Cortex Linux Agent Debian Package messed up

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Cortex Linux Agent Debian Package messed up

L2 Linker


Starting with Version 7.7 the downloadable Package is still named *.deb, in fact it is a tar.gz containing the following:

-config file



Which means, you cannot just install the so-called "deb package", but you have to create a directory, copy a file and then you are able to install the deb file...

Was working properly before.



L5 Sessionator

Hi @RonaldWeiss This seems to be an issue with the backend. Please create a support ticket for this to be addressed.


I already createt a ticket for this to our MSSP. Nevertheless hoped to speed up, or get Information, here...

i also assume it's backend issue during creation of the installer package.

Hi @RonaldWeiss I checked internally - please note that this is a desired behavior.
To better secure your Cortex XDR agent installations on Linux machines, installation packages are now signed by Palo Alto Networks. The installation package contains a new configuration file which includes the tenant ID and registration key. When installing the agent installation package, if signature-checking is configured, you will need to install a Cortex XDR public key.



L2 Linker


Yeah, i have read that, too. BUT:

In that guide it says:
Ubuntu or Debian apt-get install ./filename.deb or dpkg -i ./filename.deb
But that doesn't work because the package provided is NOT a deb package, but a tar.gz with the wrong file extension!


#file 2022_05_30_Cortex_XDR_Linux_7_7_1_62043.deb

2022_05_30_Cortex_XDR_Linux_7_7_1_62043.deb: gzip compressed data, was "traps_linux-", last modified: Mon May 30 08:29:27 2022, max compression, original size 55715840


Why not just include the tennant ID and reg-key into the deb package?
btw: i could do that myself, but thats not my job...

Hi @RonaldWeiss I went through the whole process as specified here and was successfully able to setup XDR agent on an endpoint.

Can you clarify if you were able to successfully execute this step of extracting the contents of the tarball before initiating the installation:




this might work. But if there is a deb package provided, it should work as expected, and not unveil as a renamed tar.gz.

When you follow the part "To deploy using package manager" on your screenshot, this simply doesnt work.

AND: the deb was working since 7.6!


To clarify:

i AM able to install a tar.gz, but there is the fact that the deb installer is not working as expected.
So i think someone messed something up. The Intention of the post is to inform about the failing installer.


PA should either change the manual below "To deploy using package manager" (add "unpack the *.deb using tar -xfz, and copy the config file"), and get the laughts of every linux-admin,

or just fix the creation of the deb file.

Hi @RonaldWeiss I was able to follow the steps in sequence to extract the contents of the tarball. The tarball contained a .deb file, which I installed with dpkg -i ./cortex- 



What you're referring to in your last post is a recommendation, and not a break-fix. I will let the documentation team know about your recommendation. 


Have a good day ahead!

  • 7 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!