Cannot install fail2ban in centos 8

[moluzhui]

I installed the fail2ban service according to the linked tutorial, but the following error occurred.

# yum install fail2ban -y
Last metadata expiration check: 0:00:21 ago on Sun 24 Mar 2024 07:32:52 PM IST.
Error:
 Problem: problem with installed package selinux-policy-targeted-3.14.3-41.el8_2.4.noarch
  - package fail2ban-server-1.0.2-3.el8.noarch requires (fail2ban-selinux if selinux-policy-targeted), but none of the providers can be installed
  - package fail2ban-1.0.2-3.el8.noarch requires fail2ban-server = 1.0.2-3.el8, but none of the providers can be installed
  - conflicting requests
  - nothing provides selinux-policy >= 3.14.3-108.el8_7.1 needed by fail2ban-selinux-1.0.2-3.el8.noarch
  - nothing provides selinux-policy-base >= 3.14.3-108.el8_7.1 needed by fail2ban-selinux-1.0.2-3.el8.noarch
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

Please how can I fix the problem to install it to handle server ssh access restrictions and thus improve server security

PS:
server version

CentOS Linux release 8.2.2004 (Core)

[sebres]

If it is EPEL-repo? Then see #2858 (comment)
@fail2ban/maintainers any idea?

Alternatively, you can surely try to install it from source. But since I see selinux, it'd probably expect to set all SELinux policies expected for fail2ban manually (stock fail2ban version doesn't have something for selinux-policy).

[moluzhui]

I use EPEL-repo. I looked for the following software packages about fail2ban:

# yum repository-packages epel list | grep -i fail2ban
fail2ban.noarch                                                   1.0.2-3.el8                                                       epel
fail2ban-all.noarch                                               1.0.2-3.el8                                                       epel
fail2ban-firewalld.noarch                                         1.0.2-3.el8                                                       epel
fail2ban-hostsdeny.noarch                                         1.0.2-3.el8                                                       epel
fail2ban-mail.noarch                                              1.0.2-3.el8                                                       epel
fail2ban-selinux.noarch                                           1.0.2-3.el8                                                       epel
fail2ban-sendmail.noarch                                          1.0.2-3.el8                                                       epel
fail2ban-server.noarch                                            1.0.2-3.el8                                                       epel
fail2ban-shorewall.noarch                                         1.0.2-3.el8                                                       epel
fail2ban-shorewall-lite.noarch                                    1.0.2-3.el8                                                       epel
fail2ban-systemd.noarch                                           1.0.2-3.el8                                                       epel
fail2ban-tests.noarch                                             1.0.2-3.el8                                                       epel

Whether the software package does not meet the machine conditions?

[sebres]

No idea, neither I'm maintainer (especially for EPEL), nor I have CentOS or some distro using EPEL to test or check it...
This is git-repository with stock developer version and it knows nothing about packages. You may need to seek help by your maintainers.

[hobbes1069]

@opoplawski supports the EPEL packages IIRC.

[opoplawski]

@moluzhui You are running an old version of EL8 (8.2 - current is 8.9). EPEL only supports the current release of EL. You need to update your machine. Also, CentOS 8 has been discontinued.

[moluzhui]

Excuse me, I upgrade the system to the following version through the yum update

# cat /etc/redhat-release
CentOS Linux release 8.5.2111

Then the error when installing fail2ban changed. I cannot update the system. Can I successfully install the current version? Looking forward to your reply

# yum install fail2ban
Last metadata expiration check: 0:00:26 ago on Mon 25 Mar 2024 10:15:16 PM IST.
Error:
 Problem: package fail2ban-1.0.2-3.el8.noarch requires fail2ban-server = 1.0.2-3.el8, but none of the providers can be installed
  - conflicting requests
  - nothing provides /usr/bin/python3.6 needed by fail2ban-server-1.0.2-3.el8.noarch
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

[opoplawski]

As I stated, CentOS 8 has been discontinued. You will need to switch to one of the other active EL8 rebuilds (e.g. AlmaLinux or Rocky Linux) or to CentOS Stream 8 (bleeding edge EL8).