EDR: Cannot Upgrade Server nor Install the Sensor Installer Package on CentOS 6.x

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Using the commands "yum upgrade cb-enterprise" and "yum install cb-linux-sensor-installer" on CentOS 6 from the EDR Application Server gives the error:

  YumRepo Error: All mirror URLs are not using ftp, http[s] or file.
   Eg. Invalid release/repo/arch combination/
  removing mirrorlist with no valid mirrors: /var/cache/yum/x86_64/6/base/mirrorlist.txt
  Error: Cannot find a valid baseurl for repo: base

Environment

• EDR Server: All Versions (previously CB Response Server)
• CentOS: 6.x

Cause

• CentOS 6 has reached End of Life for all Maintenance updates.
• Need to temporarily disable all repos for upgrades and installs and just use the Carbon Black repo.

Resolution

1. Open Terminal.
2. Switch to root user

   #: su root

3. Run: 

   # yum clean all

4. Run the Server Upgrade or Sensor Installer Package Setup on the EDR Application Server:
   1. EDR Server Upgrade:

      #: yum update cb-enterprise --disablerepo=* --enablerepo=CarbonBlack

   2. Sensor Installer Package Setup:

      #: yum install cb-linux-sensor-installer --disablerepo=* --enablerepo=CarbonBlack

5. If the above does not work try to swap vaults by running the command below and attempt upgrade again: 

   sed -i.old -e 's/^mirrorlist/#mirrorlist/g' -e 's/^#baseurl=http:\/\/mirror.centos.org\/centos\/$releasever\//baseurl=http:\/\/vault.centos.org\/centos\/6\//g' /etc/yum.repos.d/CentOS-Base.repo

Additional Information

• The parameter, "--disablerepo=*", temporarily disables all repos while the command is run so that the CarbonBlack repo can be used.
  • This does not permanently disable all repos; it is simply a bypass command.
• If the temporary command is not wanted, but a more permanent command is required then use a different command.
  • This will apply to everything on the Application Server as opposed to simply an individual command.
  • If installing the Linux sensor on the endpoint throws the same YumRepo error then disable the repos permanently.