seplpkg (SEP Linux Packager tool)
Utility for creating a full installable package for Linux for a given Symantec Endpoint Protection Linux agent.
The seplpkg tool makes it easy to create an full or offline LinuxInstaller package for a given platform or for all Linux distros.
This tool currently runs on Linux and Windows.
The following use case scenarios are supported:
- List latest agent packages for SEP Linux
- Download packages and create a full SEP Linux Installer for an unmanaged SEPM all platforms, which can be installed behind a firewall.
- Download packages and create a full SEP Linux Installer given a Cloud or SEPM Linux Installer stub on all platforms, which can be installed behind a firewall.
For a general overview of seplpkg commands, run
# seplpkg [required_args] [optional_args] cmd Required arguments: --platform Specify Linux platform/distro (see Product and Platforms section below). In addition, a list can be provided seperated by space with double quotes, or "all" to select all supported platforms. (Ex: --platform "rhel7 rhel8" or --platform all) Optional arguments: --product Specify SEP Linux product (i.e. 14.3ru3, 14.3ru4, 14.3ru5, 14.3ru6) By default the latest release is selected (14.3ru6) --outdir Specify an output directory. By default the output directory "SEPLPackage" is created in the current working directory. --verbose Verbose messages --version Print version and exit --help Show the help Commands: ls|list List latest available packges dl|download Generate an installer for an unmanaged SEPM agent. rp|repackage <LinuxInstaller> Requires Linux Installer stub downloaded from SEPM or Cloud management server to the current working directory. NOTE: LinuxInstaller stub version must match the product release version specified with -product, otherwise the behavior of the resulting installation is undefined.
Products and Platforms
Note: The platform and product names are matched case insensitive.
Available SEP Product Releases
- 14.3ru3 (aka "sep14.3ru3", "14.3ru3", "ru3")
- 14.3ru4 (aka "sep14.3ru4", "14.3ru4", "ru4")
- 14.3ru5 (aka "sep14.3ru5", "14.3ru5", "ru5")
- 14.3ru6 (aka "sep14.3ru6", "14.3ru6", "ru6")
- amazonlinux2 (aka "amzn2")
- debian9 (aka "deb9")
- debian10 (aka "deb10")
- rhel6 (aka "el6", "redhat6", "centos6")
- rhel7 (aka "el7", "redhat7", "centos7")
- rhel8 (aka "el8", "redhat8", "rocky8")
- rhel9 (aka "el9", "redhat9", "rocky9")
- sles12 (aka "suse12", "sle12")
- sles15 (aka "suse15", "sle15")
- ubuntu14 (aka "ub14")
- ubuntu16 (aka "ub16")
- ubuntu18 (aka "ub18")
- ubuntu20 (aka "ub20")
- ubuntu22 (aka "ub22")
List all the package versions available for 14.3RU4:
seplpkg --platform all --product 14.3ru6 ls
Create an unmanaged 14.3ru4 package for RHEL7 and RHEL8:
seplpkg --platform "rhel7 rhel8" --product 14.3ru6 dl
After downloading the LinuxInstaller stub from SEP Management server or Cloud Management server, create a fully installable package for Ubuntu 16, 18 and 20 (i.e. repackage):
seplpkg --platform "ub16 ub18 ub20" --product RU6 --outdir /root/pkg rp LinuxInstallerStub
- This command would download installers to the folder /root/pkg for all requsted Linux platforms. In addition, customer specific data from the STUB will be extracted and injected to each of the downloaded installer so the resulting installers in /root/pkg folder would enroll with respected management servers after installation.
Create an unmanaged SEP 14.3ru5 client package for RHEL9:
seplpkg --platform rhel9 --product 14.3ru6 download
Import the sylink.xml post installtion to enroll and be managed by the SEPM
/opt/Symantec/sdcssagent/AMD/tools/sav manage -i sylink.xml
Installing a downloaded package:
seplpkg --platform "rhel7" --product RU6 --outdir /root/pkg repackage LinuxInstallerStub
The above command would download an installer for RedHat Enterprise Linux 7 to the folder /root/pkg with the file name "LinuxInstaller.rhel7.sep14.3ru6.<timestamp>". Copy this file to a system which has access to the Internet and run the installer. At the end of installation the installer would check with the Broadcom software repsitory on the Internet for software updates and if a newer version is available , it will download the latest version and update the product.
If the system is in an isolated environment without access to the Internet, run the installer with following option. This would install SEP Linux 14.3 RU6 without checking for software update.
/root/pkg/LinuxInstaller.rhel7.sep14.3ru6.<timestamp> -- -g