Skip to content

amuehlem/MISP-RPM

master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
October 16, 2023 09:38
November 2, 2022 13:45
April 15, 2022 11:11
May 5, 2023 13:51
March 25, 2022 18:21
September 21, 2023 14:25
May 5, 2023 14:03

MISP RPM

Installing MISP on Red Hat / CentOS base systems is a bit difficult, as they provide either older versions like PHP (e.g. 5.6), or the newer versions are installed into different paths on the systems.

We know, with our RPMs we break a number of rules for Red Hat based systems, but on the same time they simplify the process of getting MISP running on RHEL systems. From our tests we got very good results to operate MISP on RHEL servers without any big issues. So if you can profit from our work, please feel free to do so!

Architecture

The idea is to install minimal CentOS or Red Hat system and enable the provided repository on it. Combining MISP with other PHP applications might work, but was not the intention for this project. The intended setup is to just use MISP on this server.

Summary

We provide the following components as RPMs

  • misp
  • pymisp
  • misp-modules
  • all needed sub-modules
  • php 7.4.x (will be installed from external remi repository)
  • mariadb 10.3.x (will be installed from external mariadb repository)

With our RPMs there's no need to use git to install MISP and you don't need a to install from github.com. All you is to be able to include our repository on your systems. MariaDB will be installed from the official mariadb repository.

Installing MISP

Use the installation instructions to install MISP from our repository on RHEL7 / CentOS7 Systems

Use the installation instructions for RHEL8 to install MISP from our repository on RHEL8 Systems (not checked on CentOS8!)

Configuring your system for MISP

Use the configuration recommendations to configure your system for MISP. This settings are not provided by the RPMS but will help to improve operating your MISP installation.

Upgrading MISP

See the upgrading instructions to upgrade MISP from our repository

Simple Background jobs

See the official documentation how to activate the SimpleBackgroundJobs. Most important settings are

  • /etc/supervisord.conf
[inet_http_server]
port=127.0.0.1:9001
username=supervisor
password=securePasswordHere
  • /etc/supervisord.d/misp-workers.ini see the official documentation for this file

  • start and enable supervisord

systemctl enable supervisord
systemctl start supervisord
  • enable SimpleBackgroundJobs in MISP
'SimpleBackgroundJobs' => array(
  'enabled' => true,
  'redis_host' => 'localhost',
  'redis_port' => 6379,
  'redis_password' => '',
  'redis_database' => 13,
  'redis_namespace' => 'background_jobs',
  'max_job_history_ttl' => 86400,
  'supervisor_host' => 'localhost',
  'supervisor_port' => 9001,
  'supervisor_user' => 'supervisor',
  'supervisor_password' => 'securePasswordHere',
),
  • check the workers are started, status should be 'RUNNING' for all workers
supervisorctl -s http://localhost:9001 -u supervisor -p securePasswordHere status

About

RPM packages for MISP

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Contributors 4

  •  
  •  
  •  
  •