Create a local repository for Symantec Linux Agent

book

Article ID: 223179

calendar_today

Updated On:

Products

Endpoint Protection Endpoint Security Endpoint Security Complete

Issue/Introduction

You want to install the Symantec Linux Agent on a client that is in an isolated network or does not have Internet access.

Environment

Release: 14.3 RU3 and later

Resolution

Below is an example of creating two local repos: for Red Hat Enterprise Linux 7 and for SUSE Linux Enterprise Server 11. The commands and file names might not match depending on the web server and the Linux system that you use.


Webserver requirements (this does not cover web site installation):
HTTPS listening on TCP 443 
path=/var/www/html
Example IP used: 192.168.2.50 (for local Agent .repo file example only)

Note: Run all commands under root account. If you use sudo, you need the right permissions. If you are not familiar with 'vi' command, check the man page on how to edit/save a file.

Install yum-utils and createrepo:
yum install yum-utils createrepo
 
Create the repo files:
touch /etc/yum.repos.d/sdcss.rhel7.67mp2.repo
touch /etc/yum.repos.d/sdcss.sles11.67mp2.repo
 
Edit the RHEL 7 repo file and add the sdcss.rhel7.repo information:
vi /etc/yum.repos.d/sdcss.rhel7.67mp2.repo

Enter the following in the repo file:
[SDCSS-Updates-67mp2-rhel7]
name=SDCSS repository for package updates
baseurl=https://linux-repo.us.securitycloud.symantec.com/DCS_6.7MP2/rhel7/$basearch
enabled=1
gpgcheck=0
 
Edit the SLES 11 repo file and add the sdcss.sles11.repo information:
vi /etc/yum.repos.d/sdcss.sles11.67mp2.repo

Enter the following in the repo file:
[SDCSS-Updates-67mp2-sles11]
name=SDCSS repository for package updates
baseurl=https://linux-repo.us.securitycloud.symantec.com/DCS_6.7MP2/sles11/$basearch
enabled=1
gpgcheck=0
 
Update Yum's cache:
yum makecache

Get the Repoid:
yum repolist

-- It's Currently SDCSS-Updates-67mp2-rhel7 and SDCSS-Updates-67mp2-sles11

Sync the repo:
reposync --gpgcheck -l --repoid=SDCSS-Updates-67mp2-rhel7 --download_path=/var/www/html
reposync --gpgcheck -l --repoid=SDCSS-Updates-67mp2-sles11 --download_path=/var/www/html
cd /var/www/html/SDCSS-Updates-rhel7
createrepo -v /var/www/html/SDCSS-Updates-67mp2-rhel7
cd /var/www/html/SDCSS-Updates-sles11
createrepo -v /var/www/html/SDCSS-Updates-67mp2-sles11
 
Change the repo on the Linux Agent device:
You can now change the repo (located at: /etc/sdcss.repo) on your Linux Agent device to point to the specific repoid (either SDCSS-Updates-67mp2-rhel7 or
SDCSS-Updates67mp2--sles11) with the baseurl changed to your local server.

Example  for RHEL 7
vi /etc/yum.repos.d/sdcss.repo

[SDCSS-Updates]
name=SDCSS repository for package updates
baseurl=https://linux-repo.us.securitycloud.symantec.com/DCS_6.7MP2/rhel7/$basearch
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-SDCSS

Change the line in yellow to:
baseurl=https://192.168.2.50/SDCSS-Updates-67mp2-rhel7/$basearch

For RHEL 7, type:
yum check-update

For SLES  11, type:
zypper list-updates

For RHEL 7, type:
yum upgrade sdcss-kmod

For SLES 11, type:
zypper update sdcss-kmod

 

Note: After updating the package, you get the following message.

"Symantec Data Center Security Server kmod package installed successfully.
A reboot is required. Please reboot your machine at the earliest convenience."

 

To view the package that you installed, run:
rpm -qa |grep sdcs*

Example of an output:
sdcss-kmod-6.7.3-287.el7.x86_64
sdcss-6.7.3-1473.el7.x86_64

Additional Information

KB 206671