Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: Cannot Upgrade Server nor Install the Sensor Installer Package on CentOS 6.x

EDR: Cannot Upgrade Server nor Install the Sensor Installer Package on CentOS 6.x

Environment

  • EDR Server: All Versions (previously CB Response Server)
  • CentOS: 6.x

Symptoms

  • Using the commands "yum upgrade cb-enterprise" and "yum install cb-linux-sensor-installer" on CentOS 6 from the EDR Application Server gives the error:
    YumRepo Error: All mirror URLs are not using ftp, http[s] or file.
     Eg. Invalid release/repo/arch combination/
    removing mirrorlist with no valid mirrors: /var/cache/yum/x86_64/6/base/mirrorlist.txt
    Error: Cannot find a valid baseurl for repo: base

Cause

  • CentOS 6 has reached End of Life for all Maintenance updates.
  • Need to temporarily disable all repos for upgrades and installs and just use the Carbon Black repo.

Resolution

  1. Open Terminal.
  2. Switch to root user
    #: su root
  3. Run: 
    # yum clean all
  4. Run the Server Upgrade or Sensor Installer Package Setup on the EDR Application Server:
    1. EDR Server Upgrade:
      #: yum update cb-enterprise --disablerepo=* --enablerepo=CarbonBlack
    2. Sensor Installer Package Setup:
      #: yum install cb-linux-sensor-installer --disablerepo=* --enablerepo=CarbonBlack
  5. If the above does not work try to swap vaults by running the command below and attempt upgrade again: 
    sed -i.old -e 's/^mirrorlist/#mirrorlist/g' -e 's/^#baseurl=http:\/\/mirror.centos.org\/centos\/$releasever\//baseurl=http:\/\/vault.centos.org\/centos\/6\//g' /etc/yum.repos.d/CentOS-Base.repo

Additional Notes

  • The parameter, "--disablerepo=*", temporarily disables all repos while the command is run so that the CarbonBlack repo can be used.
    • This does not permanently disable all repos; it is simply a bypass command.
  • If the temporary command is not wanted, but a more permanent command is required then use a different command.
    • This will apply to everything on the Application Server as opposed to simply an individual command.
    • If installing the Linux sensor on the endpoint throws the same YumRepo error then disable the repos permanently.

Related Content


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎12-02-2020
Views:
6185
Contributors