Configuring the Built-In Packages repository

Note

This is an Optional step, you only need to do this step if you want to deploy Suricata to offline Hosts with no internet connectivity, skip this step if you have internet connectivity on the Suricata Hosts and use the packages from the official repository (available in IDSTower Cluster Setup Wizard).

IDSTower offers a built-in packages repository that can be used to deploy Suricata & a Logshipper to Suricata Hosts with no internet connectivity (offline).

By default the IDSTower installation package dose not include this repository files and they have to be downloaded separately, This is both to reduce the standard installation package size and to let users be able to update the Built-In Packages repository (eg:to deploy a newer version of Suricata) without having to update IDSTower.

To Enable the Built-In Packages Repository, please follow the below steps:-

  1. Download the appropriate Built-In Packages Repository from https://download.idstower.com/packages/built-in-repos/ , in this example we will download Suricata 6.0.5 packages & Filebeat 7.9.0 packages.

$ sudo curl https://download.idstower.com/packages/built-in-repos/suricata/suricata-6.0.5-linux-x86_64.tar.gz --output suricata-6.0.5-linux-x86_64.tar.gz
$ sudo tar -xzf suricata-6.0.5-linux-x86_64.tar.gz --directory /opt/idstower/resources/playbooks/files/Suricata/packages/
$ sudo curl https://download.idstower.com/packages/built-in-repos/filebeat/filebeat-7.9.0-linux-x86_64.tar.gz --output filebeat-7.9.0-linux-x86_64.tar.gz
$ sudo tar -xzf filebeat-7.9.0-linux-x86_64.tar.gz --directory /opt/idstower/resources/playbooks/files/Filebeat/packages/

  1. Now you will find the downloaded versions available at the cluster installation wizard when you Built-in Packages Repository as shown below.

../_images/built-in-repo-options.png