's wordy).

pauby commented 1 year ago

I changed the title to be net-snmp. When raising an issue, we're expecting specific software to be packages. Just searching for snmp in the Community Repository gives many packages (they may not be suitable for your use case).

github-actions[bot] commented 1 year ago

Package Request Validation

We have finished some basic validation of this request. The result of this validation can be found below:

Everything looks good to our automated checks, it is now up to a human to validate the remaining steps. No action is required yet

New Maintainer Notices

This section details some parts of the request that any upcoming maintainer may need to take into consideration.


TrID/32 - File Identifier v2.24 - (C) 2003-16 By M.Pontello
Definitions found:  15396
Analyzing...

Collecting data from file: C:\Users\RUNNER~1\AppData\Local\Temp/software.tmp
 40.0% (.XPI) Mozilla Firefox browser extension (8000/1/1)
 35.0% (.MAFF) Mozilla Archive Format (gen) (7000/1/1)
 20.0% (.ZIP) ZIP compressed archive (4000/1)
  5.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)

Please note that this check is currently in alpha, and may not be able to detect everything correctly. Humans may also be able to detect other issues with this request.

teknowledgist commented 1 year ago

Just a heads up to anyone thinking about picking up this package... It appears to me that the linked, .zip download is source code only. There are no compiled win32 binaries included. Unless I missed something, the last win32 binaries available for download are from 2011.

bish0polis commented 1 year ago

Just searching for snmp in the Community Repository gives many packages (they may not be suitable for your use case).

I found absolutely no SNMP daemons/agents in the results of that search, and nothing suitable for any use as

an SNMP agent on windows

pauby commented 1 year ago

@bish0polis My previous comment still applies. You need to request a specific software to be packaged rather than something generic like 'snmp agent for windows'.

What @teknowledgist said is correct, the linked download is not a binary file but a dump of the repository with source files. It would need to be compiled and then how to we verify that the compiled only contain what the source repository contains (ie. have not been modified, potentially maliciously)?

teknowledgist commented 1 year ago

I figured it can't hurt to ask for them.

bish0polis commented 1 year ago

You need to request a specific software to be packaged

I'll change the subject of this ticket to reflect the specific package I'm requesting, so it's specific, and I'll leave some context in the original description to allow for some leeway in case there's options available. Ok?