Unless you can say what the broken packages are I'm not sure how much i
can help, i use salt to install OSSEC and my main state is simply:
pkg.installed is just the equivalent of apt install ossec-hids-server
ossec-hids-server:
pkg.installed:
- require:
- /root/ossec-debconf-answers.sh
- require_in:
- /root/ossec-generate-cert.sh
where deb-conf-answers.sh contains
#!/usr/bin/env bash
HOST=$(hostname)
debconf-set-selections <<< ossec-hids-server ossec-hids/email_to
string root@${HOST}
debconf-set-selections <<< ossec-hids-server ossec-hids/email_from
string ossecm@${HOST}
debconf-set-selections <<< ossec-hids-server
ossec-hids/email_notification select yes
debconf-set-selections <<< ossec-hids-server ossec-hids/smtp_server
string ${HOST}
and ossec-generate-certs.sh is
DIR=/var/ossec/etc
openssl genrsa -out ${DIR}/sslmanager.key 4096 >/dev/null 2>&1
openssl req -new -x509 -key ${DIR}/sslmanager.key -out
${DIR}/sslmanager.cert -days 3650 -subj
/C=US/ST=MA/L=Boston/O=Engineering/OU=Security/CN=ossec.{{pillar['network-configuration'][grains['environment']]['ossec-server-name']}}.{{
domain }}
Obviously there is some salt stuff in there, but ultimately they just
return strings.
Everyones evironments are different, but do you know the broken packages
are, which version of ubuntu are you on? The above is used for a manager
on 16.04. I use the repo: deb
https://updates.atomicorp.com/channels/atomic/ubuntu xenial main
On Wed, Aug 22, 2018 at 6:36 AM Dzenis Aslani <[email protected]>
wrote:
> Hello everyone i got problem when i try to install OSSEC from
> https://www.ossec.net/downloads.html through APT. I tried both manually
> and automatically,and none of them works, when i tried i got this message
> "unable to correct problems you have held broken packages "
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.
>
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
