Software Repository (Community)

This is the software repository for packages provided by CISOfy.

This service is provided to the community on a fair-use basis. If you have more than a few systems, then set up your internal software repository and let it sync with ours. Heavy usage will be blocked on our discretion.

» Are you a customer of Lynis Enterprise?

Operating Systems

This list shows what operating systems were used to test these packages. We expect these packages to work for both older and newer versions, as no compilation was involved during packaging.

Your operating system not listed here? You can use Git or use a "Manual" deployment. This is documented in our Get Started document.


Are you already customer of Lynis Enterprise? See packages for customers.

Import GPG key and add repository

First import the GPG key. This ensures the signed repository can be checked.

rpm --import

zypper addrepo --gpgcheck --name "CISOfy Lynis repository" --priority 1 --refresh --type rpm-md lynis

Check if the repository is added:

zypper repos

Install Lynis

If the repository is available, Lynis can be installed from it. As it is marked with a high priority, the Lynis package will be installed from the new repository.

zypper refresh

zypper install lynis

CentOS, Fedora, and RHEL

Already a customer of Lynis Enterprise? See packages for customers.

Lynis Community

Ensure that cURL, NSS, openssl, and CA certificates are up-to-date.

yum update ca-certificates curl nss openssl

Create /etc/yum.repos.d/cisofy-lynis.repo

name=CISOfy Software - Lynis package

Next step is installing Lynis with yum.

yum makecache fast

yum install lynis

First time it might ask to import the GPG key. This ensures you only updates are received from us.

Now you start using Lynis. First time users are advised to use the Get Started guide.

lynis audit system

Advanced: Custom RPM creation

Like to build your own RPM? We have a Lynis spec file.

git clone
./lynis-devkit build rpm

Debian, Ubuntu

Are you are a customer with an active subscription to Lynis Enterprise? Have a look in the customers section.

Import key

For these commands root access may be needed. Use sudo or run as root user.

Download the key from a central keyserver:

apt-key adv --keyserver --recv-keys C80E383C3DE9F082E01391A0366C67DE91CA5D5F

Or manually import it:

wget -O - | apt-key add -

Add software repository

The software repository uses preferably HTTPS for secure transport. Install the 'https' method for APT, if it was not available yet.

apt install apt-transport-https

Using your software in English? Then configure APT to skip downloading translations. This saves bandwidth and prevents additional load on the repository servers.

echo 'Acquire::Languages "none";' > /etc/apt/apt.conf.d/99disable-translations

Next step is adding the repository:

echo "deb CODENAME main" > /etc/apt/sources.list.d/cisofy-lynis.list

Note: Replace CODENAME with your distribution name (e.g. stretch, jessie, trusty, xenial). Got another distribution version? Then use stable or testing.

Debian 7echo "deb wheezy main" > /etc/apt/sources.list.d/cisofy-lynis.list
Debian 8echo "deb jessie main" > /etc/apt/sources.list.d/cisofy-lynis.list
Debian 9echo "deb stretch main" > /etc/apt/sources.list.d/cisofy-lynis.list
Debian (other versions)echo "deb stable main" > /etc/apt/sources.list.d/cisofy-lynis.list
Ubuntu 14.04echo "deb trusty main" > /etc/apt/sources.list.d/cisofy-lynis.list
Ubuntu 16.04echo "deb xenial main" > /etc/apt/sources.list.d/cisofy-lynis.list
Ubuntu (other versions)echo "deb stable main" > /etc/apt/sources.list.d/cisofy-lynis.list
Other Debian derivatives (like Kali)
Stable repositoryecho "deb stable main" > /etc/apt/sources.list.d/cisofy-lynis.list

Install Lynis

Refresh the local package database with the new repository data and install Lynis:

apt update

Got an error after running this command? Check if you filled in the 'codename' correctly and the line is correct. It are those small details that may prevent it from working.

apt install lynis

Note, older Ubuntu versions may need apt-get install lynis

Confirm Lynis version

lynis show version

Is your version not the latest? Run apt-cache policy lynis to see where your package came from.

Consider pinning

If you keep receiving an old version from your distribution, 'pin' the Lynis package. Create the file /etc/apt/preferences.d/lynis with the following contents:

Package: lynis
Pin: origin
Pin-Priority: 600

Having issues? Look in our troubleshoot guide for issues installation or updating Lynis.