Configuring the User-Custom Packages repository

Advanced Users of Suricata sometime need to use their own custom built Suricata Package that has certain features enabled or bugfix that is not available yet in the OISF or OS repositories.

IDSTower makes installing those packages easy by providing a way to the user to use his own custom built packages, the below steps explain how to do that:-

  1. Prepare & compile your Suricata package in “.rpm” or “.dep” format.

  2. Create the directory structure of the Custom repository in the IDSTower directory

$ cd /opt/idstower/
$ sudo mkdir custom
$ sudo mkdir custom/Suricata
$ sudo mkdir custom/Suricata/packages
$ sudo mkdir custom/Suricata/packages/6.0.1
$ sudo mkdir custom/Suricata/packages/6.0.1/el8
$ sudo mkdir custom/Suricata/packages/6.0.1/el8/x86_64
$ sudo cp /root/suricata-6.0.1-1.el8.x86_64.rpm /opt/idstower/custom/Suricata/packages/6.0.1/el8/x86_64/

Note

IDSTower will pick the appropriate package to install for the target host depending on target host Operating System, because of that you will need to create a directory for each OS flavor you will deploy this package in, in the above example we will be installing on Centos8.

Please user the following OS Codes instead of el8 in the example above - Redhat7/CentOS7: el7 - Redhat8/CentOS8: el8 - Ubuntu18 (Bionic): Ubuntu18 - Ubuntu20 (Focal): Ubuntu20

  1. Make sure to place any Suricata Package dependencies in the same directory so they will be installed along with the Suricata package.

  2. Now you will find your custom built versions available in the cluster installation wizard when you select the User Custom Packages Repository as shown below.

../_images/user-custom-repo.png