ossec / ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
http://www.ossec.net
Other
4.33k stars 1.02k forks source link

[Request] Provide binaries for arm64 Debian Bookworm/Trixie/Sid #2119

Closed FPVogel closed 1 month ago

FPVogel commented 2 months ago

Hello everyone,

I've seen that there have been a few issues/ PRs in the past about providing arm support. (aarch64/armv7) Some of those have also been merged. Most notably #1809.

Are there any plans to provide binaries at https://updates.atomicorp.com/channels/atomic/debian bookworm/arm64/ ?

Debian would be optimal to support as they have among the best compatibility for arm64, as well as the biggest arm repos, and are upstream for Ubuntu.

With more and more infrastructure moving over to arm CPUs like Ampere and the support from a technical perspective being there this ~should~(sigh) not be too much of a hassle.

As it stands there are no warnings in the install script telling me arm is not supported neither is there any mention of it in the docs.

Any help (other than compiling myself) would be greatly appreciated. (or at least a note in the docs saying compile arm yourself)

Merlin

atomicturtle commented 2 months ago

So definitely can do on Rocky and Amazon linux without a lot of setup work. Mock natively supports cross architecture building, which makes those builds pretty easy. Ive done .deb based builds before, they just take a lot longer and involve more steps.

So probably in order I'd expect to first see aarch64 on rocky 8/9 (and by proxy rhel 8/9), then amzn2, amzn2023, and then switching to the .deb builds with ubuntu 24/Debian 12 (or 13 if its out by then) for the ossec 3.8 release.

atomicturtle commented 1 month ago

ARM builds are done now for:

Pending:

atomicturtle commented 1 month ago

Debian 11 and 12 arm packages are out now. I think Ill wait for trixie to go prod though, we dont normally do them for the rawhide branches

FPVogel commented 1 month ago

Thanks very much, that's awesome!

On Wed, 5 Jun 2024, 23:03 Scott R. Shinn, @.***> wrote:

Debian 11 and 12 arm packages are out now. I think Ill wait for trixie to go prod though, we dont normally do them for the rawhide branches

— Reply to this email directly, view it on GitHub https://github.com/ossec/ossec-hids/issues/2119#issuecomment-2150958510, or unsubscribe https://github.com/notifications/unsubscribe-auth/AMN6PXNUHRVHJHYAPHQPWY3ZF54LNAVCNFSM6AAAAABGT7LZAKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCNJQHE2TQNJRGA . You are receiving this because you authored the thread.Message ID: @.***>