lchico
commented
1 month ago Update
I've begun researching this issue and have started working on a solution.
2024-09-13
I encountered some issues when generating packages using the SPECS files from the repository. After some investigation, I discovered the cause: the files were uploaded with Windows-style line endings (CRLF) instead of Unix-style (LF). This caused the following error during the build process:
dpkg-buildpackage -rsudo -D -us -uc -b -nc
dpkg-buildpackage: warning: using a gain-root-command while being root
dpkg-buildpackage: source package wazuh-agent
dpkg-buildpackage: source version 4.9.0-0
dpkg-buildpackage: source changed by Wazuh, Inc <info@wazuh.com>
dpkg-source --before-build wazuh-agent-5.0.0
dpkg-buildpackage: host architecture amd64
'pkg-source: error: invalid Format field `3.0 (quilt)
dpkg-buildpackage: error: dpkg-source --before-build wazuh-agent-5.0.0 gave error exit status 25
debuild: fatal error at line 1357:
dpkg-buildpackage -rsudo -D -us -uc -b -nc failed
root@4be8bb734266:/# 2024-09-16
To avoid potential issues with older OS versions (meaning that when we generate Debian packages using a newer version of Debian, the packages might not work on older Debian versions), I am trying to use the same OS we currently use for generating Debian packages:
lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 7.11 (wheezy)
Release: 7.11
Codename: wheezy- During the build process, I had to update:
- CMake to version 3.30.3, as it's required by the code (the code requires 3.22, but I’m trying with this version). I downloaded and installed it locally as a test, but we need to push it to packages.wazuh.com, just like the previous version, 3.18.3.
- While building the package, I encountered an issue with vcpkg and its dependencies:
- The curl version in the current image is curl 7.26.0, and with this version, I encountered the following error:
/bootstrap-vcpkg.sh
Downloading vcpkg-glibc...
curl: option --tlsv1.2: is unknown
curl: try 'curl --help' or 'curl --manual' for more information- I attempted to update curl using the apt-get package manager, but since this OS version is no longer supported, it wasn’t possible. So, I installed curl from source with at least the required version 7.35, which supports --tlsv1.2. However, I ran into the following error:
./bootstrap-vcpkg.sh
Downloading vcpkg-glibc...
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: http://curl.haxx.se/docs/sslcerts.html
curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
- I tried using --insecure, but it didn’t resolve the issue.
- Then, I attempted to use a newer version of curl (4.8.10), but I couldn’t build it from the source due to unresolved dependencies:
Build curl 8-10.0
```bash curl-8.10.0# ./configure --with-gnutls --with-secure-transport --with-openssl checking whether to enable maintainer-specific portions of Makefiles... no checking whether make supports nested variables... yes checking whether to enable debug build options... no checking whether to enable compiler optimizer... (assumed) yes checking whether to enable strict compiler warnings... no checking whether to enable compiler warnings as errors... no checking whether to enable curl debug memory tracking... no checking whether to enable hiding of library internal symbols... yes checking whether to enable c-ares for DNS lookups... no checking whether to disable dependency on -lrt... (assumed no) checking whether to enable HTTPSRR support... no checking whether to enable ECH support... no checking for path separator... : ... checking default CA cert bundle/path... configure: want unset ca /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs (capath) checking whether to use built-in CA store of SSL library... no checking CA cert bundle path to embed... no checking for pkg-config... (cached) /usr/bin/pkg-config checking for libpsl options with pkg-config... no checking for psl_builtin in -lpsl... no configure: error: libpsl libs and/or directories were not found where specified! ```2024-09-17
Based on tier-1, I am trying to generate Debian packages using Debian 10. With this change, I got vcpkg to download the dependencies. However, when the build process started, I encountered problems with certain dependencies and g++ versions. After trying g++-10, it didn't work, so I had to build g++-14 from the source. It looks like I am close to completing the build process. I just have this pending issue to fix:
[ 96%] Building CXX object agent/command_store/CMakeFiles/CommandStore.dir/src/command_store.cpp.o
In file included from /build_wazuh/agent/wazuh-agent-5.0.0/src/agent/command_store/include/command_store.hpp:4,
from /build_wazuh/agent/wazuh-agent-5.0.0/src/agent/command_store/src/command_store.cpp:1:
In copy constructor 'constexpr sqlite_manager::Column::Column(const sqlite_manager::Column&)',
inlined from 'bool command_store::CommandStore::UpdateCommand(const command_store::Command&)' at /build_wazuh/agent/wazuh-agent-5.0.0/src/agent/command_store/src/command_store.cpp:203:5:
/build_wazuh/agent/wazuh-agent-5.0.0/src/agent/sqlite_manager/include/sqlite_manager.hpp:25:11: error: '*(__vector(2) unsigned char*)(&condition + offsetof(sqlite_manager::Column, sqlite_manager::Column::m_notNull))' may be used uninitialized [-Werror=maybe-uninitialized]
25 | class Column
| ^~~~~~
/build_wazuh/agent/wazuh-agent-5.0.0/src/agent/command_store/src/command_store.cpp: In member function 'bool command_store::CommandStore::UpdateCommand(const command_store::Command&)':
/build_wazuh/agent/wazuh-agent-5.0.0/src/agent/command_store/src/command_store.cpp:192:32: note: 'condition' declared here
192 | sqlite_manager::Column condition("id", sqlite_manager::ColumnType::INTEGER, std::to_string(cmd.m_id));
| ^~~~~~~~~
In copy constructor 'constexpr sqlite_manager::Column::Column(const sqlite_manager::Column&)',
inlined from 'bool command_store::CommandStore::UpdateCommand(const command_store::Command&)' at /build_wazuh/agent/wazuh-agent-5.0.0/src/agent/command_store/src/command_store.cpp:203:5:
/build_wazuh/agent/wazuh-agent-5.0.0/src/agent/sqlite_manager/include/sqlite_manager.hpp:25:11: error: 'condition.sqlite_manager::Column::m_primaryKey' may be used uninitialized [-Werror=maybe-uninitialized]
25 | class Column
| ^~~~~~
/build_wazuh/agent/wazuh-agent-5.0.0/src/agent/command_store/src/command_store.cpp: In member function 'bool command_store::CommandStore::UpdateCommand(const command_store::Command&)':
/build_wazuh/agent/wazuh-agent-5.0.0/src/agent/command_store/src/command_store.cpp:192:32: note: 'condition' declared here
192 | sqlite_manager::Column condition("id", sqlite_manager::ColumnType::INTEGER, std::to_string(cmd.m_id));
| ^~~~~~~~~
cc1plus: all warnings being treated as errors
make[2]: *** [agent/command_store/CMakeFiles/CommandStore.dir/build.make:76: agent/command_store/CMakeFiles/CommandStore.dir/src/command_store.cpp.o] Error 1
make[1]: *** [CMakeFiles/Makefile2:396: agent/command_store/CMakeFiles/CommandStore.dir/all] Error 2
make: *** [Makefile:91: all] Error 2I haven't had time to investigate this further.
2024-09-18
- Finally, I created a Docker image with all the dependencies required for generating the deb packages.
- I managed to generate the first deb package, but there’s still a lot of work to be done in defining the new structure.
- Installation path: /opt/wazuh-agent — based on this documentation and considering that Google also installs their packages there, I believe this is the best option.
- Configuration files, like wazuh.conf, should be placed in /etc/opt/wazuh-agent/, according to this document (page 15, chapter 3.7.4).
- I have started working on the rules and Debian scripts.
vikman90
mjcr99
jotacarma90
MarcelKemp
Parent Issue:
Description
This issue focuses on creating a DEB package for Debian-based distributions such as Debian and Ubuntu. The package should manage all necessary dependencies and include pre/post-installation scripts to ensure that the Wazuh agent service is automatically enabled and running after installation.
Functional Requirements
Acceptance Criteria