seplpkg (SEP Linux Packager tool)

Utility for creating a full installable package for Linux for a given Symantec Endpoint Protection Linux agent.

Intro

The seplpkg tool makes it easy to create an full or offline LinuxInstaller package for a given platform or for all Linux distros.

This tool currently runs on Linux and Windows.

Use Cases

The following use case scenarios are supported:

  1. List latest agent packages for SEP Linux
  2. Download packages and create a full SEP Linux Installer for an unmanaged SEPM all platforms, which can be installed behind a firewall.
  3. Download packages and create a full SEP Linux Installer given a Cloud or SEPM Linux Installer stub on all platforms, which can be installed behind a firewall.

Download

Linux: seplpkg-linux-amd64 (version 1.0.1.33)

Windows: seplpkg-windows-amd64.exe (version 1.0.1.33)

Usage

For a general overview of seplpkg commands, run seplpkg --help.

# seplpkg [required_args] [optional_args] cmd 

  Required arguments:
    --platform        Specify Linux platform/distro (see Product and 
                      Platforms section below). In addition, a list can 
                      be provided seperated by space with double quotes,
                      or "all" to select all supported platforms.
                      (Ex: --platform "rhel7 rhel8" or --platform all)

  Optional arguments:
    --product         Specify SEP Linux product (i.e. 14.3ru3, 14.3ru4, 14.3ru5, 14.3ru6)
                      By default the latest release is selected (14.3ru6)
    --outdir          Specify an output directory. By default the output 
                      directory "SEPLPackage" is created in the 
                      current working directory.
    --verbose         Verbose messages
    --version         Print version and exit
    --help            Show the help

  Commands:
    ls|list           List latest available packges
    dl|download       Generate an installer for an unmanaged SEPM agent.
    rp|repackage <LinuxInstaller>
                      Requires Linux Installer stub downloaded 
                      from SEPM or Cloud management server to the current working directory.
                      NOTE: LinuxInstaller stub version must match the product
                      release version specified with -product, otherwise
                      the behavior of the resulting installation is undefined.

Products and Platforms

Note: The platform and product names are matched case insensitive.

Available SEP Product Releases

  • 14.3ru3 (aka "sep14.3ru3", "14.3ru3", "ru3")
  • 14.3ru4 (aka "sep14.3ru4", "14.3ru4", "ru4")
  • 14.3ru5 (aka "sep14.3ru5", "14.3ru5", "ru5")
  • 14.3ru6 (aka "sep14.3ru6", "14.3ru6", "ru6")

Available Platforms

  • amazonlinux2 (aka "amzn2")
  • debian9 (aka "deb9")
  • debian10 (aka "deb10")
  • rhel6 (aka "el6", "redhat6", "centos6")
  • rhel7 (aka "el7", "redhat7", "centos7")
  • rhel8 (aka "el8", "redhat8", "rocky8")
  • rhel9 (aka "el9", "redhat9", "rocky9")
  • sles12 (aka "suse12", "sle12")
  • sles15 (aka "suse15", "sle15")
  • ubuntu14 (aka "ub14")
  • ubuntu16 (aka "ub16")
  • ubuntu18 (aka "ub18")
  • ubuntu20 (aka "ub20")
  • ubuntu22 (aka "ub22")

Examples

  1. List all the package versions available for 14.3RU4:

    seplpkg --platform all --product 14.3ru6 ls

  2. Create an unmanaged 14.3ru4 package for RHEL7 and RHEL8:

    seplpkg --platform "rhel7 rhel8" --product 14.3ru6 dl

  3. After downloading the LinuxInstaller stub from SEP Management server or Cloud Management server, create a fully installable package for Ubuntu 16, 18 and 20 (i.e. repackage):

    seplpkg --platform "ub16 ub18 ub20" --product RU6 --outdir /root/pkg rp LinuxInstallerStub

    • This command would download installers to the folder /root/pkg for all requsted Linux platforms. In addition, customer specific data from the STUB will be extracted and injected to each of the downloaded installer so the resulting installers in /root/pkg folder would enroll with respected management servers after installation.

  4. Create an unmanaged SEP 14.3ru5 client package for RHEL9:

    seplpkg --platform rhel9 --product 14.3ru6 download

    • Import the sylink.xml post installtion to enroll and be managed by the SEPM

      /opt/Symantec/sdcssagent/AMD/tools/sav manage -i sylink.xml

  5. Installing a downloaded package:

    seplpkg --platform "rhel7" --product RU6 --outdir /root/pkg repackage LinuxInstallerStub

    • The above command would download an installer for RedHat Enterprise Linux 7 to the folder /root/pkg with the file name "LinuxInstaller.rhel7.sep14.3ru6.<timestamp>". Copy this file to a system which has access to the Internet and run the installer. At the end of installation the installer would check with the Broadcom software repsitory on the Internet for software updates and if a newer version is available , it will download the latest version and update the product.

      /root/pkg/LinuxInstaller.rhel7.sep14.3ru6.<timestamp>

    • If the system is in an isolated environment without access to the Internet, run the installer with following option. This would install SEP Linux 14.3 RU6 without checking for software update.

      /root/pkg/LinuxInstaller.rhel7.sep14.3ru6.<timestamp> -- -g