CISOfy Software Repository (Community)

Usage of this repository

This service is provided for free to Lynis community on the basis of fair-use. If you have more than a few systems, then set up your internal software repository or proxy and let it sync with ours.

Note: If you get HTTP 429 errors, then adjust your package manager settings. Heavy usage of the repository will be blocked on our discretion.

Got blocked? Contact us by email at support@ and explain (and show!) what you have configured to get unblocked. This way you help the Lynis community.

Operating Systems

This list shows what operating systems were used to test these packages. We expect these packages to work for both older and newer versions, as no compilation was involved during packaging.

Your operating system not listed here? You can use Git or use a "Manual" deployment. This is documented in our Get Started document.

openSUSE, SUSE

Are you already customer of Lynis Enterprise? See packages for customers.

Import GPG key and add repository

First import the GPG key. This ensures the signed repository can be checked.
sudo rpm --import https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
sudo zypper addrepo --gpgcheck --name "CISOfy Lynis repository" --priority 1 --refresh --type rpm-md https://packages.cisofy.com/community/lynis/rpm/ lynis
Check if the repository is added:
sudo zypper repos

Install Lynis

If the repository is available, Lynis can be installed from it. As it is marked with a high priority, the Lynis package will be installed from the new repository.
sudo zypper refresh
sudo zypper install lynis

Fedora

Create repository file

sudo vi /etc/yum.repos.d/cisofy-lynis.repo

Add the following content:

[lynis]
name=CISOfy Software - Lynis package
baseurl=https://packages.cisofy.com/community/lynis/rpm/
enabled=1
gpgkey=https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
gpgcheck=1
priority=2

Install or Update

sudo dnf install lynis

sudo dnf update lynis

CentOS, RHEL, Rocky, and similar

Already a customer of Lynis Enterprise? See packages for customers.

Lynis Community

Ensure that cURL, NSS, openssl, and CA certificates are up-to-date.
yum update ca-certificates curl nss openssl
Create /etc/yum.repos.d/cisofy-lynis.repo
[lynis]
name=CISOfy Software - Lynis package
baseurl=https://packages.cisofy.com/community/lynis/rpm/
enabled=1
gpgkey=https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
gpgcheck=1
priority=2
Next step is installing Lynis with yum or dnf.
sudo yum makecache fast
sudo yum install lynis
First time it might ask to import the GPG key. This ensures you only updates are received from us.

Now you start using Lynis. First time users are advised to use the Get Started guide.
lynis audit system

Advanced: Custom RPM creation

Like to build your own RPM? We have a Lynis spec file.
git clone https://github.com/CISOfy/lynis-sdk
./lynis-devkit build rpm

Debian, Ubuntu

Are you are a customer with an active subscription to Lynis Enterprise? Have a look in the customers section.
Import key

For these commands root access may be needed. Use sudo or run as root user.

Suggested method to download key and use it
curl -fsSL https://packages.cisofy.com/keys/cisofy-software-public.key | sudo gpg --dearmor -o /etc/apt/trusted.gpg.d/cisofy-software-public.gpg
echo "deb [arch=amd64,arm64 signed-by=/etc/apt/trusted.gpg.d/cisofy-software-public.gpg] https://packages.cisofy.com/community/lynis/deb/ stable main" | sudo tee /etc/apt/sources.list.d/cisofy-lynis.list
Older method
Option 1) sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 013baa07180c50a7101097ef9de922f1c2fde6c4
Option 2) sudo wget -O - https://packages.cisofy.com/keys/cisofy-software-public.key | sudo apt-key add -
Add software repository

The software repository uses preferably HTTPS for secure transport. Install the 'https' method for APT, if it was not available yet.
sudo apt install apt-transport-https
Using your software in English? Then configure APT to skip downloading translations. This saves bandwidth and prevents additional load on the repository servers.
echo 'Acquire::Languages "none";' | sudo tee /etc/apt/apt.conf.d/99disable-translations
Next step is adding the repository:
echo "deb https://packages.cisofy.com/community/lynis/deb/ stable main" | sudo tee /etc/apt/sources.list.d/cisofy-lynis.list
Install Lynis

Refresh the local package database with the new repository data and install Lynis:
apt update
Got an error after running this command? Check if you filled in the 'codename' correctly and the line is correct. It are those small details that may prevent it from working.
apt install lynis
Note, older Ubuntu versions may need sudo apt-get install lynis

Confirm Lynis version
lynis show version
Is your version not the latest? Run sudo apt-cache policy lynis to see where your package came from.

Consider pinning

If you keep receiving an old version from your distribution, 'pin' the Lynis package. Create the file /etc/apt/preferences.d/lynis with the following contents:
Package: lynis
Pin: origin packages.cisofy.com
Pin-Priority: 600
Note: In this example, a priority of 600 was used, which is typically higher than the other sources. If not, increase the number.