CISOfy Packages Repository

https://packages.cisofy.com
Admin
Documentation for CISOfy's software package repositories, including Lynis security scanner and...
Tokens:5,933
Snippets:111
Trust Score:10
Update:4 months ago
Show doc for...
Tokens:
Raw
### Start using Lynis (CentOS, RHEL, Rocky, and similar)

Source: https://packages.cisofy.com/community

After installation, you can start using Lynis. First-time users are advised to use the Get Started guide.

```bash
lynis audit system
```

--------------------------------

### openSUSE, SUSE - Install Lynis

Source: https://packages.cisofy.com/customers

Refresh the zypper repositories and install Lynis and Lynis plugins.

```bash
zypper refresh
zypper install lynis lynis-plugins
```

--------------------------------

### Debian and Ubuntu - Install Lynis and Lynis Plugins

Source: https://packages.cisofy.com/customers

Update the APT package list and install Lynis and its plugins.

```bash
sudo apt update
sudo apt install lynis lynis-plugins
```

--------------------------------

### Refresh repositories and Install Lynis (openSUSE, SUSE)

Source: https://packages.cisofy.com/community

Refresh the repositories and then install Lynis. Due to the high priority, Lynis will be installed from the new repository.

```bash
sudo zypper refresh
```

```bash
sudo zypper install lynis
```

--------------------------------

### Debian and Ubuntu - Install Lynis and Lynis Plugins (older systems method)

Source: https://packages.cisofy.com/customers

Download the GPG key using wget and add it to APT's trusted keys.

```bash
Option 2) sudo wget -O - https://packages.cisofy.com/keys/cisofy-software-public.key | sudo apt-key add -
```

--------------------------------

### Install Lynis

Source: https://packages.cisofy.com/community

Installs the Lynis package.

```bash
apt install lynis
```

--------------------------------

### Install or Update Lynis (Fedora)

Source: https://packages.cisofy.com/community

Install or update Lynis using dnf.

```bash
sudo dnf install lynis
```

```bash
sudo dnf update lynis
```

--------------------------------

### Debian 13 Key Error Example

Source: https://packages.cisofy.com/

An example of a warning that might appear on Debian 13 related to key signature validity.

```text
W: https://packages.cisofy.com/community/lynis/deb/dists/stable/InRelease: Policy will reject signature within a year, see --audit for details
```

--------------------------------

### CentOS, Fedora, and RHEL - Install Lynis and Lynis plugins

Source: https://packages.cisofy.com/customers

Update the yum cache and install Lynis and its plugins.

```bash
yum makecache fast
yum install lynis lynis-plugins
```

--------------------------------

### YUM Conflict Example

Source: https://packages.cisofy.com/troubleshooting.html

An example of a transaction check error in YUM due to conflicting package files.

```bash
lynis-2.5.1-1.el7.art.noarch.rpm                                                                                                                                                | 244 kB  00:00:00     
Running transaction check
Running transaction test


Transaction check error:
  file /usr/share/lynis/plugins/plugin_pam_phase1 from install of lynis-2.5.1-1.el7.art.noarch conflicts with file from package lynis-plugins-2.0.9-1.noarch
  file /usr/share/lynis/plugins/plugin_systemd_phase1 from install of lynis-2.5.1-1.el7.art.noarch conflicts with file from package lynis-plugins-2.0.9-1.noarch
```

--------------------------------

### Update certificates and install Lynis (CentOS, RHEL, Rocky, and similar)

Source: https://packages.cisofy.com/community

Ensure that cURL, NSS, openssl, and CA certificates are up-to-date. Then create the repository file and install Lynis.

```bash
yum update ca-certificates curl nss openssl
```

```bash
[lynis]
name=CISOfy Software - Lynis package
baseurl=https://packages.cisofy.com/community/lynis/rpm/
enabled=1
gpgkey=https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
gpgcheck=1
priority=2
```

```bash
sudo yum makecache fast
```

```bash
sudo yum install lynis
```

--------------------------------

### Rocky Linux 10/RHEL 10 Key Error Example

Source: https://packages.cisofy.com/

An example of an error that might appear on Rocky Linux 10 or RHEL 10 related to certificate policy and key import.

```text
error: Certificate 824612E20ACF951B:
  Policy rejects 824612E20ACF951B: No binding signature at time 2025‑06‑13T16:28:45Z
error: https://packages.cisofy.com/keys/cisofy-software-rpms-public.key: key 1 import failed.
```

--------------------------------

### Debian and Ubuntu - Update prerequisites

Source: https://packages.cisofy.com/customers

Install apt-transport-https to enable HTTPS transport for APT on Debian and Ubuntu systems.

```bash
sudo apt install apt-transport-https
```

--------------------------------

### Confirm Lynis Version

Source: https://packages.cisofy.com/community

Displays the installed Lynis version.

```bash
lynis show version
```

--------------------------------

### Download a package using apt

Source: https://packages.cisofy.com/mirror-or-sync-repositories.html

Command to download a package using apt-get.

```bash
apt-get download lynis
```

--------------------------------

### Debian and Ubuntu - Download GPG key and configure repository

Source: https://packages.cisofy.com/customers

Download the CISOfy GPG key and configure the APT repository for Lynis.

```bash
curl -fsSL https://packages.cisofy.com/keys/cisofy-software-public.key | sudo gpg --dearmor -o /etc/apt/trusted.gpg.d/cisofy-software-public.gpg
echo "deb [arch=amd64,arm64 signed-by=/etc/apt/trusted.gpg.d/cisofy-software-public.gpg] https://packages.cisofy.com/customers/LICENSE-KEY/lynis/deb/ stable main" | sudo tee /etc/apt/sources.list.d/cisofy-lynis.list
```

--------------------------------

### openSUSE, SUSE - Import GPG key and add repository

Source: https://packages.cisofy.com/customers

Import the CISOfy GPG key and add the Lynis repository using zypper.

```bash
rpm --import https://packages.cisofy.com/keys/cisofy-software-public.key
zypper addrepo --gpgcheck --name "CISOfy Lynis repository" --priority 1 --refresh --type rpm-md https://packages.cisofy.com/customers/LICENSE-KEY/lynis/rpm/ lynis
zypper repos
```

--------------------------------

### Configure Lynis client - Create custom preferences file

Source: https://packages.cisofy.com/customers

Create an empty custom preferences file for Lynis client configuration.

```bash
sudo touch /etc/lynis/custom.prf
```

--------------------------------

### Import GPG key and add repository (openSUSE, SUSE)

Source: https://packages.cisofy.com/community

First import the GPG key. This ensures the signed repository can be checked.

```bash
sudo rpm --import https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
```

--------------------------------

### Import GPG Key (Suggested Method)

Source: https://packages.cisofy.com/community

Downloads and imports the Cisofy GPG key for package verification.

```bash
curl -fsSL https://packages.cisofy.com/keys/cisofy-software-public.key | sudo gpg --dearmor -o /etc/apt/trusted.gpg.d/cisofy-software-public.gpg
```

--------------------------------

### Create repository file (Fedora)

Source: https://packages.cisofy.com/community

Create the repository configuration file for Fedora.

```bash
sudo vi /etc/yum.repos.d/cisofy-lynis.repo
```

--------------------------------

### Configure Lynis client - Set license key and upload server

Source: https://packages.cisofy.com/customers

Configure Lynis client settings, including license key and upload server.

```bash
sudo lynis configure settings license-key=LICENSE-KEY:upload-server=portal.cisofy.com
```

--------------------------------

### Add Cisofy Repository (Suggested Method)

Source: https://packages.cisofy.com/community

Creates the APT repository file for Cisofy packages.

```bash
echo "deb [arch=amd64,arm64 signed-by=/etc/apt/trusted.gpg.d/cisofy-software-public.gpg] https://packages.cisofy.com/community/lynis/deb/ stable main" | sudo tee /etc/apt/sources.list.d/cisofy-lynis.list
```

--------------------------------

### Configure Lynis client - Perform audit and upload

Source: https://packages.cisofy.com/customers

Perform a quick system audit with Lynis and upload the results.

```bash
sudo lynis audit system --quick --upload
```

--------------------------------

### Import GPG Key (Older Method)

Source: https://packages.cisofy.com/community

Imports the Cisofy GPG key using apt-key (older method).

```bash
sudo wget -O - https://packages.cisofy.com/keys/cisofy-software-public.key | sudo apt-key add -
```

--------------------------------

### CentOS, Fedora, and RHEL - Create repository

Source: https://packages.cisofy.com/customers

Create the CISOfy Lynis repository configuration file for yum.

```ini
[lynis]
name=CISOfy Software - Lynis package
baseurl=https://packages.cisofy.com/customers/LICENSE-KEY/lynis/rpm/
enabled=1
gpgkey=https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
gpgcheck=1
```

--------------------------------

### Run Nexus in a Docker container

Source: https://packages.cisofy.com/mirror-or-sync-repositories.html

Command to run Nexus Repository Manager in a Docker container.

```bash
/usr/bin/docker run --net bridge -m 0b -p 8081:8081 -v /persistance_data/nexus:/sonatype-work --name nexus sonatype/nexus
```

--------------------------------

### Download a package using yum

Source: https://packages.cisofy.com/mirror-or-sync-repositories.html

Command to download a package using yum with the downloadonly plugin.

```bash
yum install --downloadonly --downloaddir=/root/my-directory package-name
```

--------------------------------

### Synchronize a repository using reposync

Source: https://packages.cisofy.com/mirror-or-sync-repositories.html

Command to synchronize a repository using reposync.

```bash
reposync --repoid=cisofy-lynis --download_path=/root/my-directory
```

--------------------------------

### Check if the repository is added (openSUSE, SUSE)

Source: https://packages.cisofy.com/community

Verify that the repository has been added successfully.

```bash
sudo zypper repos
```

--------------------------------

### Add Cisofy Repository (Older Method)

Source: https://packages.cisofy.com/community

Adds the Cisofy software repository to APT sources.

```bash
echo "deb https://packages.cisofy.com/community/lynis/deb/ stable main" | sudo tee /etc/apt/sources.list.d/cisofy-lynis.list
```

--------------------------------

### Zypper Command

Source: https://packages.cisofy.com/troubleshooting.html

Command to retrieve information about Lynis packages using Zypper.

```bash
zypper info "lynis-*"
```

--------------------------------

### Advanced: Custom RPM creation

Source: https://packages.cisofy.com/community

Build your own RPM using the provided Lynis spec file.

```bash
git clone https://github.com/CISOfy/lynis-sdk
./lynis-devkit build rpm
```

--------------------------------

### Add repository (openSUSE, SUSE)

Source: https://packages.cisofy.com/community

Add the CISOfy Lynis repository.

```bash
sudo zypper addrepo --gpgcheck --name "CISOfy Lynis repository" --priority 1 --refresh --type rpm-md https://packages.cisofy.com/community/lynis/rpm/ lynis
```

--------------------------------

### YUM Exclusion Steps

Source: https://packages.cisofy.com/troubleshooting.html

Steps to resolve YUM conflicts by excluding Lynis from a conflicting repository.

```bash
  * yum remove lynis
  * Open /etc/yum.repos.d/xxxxxxxx.repo
  * Add **exclude=lynis*** to the end of [repository-name-here] block
  * yum makecache fast
  * yum install lynis lynis-plugins
```

--------------------------------

### Pin Lynis Package

Source: https://packages.cisofy.com/community

Configures APT to prioritize the Lynis package from the Cisofy repository.

```bash
Package: lynis
Pin: origin packages.cisofy.com
Pin-Priority: 600
```

--------------------------------

### Repository file content (Fedora)

Source: https://packages.cisofy.com/community

Add the following content to the repository file.

```ini
[lynis]
name=CISOfy Software - Lynis package
baseurl=https://packages.cisofy.com/community/lynis/rpm/
enabled=1
gpgkey=https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
gpgcheck=1
priority=2
```

--------------------------------

### YUM Commands

Source: https://packages.cisofy.com/troubleshooting.html

Commands to manage and inspect YUM repositories and packages, specifically for Lynis.

```bash
# Show the repo file
cat /etc/yum.repos.d/cisofy-lynis.repo

# Retrieve information on Lynis package
yum list lynis
yum info lynis

# See repo information
repoquery -i lynis
yumdb search from_repo lynis

# See if repo priorities are used
sed -n -e "/^[/]/h; /priority *=/{ G; s/\n/ /; s/ity=/ity = /; p }" /etc/yum.repos.d/*.repo | sort -k3n
```

--------------------------------

### CentOS, Fedora, and RHEL - Update prerequisites

Source: https://packages.cisofy.com/customers

Update essential packages like ca-certificates, curl, nss, and openssl on CentOS, Fedora, and RHEL systems.

```bash
yum update ca-certificates curl nss openssl
```

--------------------------------

### Public Key Missing or Incorrect Error (Debian/Ubuntu)

Source: https://packages.cisofy.com/

This error occurs when the repository's public key is not available or is incorrect, preventing signature verification for APT-based systems.

```bash
Err:2 https://packages.cisofy.com/customers/YOUR-LICENSE-KEY/lynis-enterprise/deb daily InRelease                 
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 9DE922F1C2FDE6C4

```

```bash
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used.
GPG error: https://packages.cisofy.com/community/lynis/deb stable InRelease: The following signatures were invalid:
EXPKEYSIG 3F873450D48C4F9C CISOfy Software (signed software packages) <software@cisofy.com>


```

```bash
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://packages.cisofy.com/customers/YOUR-LICENSE-KEY/lynis-enterprise/deb daily InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 9DE922F1C2FDE6C4
W: Failed to fetch https://packages.cisofy.com/customers/YOUR-LICENSE-KEY/lynis-enterprise/deb/dists/daily/InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 9DE922F1C2FDE6C4
W: Some index files failed to download. They have been ignored, or old ones used instead.


```

--------------------------------

### Update Package Database

Source: https://packages.cisofy.com/community

Refreshes the local package database to include the new repository.

```bash
apt update
```

--------------------------------

### Disable APT Translations

Source: https://packages.cisofy.com/community

Configures APT to skip downloading translations to save bandwidth.

```bash
echo 'Acquire::Languages "none";' | sudo tee /etc/apt/apt.conf.d/99disable-translations
```

--------------------------------

### SHA1 Algorithm Not Supported Error

Source: https://packages.cisofy.com/

This error message indicates that the SHA1 algorithm is no longer supported for package verification, often seen with DNF package manager.

```bash
Error: Execution of '/bin/dnf -d 0 -e 1 -y install lynis' returned 1: warning: Signature not supported. Hash algorithm SHA1 not available.
warning: Signature not supported. Hash algorithm SHA1 not available.
Problem opening package lynis-3.0.8-100.noarch.rpm
Error: GPG check FAILED

```

--------------------------------

### Cisofy Software RPMS Public PGP Key

Source: https://packages.cisofy.com/keys/cisofy-software-rpms-public.key

The public PGP key used to verify signatures of Cisofy Software RPM packages.

```text
-----BEGIN PGP PUBLIC KEY BLOCK-----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=+jbq
-----END PGP PUBLIC KEY BLOCK-----
```
Tokens:
Raw