Fixing the “broken packages” issue can be a tad difficult because it can be cause by several reasons, personal recommendation if you are doing it through APT is to run apt install -f and see if this installs any missing dependencies, if that’s not the case you may need to do apt-get clean, apt-get update and apt-get upgrade to see if it fixes it or not.
VR,
Vicente Muñoz
From: ossec-list@googlegroups.com <ossec-list@googlegroups.com> On Behalf Of
Jeff Dyke
Sent: Thursday, August 23, 2018 3:19 PM
To: ossec-list@googlegroups.com
Subject: [EXTERNAL] Re: [ossec-list] Install OSSEC in Ubuntu via APT
Unless you can say what the broken packages are I'm not sure how much i can
help, i use salt to install OSSEC and my main state is simply:
pkg.installed is just the equivalent of apt install ossec-hids-server
ossec-hids-server:
pkg.installed:
- require:
- /root/ossec-debconf-answers.sh
- require_in:
- /root/ossec-generate-cert.sh
where deb-conf-answers.sh contains
#!/usr/bin/env bash
HOST=$(hostname)
debconf-set-selections <<< ossec-hids-server ossec-hids/email_to string
root@${HOST}
debconf-set-selections <<< ossec-hids-server ossec-hids/email_from string
ossecm@${HOST}
debconf-set-selections <<< ossec-hids-server ossec-hids/email_notification
select yes
debconf-set-selections <<< ossec-hids-server ossec-hids/smtp_server string
${HOST}
and ossec-generate-certs.sh is
DIR=/var/ossec/etc
openssl genrsa -out ${DIR}/sslmanager.key 4096 >/dev/null 2>&1
openssl req -new -x509 -key ${DIR}/sslmanager.key -out ${DIR}/sslmanager.cert
-days 3650 -subj
/C=US/ST=MA/L=Boston/O=Engineering/OU=Security/CN=ossec.{{pillar['network-configuration'][grains['environment']]['ossec-server-name']}}.{{
domain }}
Obviously there is some salt stuff in there, but ultimately they just return
strings.
Everyones evironments are different, but do you know the broken packages are,
which version of ubuntu are you on? The above is used for a manager on 16.04.
I use the repo: deb https://updates.atomicorp.com/channels/atomic/ubuntu
xenial main
On Wed, Aug 22, 2018 at 6:36 AM Dzenis Aslani <dzenis.asl...@gmail.com
<mailto:dzenis.asl...@gmail.com> > wrote:
Hello everyone i got problem when i try to install OSSEC from
https://www.ossec.net/downloads.html through APT. I tried both manually and
automatically,and none of them works, when i tried i got this message "unable
to correct problems you have held broken packages "
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ossec-list+unsubscr...@googlegroups.com
<mailto:ossec-list+unsubscr...@googlegroups.com> .
For more options, visit https://groups.google.com/d/optout.
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ossec-list+unsubscr...@googlegroups.com
<mailto:ossec-list+unsubscr...@googlegroups.com> .
For more options, visit https://groups.google.com/d/optout.
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
smime.p7s
Description: S/MIME cryptographic signature
