Our kickstart script simply adds the repo to /etc/apt/sources.list.d, e.g: deb http://download.opensuse.org/repositories/home:/laszlo_budai:/syslog-ng/xUbuntu_${DISTRIB_RELEASE}<http://download.opensuse.org/repositories/home:/laszlo_budai:/syslog-ng/xUbuntu_$%7bDISTRIB_RELEASE%7d> I don't see how we could do this using an API key and have it on customer systems. Currently (at least until the next release), customers install LZ simply by calling our kickstart and piping it through bash, like so: wget -qO- https://logzilla.sh | sudo bash If you download the script directly (without the pipe), you can see it's just a simple script that adds whatever repos needed. We do this to simplify the install process for end users. But doing some strange API key thing only over-complicates the process. I get that as a company, you'd like to collect cool metrics, but making it difficult may have the opposite affect you guys are looking for. You're already in competition with rsyslog since it is included in the OS. So if you require folks to jump through hoops, they may just decide to use rsyslog instead. I'm not saying we will – I'm not a fan of rsyslog for the exact reason above, it's over-complicated. Just saying that you may lose potential new users by complicating things. Something to consider :) From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Gergely Bodnár <gergely.bodnar@balabit.com> Reply-To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Date: Friday, May 18, 2018 at 3:57 AM To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] syslog-ng Open Source Edition official binary repository Hi, Thanks for your remark, we highly appreciate it. Basically we prefer if everyone would register individually. However we cannot and do not want to prohibit to use a single api token in install scripts so basically you can include it in your script too. Only one thing I would kindly ask, please try to avoid that your api token to be indexed by search engines. From our perspective we would not be happy if everyone would use the same login all over the world. Also every other feedback is welcome about the repository, how it should be improved in the future including which platforms do you prefer next to be available. Thanks, Gergely Bodnar On Wed, May 9, 2018 at 3:44 PM Clayton Dukes <cdukes@logzilla.net<mailto:cdukes@logzilla.net>> wrote: This is GREAT news! One question, does *everyone* using the repo have to register? If so, it’s going to be a big problem for people downloading other products (like LogZilla). Our kickstart/install script installs syslog-ng instead of using rsyslog which is, of course, packaged with Ubuntu. (I imagine the same question will come up with other vendors’ software products like Cisco, IBM, etc.) From: syslog-ng <syslog-ng-bounces@lists.balabit.hu<mailto:syslog-ng-bounces@lists.balabit.hu>> on behalf of Gergely Bodnár <gergely.bodnar@balabit.com<mailto:gergely.bodnar@balabit.com>> Reply-To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu>> Date: Wednesday, May 9, 2018 at 8:41 AM To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu>> Subject: [syslog-ng] syslog-ng Open Source Edition official binary repository Dear syslog-ng users, Last autumn, we asked for your feedback (https://syslog-ng.com/blog/new-website-and-official-repo-coming-up-tell-us-w...) on our plan to introduce official binary repositories for syslog-ng Open Source Edition. The overwhelming majority of those who got back to us agreed that it is fair to provide this service tied to a simple registration. We are happy to announce that although a bit late compared to our originally planned schedule, we are launching this service, first as a test run with Debian Jessie packages. We will always host the latest release, and these packages will be built and tested by us, so you won't have to worry about dependencies - provided you are running a suitable Linux distribution. We are planning to add an RPM repository as well in the future, knowing well that many of our open source users require that. How to use repository? ------------------------------- To use the newly introduced syslog-ng Open Source Edition Debian Jessie repository, you only have to complete a few quick and easy steps. 1. Create a MyBalabit account (https://my.balabit.com/signup). Just click on MyBalabit in the top right corner of the page, and then choose Sign Up (under OS X, the sign up option will be hiding under the hamburger menu). At the top of the form, there will be a drop down menu where you have to specify why are you requesting access to this portal. Choose syslog-ng OSE Binary Repository Access, then fill out the rest of the form, read and agree to our privacy policy, then hit create you account.If you already happen to have a MyBalabit account, simply log in and look for Request Access in the top menu. Once in there, select syslog-ng OSE Binary Repository Access and click on request access. 2. Once you finished with the initial steps, look for the Access tokens option at the bottom of the left menu bar. In there, you will find your token to be used with the syslog-ng OSE DEB repository. If for some reason you need a new token, use the regenerate button. 3. Now you should be all set to configure your compatible Linux distribution to access the repository. # echo "deb http://JXJiI9Znyt:@apt.syslog-ng.com/syslog-ng-ose jessie main" >/etc/apt/sources.list.d/oserepo.list # apt-get update # apt-get install --no-install-recommends -y curl # curl http://JXJiI9Znyt@apt.syslog-ng.com/syslog-ng-ose/pubkey.gpg | apt-key add - # apt-get update # apt-cache policy syslog-ng # apt-get install syslog-ng And that's it, you should be all set! Please, don't forget that this is still very much a trial for us to gauge the interest in such a service. Bugs might surface, the repository might be inaccessible due to technical glitches, etc. We encourage you to share your feedback with us. It would be much appreciated! Regards, Gergely Bodnar -- Gergely Bodnar | syslog-ng Product Owner gergely.bodnar@balabit.com<mailto:gergely.bodnar@balabit.com> follow Balabit on: web<http://go.balabit.com/F9ZZ500bh0U013LX000VAE5> | blog<http://go.balabit.com/VZZi000AL90V300U55X1cE0> | linkedin<http://go.balabit.com/CZ100j0d50LU0EAZ3X09V05>| facebook<http://go.balabit.com/I090eUZ0551kEA3X0L0ZV00> | twitter<http://go.balabit.com/c0503X1U05EZ09AVl0ZfL00> [Image removed by sender. https://pages.balabit.com/rs/855-UZV-853/images/tesztlogo3.png] © BalaBit Corp. Weiser Mazars 135 West 50th Street New York, NY 10020 USA ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq -- Gergely Bodnar | syslog-ng Product Owner gergely.bodnar@balabit.com<mailto:gergely.bodnar@balabit.com> follow Balabit on: web<http://go.balabit.com/F9ZZ500bh0U013LX000VAE5> | blog<http://go.balabit.com/VZZi000AL90V300U55X1cE0> | linkedin<http://go.balabit.com/CZ100j0d50LU0EAZ3X09V05>| facebook<http://go.balabit.com/I090eUZ0551kEA3X0L0ZV00> | twitter<http://go.balabit.com/c0503X1U05EZ09AVl0ZfL00> [Image removed by sender.] © BalaBit Corp. Weiser Mazars 135 West 50th Street New York, NY 10020 USA

Laszlo - With the current (yum) repos we run reposync for our non-internet-accessible hosts. This means we would only need one one token to run that process, i'm not sure if something like that is viable for you. On Tue, May 22, 2018 at 4:54 AM, Budai, László <laszlo.budai@balabit.com> wrote:

Hi,

what if you set up an apt mirror? In that case your infrastructure wouldn't depend on a 3rd party infrastructure AND you could use this API key only on the mirror.

regards, Laszlo Budai

On Mon, May 21, 2018 at 11:26 PM, Clayton Dukes <cdukes@logzilla.net> wrote:

...

Our kickstart script simply adds the repo to /etc/apt/sources.list.d, e.g:

deb http://download.opensuse.org/repositories/home:/laszlo_budai :/syslog-ng/xUbuntu_${DISTRIB_RELEASE}

I don't see how we could do this using an API key and have it on customer systems.

Currently (at least until the next release), customers install LZ simply by calling our kickstart and piping it through bash, like so:

wget -qO- https://logzilla.sh | sudo bash

If you download the script directly (without the pipe), you can see it's just a simple script that adds whatever repos needed.

We do this to simplify the install process for end users. But doing some strange API key thing only over-complicates the process.

I get that as a company, you'd like to collect cool metrics, but making it difficult may have the opposite affect you guys are looking for. You're already in competition with rsyslog since it is included in the OS. So if you require folks to jump through hoops, they may just decide to use rsyslog instead.

I'm not saying we will – I'm not a fan of rsyslog for the exact reason above, it's over-complicated. Just saying that you may lose potential new users by complicating things.

Something to consider :)

*From: *syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Gergely Bodnár <gergely.bodnar@balabit.com> *Reply-To: *Syslog-ng users' and developers' mailing list < syslog-ng@lists.balabit.hu> *Date: *Friday, May 18, 2018 at 3:57 AM *To: *Syslog-ng users' and developers' mailing list < syslog-ng@lists.balabit.hu> *Subject: *Re: [syslog-ng] syslog-ng Open Source Edition official binary repository

Hi,

Thanks for your remark, we highly appreciate it.

Basically we prefer if everyone would register individually. However we cannot and do not want to prohibit to use a single api token in install scripts so basically you can include it in your script too.

Only one thing I would kindly ask, please try to avoid that your api token to be indexed by search engines. From our perspective we would not be happy if everyone would use the same login all over the world.

Also every other feedback is welcome about the repository, how it should be improved in the future including which platforms do you prefer next to be available.

Thanks,

Gergely Bodnar

On Wed, May 9, 2018 at 3:44 PM Clayton Dukes <cdukes@logzilla.net> wrote:

This is GREAT news!

One question, does **everyone** using the repo have to register?

If so, it’s going to be a big problem for people downloading other products (like LogZilla). Our kickstart/install script installs syslog-ng instead of using rsyslog which is, of course, packaged with Ubuntu.

(I imagine the same question will come up with other vendors’ software products like Cisco, IBM, etc.)

*From: *syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Gergely Bodnár <gergely.bodnar@balabit.com> *Reply-To: *Syslog-ng users' and developers' mailing list < syslog-ng@lists.balabit.hu> *Date: *Wednesday, May 9, 2018 at 8:41 AM *To: *Syslog-ng users' and developers' mailing list < syslog-ng@lists.balabit.hu> *Subject: *[syslog-ng] syslog-ng Open Source Edition official binary repository

Dear syslog-ng users,

Last autumn, we asked for your feedback (https://syslog-ng.com/blog/ne w-website-and-official-repo-coming-up-tell-us-what-you-think/) on our plan to introduce official binary repositories for syslog-ng Open Source Edition. The overwhelming majority of those who got back to us agreed that it is fair to provide this service tied to a simple registration. We are happy to announce that although a bit late compared to our originally planned schedule, we are launching this service, first as a test run with Debian Jessie packages. We will always host the latest release, and these packages will be built and tested by us, so you won't have to worry about dependencies - provided you are running a suitable Linux distribution. We are planning to add an RPM repository as well in the future, knowing well that many of our open source users require that.

How to use repository?

-------------------------------

To use the newly introduced syslog-ng Open Source Edition Debian Jessie repository, you only have to complete a few quick and easy steps.

1. Create a MyBalabit account (https://my.balabit.com/signup). Just click on MyBalabit in the top right corner of the page, and then choose Sign Up (under OS X, the sign up option will be hiding under the hamburger menu). At the top of the form, there will be a drop down menu where you have to specify why are you requesting access to this portal. Choose syslog-ng OSE Binary Repository Access, then fill out the rest of the form, read and agree to our privacy policy, then hit create you account.If you already happen to have a MyBalabit account, simply log in and look for Request Access in the top menu. Once in there, select syslog-ng OSE Binary Repository Access and click on request access.

2. Once you finished with the initial steps, look for the Access tokens option at the bottom of the left menu bar. In there, you will find your token to be used with the syslog-ng OSE DEB repository. If for some reason you need a new token, use the regenerate button.

3. Now you should be all set to configure your compatible Linux distribution to access the repository.

# echo "deb http://JXJiI9Znyt:@apt.syslog-ng.com/syslog-ng-ose jessie main" >/etc/apt/sources.list.d/oserepo.list

# apt-get update

# apt-get install --no-install-recommends -y curl

# curl http://JXJiI9Znyt@apt.syslog-ng.com/syslog-ng-ose/pubkey.gpg | apt-key add -

# apt-get update

# apt-cache policy syslog-ng

# apt-get install syslog-ng

And that's it, you should be all set!

Please, don't forget that this is still very much a trial for us to gauge the interest in such a service. Bugs might surface, the repository might be inaccessible due to technical glitches, etc. We encourage you to share your feedback with us. It would be much appreciated!

Regards,

Gergely Bodnar

--

*Gergely Bodnar* | syslog-ng Product Owner gergely.bodnar@balabit.com follow Balabit on: web <http://go.balabit.com/F9ZZ500bh0U013LX000VAE5> | blog <http://go.balabit.com/VZZi000AL90V300U55X1cE0> | linkedin <http://go.balabit.com/CZ100j0d50LU0EAZ3X09V05>| facebook <http://go.balabit.com/I090eUZ0551kEA3X0L0ZV00> | twitter <http://go.balabit.com/c0503X1U05EZ09AVl0ZfL00>

[image: Image removed by sender. https://pages.balabit.com/rs/855-UZV-853/images/tesztlogo3.png]

*© BalaBit Corp.* Weiser Mazars 135 West 50th Street New York, NY 10020 USA

____________________________________________________________ __________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product= syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq

--

*Gergely Bodnar* | syslog-ng Product Owner gergely.bodnar@balabit.com follow Balabit on: web <http://go.balabit.com/F9ZZ500bh0U013LX000VAE5> | blog <http://go.balabit.com/VZZi000AL90V300U55X1cE0> | linkedin <http://go.balabit.com/CZ100j0d50LU0EAZ3X09V05>| facebook <http://go.balabit.com/I090eUZ0551kEA3X0L0ZV00> | twitter <http://go.balabit.com/c0503X1U05EZ09AVl0ZfL00>

[image: Image removed by sender.]

*© BalaBit Corp.* Weiser Mazars 135 West 50th Street New York, NY 10020 USA

____________________________________________________________ __________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product= syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq

____________________________________________________________ __________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/? product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq

Hi Fabien, thanks for your comment, I think nobody will think that you are trolling. I totally agree with you that Jessie is now history and we should support more distributions. As I think it will be a longer process while we can support all the distributions that we want. It's in initial phase, and I think if community members -like you- share your thoughts, things can be changed... API key: it's a matter of choice... If you don't want to use this API key based repository, just use one the unofficial. (from my part I was thinking on to close my repository, but well... I won't). regards, Laszlo Budai On Wed, May 23, 2018 at 10:35 AM, Fabien Wernli <wernli@in2p3.fr> wrote:

Hi,

On Wed, May 09, 2018 at 12:41:06PM +0000, Gergely Bodnár wrote:

...

Last autumn, we asked for your feedback ( https://syslog-ng.com/blog/new-website-and-official-repo- coming-up-tell-us-what-you-think/)

I held back until now, but now it haunts me. I'm repeating myself when I say I think the API key is a terrible idea.

The stats you'll collect won't mean much anyway, and Jessie is now history. I fully agree with Clayton.

My apologies if this sounds like a troll

____________________________________________________________ __________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/? product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq