This is the software repository for packages provided by CISOfy.
» Are you a customer of Lynis Enterprise?
This list shows what operating systems were used to test these packages. We expect these packages to work for both older and newer versions, as no compilation was involved during packaging.
Your operating system not listed here? You can use Git or use a "Manual" deployment. This is documented in our Get Started document.
First import the GPG key. This ensures the signed repository can be checked.sudo rpm --import https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
sudo zypper addrepo --gpgcheck --name "CISOfy Lynis repository" --priority 1 --refresh --type rpm-md https://packages.cisofy.com/community/lynis/rpm/ lynis
Check if the repository is added:sudo zypper repos
If the repository is available, Lynis can be installed from it. As it is marked with a high priority, the Lynis package will be installed from the new repository.sudo zypper refresh
sudo zypper install lynis
Create repository file
sudo vi /etc/yum.repos.d/cisofy-lynis.repo
Add the following content:
[lynis] name=CISOfy Software - Lynis package baseurl=https://packages.cisofy.com/community/lynis/rpm/ enabled=1 gpgkey=https://packages.cisofy.com/keys/cisofy-software-rpms-public.key gpgcheck=1 priority=2
Install or Update
sudo dnf install lynis
sudo dnf update lynis
Ensure that cURL, NSS, openssl, and CA certificates are up-to-date.yum update ca-certificates curl nss openssl
Create /etc/yum.repos.d/cisofy-lynis.repo[lynis] name=CISOfy Software - Lynis package baseurl=https://packages.cisofy.com/community/lynis/rpm/ enabled=1 gpgkey=https://packages.cisofy.com/keys/cisofy-software-rpms-public.key gpgcheck=1 priority=2
Next step is installing Lynis with yum.sudo yum makecache fast
sudo yum install lynis
First time it might ask to import the GPG key. This ensures you only updates are received from us.
Now you start using Lynis. First time users are advised to use the Get Started guide.lynis audit system
Like to build your own RPM? We have a Lynis spec file.git clone https://github.com/CISOfy/lynis-sdk ./lynis-devkit build rpm
Are you are a customer with an active subscription to Lynis Enterprise? Have a look in the customers section.
For these commands root access may be needed. Use sudo or run as root user.
Download the key from a central keyserver:sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys C80E383C3DE9F082E01391A0366C67DE91CA5D5F
Or manually import it:sudo wget -O - https://packages.cisofy.com/keys/cisofy-software-public.key | sudo apt-key add -
Add software repository
The software repository uses preferably HTTPS for secure transport. Install the 'https' method for APT, if it was not available yet.sudo apt install apt-transport-https
Using your software in English? Then configure APT to skip downloading translations. This saves bandwidth and prevents additional load on the repository servers.echo 'Acquire::Languages "none";' | sudo tee /etc/apt/apt.conf.d/99disable-translations
Next step is adding the repository:echo "deb https://packages.cisofy.com/community/lynis/deb/ stable main" | sudo tee /etc/apt/sources.list.d/cisofy-lynis.list
Refresh the local package database with the new repository data and install Lynis:apt update
Got an error after running this command? Check if you filled in the 'codename' correctly and the line is correct. It are those small details that may prevent it from working.apt install lynis
Note, older Ubuntu versions may need sudo apt-get install lynis
Confirm Lynis versionlynis show version
Is your version not the latest? Run
sudo apt-cache policy lynisto see where your package came from.
If you keep receiving an old version from your distribution, 'pin' the Lynis package. Create the file /etc/apt/preferences.d/lynis with the following contents:Package: lynis Pin: origin packages.cisofy.com Pin-Priority: 600
Note: In this example, a priority of 600 was used, which is typically higher than the other sources. If not, increase the number.
Having issues? Look in our troubleshooting guide for issues installation or updating Lynis.