Cortex Linux Agent Debian Package messed up

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Cortex Linux Agent Debian Package messed up

L2 Linker

Hi,

Starting with Version 7.7 the downloadable Package is still named *.deb, in fact it is a tar.gz containing the following:

-config file

-readme

-deb-file

Which means, you cannot just install the so-called "deb package", but you have to create a directory, copy a file and then you are able to install the deb file...

Was working properly before.

PLEASE FIX THIS!

7 REPLIES 7

L5 Sessionator

Hi @RonaldWeiss This seems to be an issue with the backend. Please create a support ticket for this to be addressed.

Hi,

I already createt a ticket for this to our MSSP. Nevertheless hoped to speed up, or get Information, here...

i also assume it's backend issue during creation of the installer package.

Hi @RonaldWeiss I checked internally - please note that this is a desired behavior.
"""
To better secure your Cortex XDR agent installations on Linux machines, installation packages are now signed by Palo Alto Networks. The installation package contains a new configuration file which includes the tenant ID and registration key. When installing the agent installation package, if signature-checking is configured, you will need to install a Cortex XDR public key.

"""

Ref: https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-7/cortex-xdr-agent-release-notes/cortex-xdr-ag...

https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-7/cortex-xdr-agent-admin/cortex-xdr-agent-for-...

L2 Linker

Hi,

Yeah, i have read that, too. BUT:

In that guide it says:
Ubuntu or Debian apt-get install ./filename.deb or dpkg -i ./filename.deb
But that doesn't work because the package provided is NOT a deb package, but a tar.gz with the wrong file extension!

 

#file 2022_05_30_Cortex_XDR_Linux_7_7_1_62043.deb

2022_05_30_Cortex_XDR_Linux_7_7_1_62043.deb: gzip compressed data, was "traps_linux-7.7.1.61152_deb.tar", last modified: Mon May 30 08:29:27 2022, max compression, original size 55715840

 

Why not just include the tennant ID and reg-key into the deb package?
btw: i could do that myself, but thats not my job...

Hi @RonaldWeiss I went through the whole process as specified here and was successfully able to setup XDR agent on an endpoint.

Can you clarify if you were able to successfully execute this step of extracting the contents of the tarball before initiating the installation:

bbarmanroy_0-1654134370527.png

 

Hi,

this might work. But if there is a deb package provided, it should work as expected, and not unveil as a renamed tar.gz.

When you follow the part "To deploy using package manager" on your screenshot, this simply doesnt work.

AND: the deb was working since 7.6!

 

To clarify:

i AM able to install a tar.gz, but there is the fact that the deb installer is not working as expected.
So i think someone messed something up. The Intention of the post is to inform about the failing installer.

 

PA should either change the manual below "To deploy using package manager" (add "unpack the *.deb using tar -xfz, and copy the config file"), and get the laughts of every linux-admin,

or just fix the creation of the deb file.

Hi @RonaldWeiss I was able to follow the steps in sequence to extract the contents of the tarball. The tarball contained a .deb file, which I installed with dpkg -i ./cortex-7.7.1.61152.deb. 

 

bbarmanroy_0-1654218057789.png

What you're referring to in your last post is a recommendation, and not a break-fix. I will let the documentation team know about your recommendation. 

 

Have a good day ahead!

  • 3915 Views
  • 7 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!