While reviewing the implementation of install.sh I discovered USER_CLEANINSTALL which does not appear to be documented at http://ossec-docs.readthedocs.org/en/latest/manual/installation/install-source-unattended.html. Adding USER_CLEANINSTALL="y" to etc/preloaded-vars. conf did the trick.
Thanks! On Jul 16, 2014, at 5:55 AM, dan (ddp) <ddp...@gmail.com> wrote: > On Tue, Jul 15, 2014 at 7:24 PM, Garett Shulman > <garett.shul...@gmail.com> wrote: >> Hello, >> >> I am trying to do an unattended install of a second instance of OSSEC on an >> Ubuntu system. >> >> I'm trying to modify etc/preloaded-vars.conf based on >> http://ossec-docs.readthedocs.org/en/latest/manual/installation/install-source-unattended.html >> to accomplish this. >> >> However, the fact that there is already an instance of ossec installed seems >> to cause USER_NO_STOP="y" to be ignored by install.sh which asks if it >> should update. >> >> >> And according to the unattended docs: If USER_UPDATE is set to anything, the >> update installation will be done. >> >> >> This would seem to imply that there is no way to force USER_UPDATE to 'n' as >> any value is interpreted as affirmative. >> >> >> I can install the second instance of OSSEC fine interactively. >> Disappointing that it doesn't seem possible to accomplish unattended. >> >> >> Am I interpreting this correctly? Anything I may be missing to accomplish >> this? >> >> >> Any assistance greatly appreciated. >> > > I don't think this is a situation that was thought of when the support > was originally developed. If you have any patches, please submit them > through a pull request on http://www.github.com/ossec/ossec-hids > >> -Garett >> >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to ossec-list+unsubscr...@googlegroups.com. >> For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
