mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
79 lines
2.0 KiB
ReStructuredText
79 lines
2.0 KiB
ReStructuredText
.. _install-binary-rpm:
|
|
|
|
RPM Installation
|
|
################
|
|
|
|
Using the Fedora COPR system, the OISF provides Suricata packages for
|
|
Fedora, Red Hat Enterprise Linux, and Enterprise Linux rebuilds.
|
|
|
|
The benefit of using the OISF maintained COPR package repositories is
|
|
that the OISF maintains packages for all non-EOL Suricata versions for
|
|
each distribution version. For example, the OISF maintains Suricata 7
|
|
and Suricata 8 packages for RHEL 9 and 10.
|
|
|
|
Installing From Package Repositories
|
|
************************************
|
|
|
|
.. note:: Instructions in the following sections require ``sudo`` to
|
|
be installed.
|
|
|
|
Enterprise Linux and Rebuilds
|
|
=============================
|
|
|
|
.. code-block:: none
|
|
|
|
sudo dnf install epel-release dnf-plugins-core
|
|
sudo dnf copr enable @oisf/suricata-8.0
|
|
sudo dnf install suricata
|
|
|
|
Fedora
|
|
======
|
|
|
|
.. code-block:: none
|
|
|
|
sudo dnf install dnf-plugins-core
|
|
sudo dnf copr enable @oisf/suricata-8.0
|
|
sudo dnf install suricata
|
|
|
|
Additional Notes for RPM Installations
|
|
**************************************
|
|
|
|
- Suricata is pre-configured to run as the ``suricata`` user.
|
|
- Command line parameters such as providing the interface names can be
|
|
configured in ``/etc/sysconfig/suricata``.
|
|
- Users can run ``suricata-update`` without being root provided they
|
|
are added to the ``suricata`` group.
|
|
- Directories:
|
|
|
|
- ``/etc/suricata``: Configuration directory
|
|
- ``/var/log/suricata``: Log directory
|
|
- ``/var/lib/suricata``: State directory rules, datasets.
|
|
|
|
Starting Suricata On-Boot
|
|
=========================
|
|
|
|
The Suricata RPMs are configured to run from Systemd.
|
|
|
|
.. note:: The following instructions require ``sudo`` to be installed.
|
|
|
|
To start Suricata::
|
|
|
|
sudo systemctl start suricata
|
|
|
|
To stop Suricata::
|
|
|
|
sudo systemctl stop suricata
|
|
|
|
To have Suricata start on-boot::
|
|
|
|
sudo systemctl enable suricata
|
|
|
|
To reload rules::
|
|
|
|
sudo systemctl reload suricata
|
|
|
|
After Installation
|
|
******************
|
|
|
|
After installing you can proceed to the :ref:`Basic setup`.
|