[syslog-ng] unable to install syslog-ng ubuntu 16.04

Varugis Kurien vkurien at midfinsystems.com
Mon Nov 14 17:05:09 UTC 2016 

Simon,

I was able to get 16.04 work with a clean build using the standard ISO image. I had to install syslog-ng-core first.


How do you build your U16.04 images?



Unfortunately Ubuntu 12.04 still doesn't work due to sylog-ng-mod-python package being incorrect. I worked around this by fixing the preinst in the package and generating a new one for now.

________________________________
From: syslog-ng <syslog-ng-bounces at lists.balabit.hu> on behalf of Simon Mousey Smith <simonsmith5521 at gmail.com>
Sent: Monday, November 14, 2016 2:03:09 AM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04

Hi,

Was the any update on install syslog-ng on ubuntu 16.04?

I can install syslog-ng 3.5.6 fine from the ubuntu apt

But I would rather use the latest version 3.8 from the unofficial repo

Im still having no luck installing it however :(

regards

Simon

On 9 Nov 2016, at 18:58, Varugis Kurien <vkurien at midfinsystems.com<mailto:vkurien at midfinsystems.com>> wrote:

I can confirm that the workaround that Gergely mentioned works on a stock install of 16.04 where syslog-ng was never installed. I built the VM image using packer FWIW so no "by-hand" hacking was involved.
________________________________
From: syslog-ng <syslog-ng-bounces at lists.balabit.hu<mailto:syslog-ng-bounces at lists.balabit.hu>> on behalf of Simon Mousey Smith <simonsmith5521 at gmail.com<mailto:simonsmith5521 at gmail.com>>
Sent: Wednesday, November 9, 2016 4:04:36 AM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04

Hi

Doesn’t work with my 16.04 yet, so I will hang fire!

regards

Simon


On 8 Nov 2016, at 20:42, Budai, László <laszlo.budai at balabit.com<mailto:laszlo.budai at balabit.com>> wrote:

Hi,

I've built packages of syslog-ng for Ubuntu 16.10 (it worked for me).
Could someone test it?

My plan is to check the 16.04 issue on Friday.

regards,
Laszlo Budai


On Tue, Nov 8, 2016 at 5:50 PM, Simon Mousey Smith <simonsmith5521 at gmail.com<mailto:simonsmith5521 at gmail.com>> wrote:
Thank you for trying to help out anyways,

If u remember how u got it installed it would be very helpful!

regards

Simon

On 8 Nov 2016, at 16:49, Clayton Dukes <cdukes at logzilla.net<mailto:cdukes at logzilla.net>> wrote:

Our customers are installing it (as are we in test servers) without any problems.
I did, however, have this problem several months ago but have no seen it since. Sadly, I don't remember how I fixed it. Sorry :(

(note: I am not a Balabit employee, just trying to help out)


From: syslog-ng <syslog-ng-bounces at lists.balabit.hu<mailto:syslog-ng-bounces at lists.balabit.hu>> on behalf of Varugis Kurien <vkurien at midfinsystems.com<mailto:vkurien at midfinsystems.com>>
Reply-To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu<mailto:syslog-ng at lists.balabit.hu>>
Date: Tuesday, November 8, 2016 at 11:46 AM
To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu<mailto:syslog-ng at lists.balabit.hu>>
Subject: Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04

I do exactly that using ansible. No luck. The problem is in the packaging itself.
________________________________
From: syslog-ng <syslog-ng-bounces at lists.balabit.hu<mailto:syslog-ng-bounces at lists.balabit.hu>> on behalf of Clayton Dukes <cdukes at logzilla.net<mailto:cdukes at logzilla.net>>
Sent: Tuesday, November 8, 2016 8:41:36 AM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04

Try this (from our kickstart script at http://logzilla.sh)

# Syslog-ng Repo:
source /etc/lsb-release
    grep -q "deb http://download.opensuse.org/repositories/home:/laszlo_budai:/syslog-ng/xUbuntu_${DISTRIB_RELEASE}<http://download.opensuse.org/repositories/home:/laszlo_budai:/syslog-ng/xUbuntu_$%7BDISTRIB_RELEASE%7D> ./" \
        /etc/apt/sources.list /etc/apt/sources.list.d/*.list || \
        echo "deb http://download.opensuse.org/repositories/home:/laszlo_budai:/syslog-ng/xUbuntu_${DISTRIB_RELEASE}<http://download.opensuse.org/repositories/home:/laszlo_budai:/syslog-ng/xUbuntu_$%7BDISTRIB_RELEASE%7D> ./" \
        > /etc/apt/sources.list.d/syslog-ng.list
    apt-key list | grep -q laszlo_budai:syslog-ng || wget -qO- \
        "http://download.opensuse.org/repositories/home:/laszlo_budai:/syslog-ng/xUbuntu_${DISTRIB_RELEASE}/Release.key<http://download.opensuse.org/repositories/home:/laszlo_budai:/syslog-ng/xUbuntu_$%7BDISTRIB_RELEASE%7D/Release.key>" | \
        sudo apt-key add - >/dev/null

apt update
apt install syslog-ng


From: syslog-ng <syslog-ng-bounces at lists.balabit.hu<mailto:syslog-ng-bounces at lists.balabit.hu>> on behalf of Simon Mousey Smith <simonsmith5521 at gmail.com<mailto:simonsmith5521 at gmail.com>>
Reply-To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu<mailto:syslog-ng at lists.balabit.hu>>
Date: Tuesday, November 8, 2016 at 7:10 AM
To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu<mailto:syslog-ng at lists.balabit.hu>>
Subject: Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04

Hi,

Im still no luck either :(

Tried assorts but no luck

regards

Simon

On 8 Nov 2016, at 12:10, Varugis Kurien <vkurien at midfinsystems.com<mailto:vkurien at midfinsystems.com>> wrote:

Hi Laszlo,
Have you been able to get this to work? I am in exactly the same position as Simon - I need the ability to parse Linux audit logs in syslog-ng.
________________________________
From: syslog-ng <syslog-ng-bounces at lists.balabit.hu<mailto:syslog-ng-bounces at lists.balabit.hu>> on behalf of Laszlo Budai <laszlo.budai at outlook.com<mailto:laszlo.budai at outlook.com>>
Sent: Saturday, November 5, 2016 1:59:09 PM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04

Hi,
in docker it is not working...
I'll try to fix this issue.

regards,
Laszlo Budai

_____________________________
From: Scheidler, Balázs <balazs.scheidler at balabit.com<mailto:balazs.scheidler at balabit.com>>
Sent: Saturday, November 5, 2016 9:21 AM
Subject: Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04n
To: László Budai <lbudai at balabit.hu<mailto:lbudai at balabit.hu>>, Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu<mailto:syslog-ng at lists.balabit.hu>>


Indeed, I think the problem is that syslog-ng core depends on syslog-ng-mod-journal, which recursively depends on syslog-ng-core through a Provides line.
Hmm.. the funny part that a week ago I successfully installed the same package on one of my servers, but now in a clean docker container I couldn't do that.
I have a workaround, attached you'll find an equivs compatible control file, that provides the missing dependency, once that is installed, "apt-get install syslog-ng" works.
It goes like this:

# dpkg -i syslog-ng-abi-3.8-0_3.8.1-1_all.deb
Selecting previously unselected package syslog-ng-abi-3.8-0.
(Reading database ... 7256 files and directories currently installed.)
Preparing to unpack syslog-ng-abi-3.8-0_3.8.1-1_all.deb ...
Unpacking syslog-ng-abi-3.8-0 (3.8.1-1) ...
Setting up syslog-ng-abi-3.8-0 (3.8.1-1) ...
# apt-get install syslog-ng-core
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  cron libevtlog0 libffi6 libglib2.0-0 libglib2.0-data libicu55 libivykis0 libnet1 libpopt0 libssl1.0.0 libwrap0 libxml2 logrotate sgml-base
  shared-mime-info syslog-ng-mod-journal tcpd xdg-user-dirs xml-core
Suggested packages:
  anacron checksecurity exim4 | postfix | mail-transport-agent mailx sgml-base-doc syslog-ng-mod-sql syslog-ng-mod-mongodb syslog-ng-mod-json
  syslog-ng-mod-smtp syslog-ng-mod-amqp syslog-ng-mod-geoip syslog-ng-mod-redis syslog-ng-mod-stomp syslog-ng-mod-riemann syslog-ng-mod-graphite
  syslog-ng-mod-python syslog-ng-mod-java syslog-ng-mod-java-common-lib syslog-ng-mod-elastic syslog-ng-mod-hdfs syslog-ng-mod-kafka syslog-ng-mod-http
  syslog-ng-mod-curl syslog-ng-mod-kvformat syslog-ng-mod-add-contextual-data debhelper
The following NEW packages will be installed:
  cron libevtlog0 libffi6 libglib2.0-0 libglib2.0-data libicu55 libivykis0 libnet1 libpopt0 libssl1.0.0 libwrap0 libxml2 logrotate sgml-base
  shared-mime-info syslog-ng-core syslog-ng-mod-journal tcpd xdg-user-dirs xml-core
0 upgraded, 20 newly installed, 0 to remove and 11 not upgraded.
Need to get 11.9 MB of archives.
After this operation, 49.5 MB of additional disk space will be used.
Do you want to continue? [Y/n]

The "syslog-ng-core" package only contains a subset of the syslog-ng package, pulling in a smaller set of dependencies, whereas syslog-ng is the full set.
The abi package here is just a fake one, I'll make sure this packaging issue gets fixed.


--
Bazsi

On Thu, Nov 3, 2016 at 10:25 PM, Simon Smith <simonsmith5521 at gmail.com<mailto:simonsmith5521 at gmail.com>> wrote:
Hi All

has anyone been able to install syslog-ng 3.8 successfully on ubuntu 16.04 ?

I’m using the link from the mailing list a few months ago but again no luck - http://lists.balabit.hu/pipermail/syslog-ng/2016-August/023150.html

no matter what packages i try to install it just won’t work

any ideas?

root at syslog:~# apt-get install syslog-ng
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 syslog-ng : Depends: syslog-ng-core (>= 3.8.1) but it is not going to be installed
             Depends: syslog-ng-mod-sql but it is not going to be installed
             Depends: syslog-ng-mod-mongodb but it is not going to be installed
             Depends: syslog-ng-mod-json but it is not going to be installed
             Recommends: syslog-ng-mod-journal but it is not going to be installed
             Recommends: syslog-ng-mod-smtp but it is not going to be installed
             Recommends: syslog-ng-mod-amqp but it is not going to be installed
             Recommends: syslog-ng-mod-geoip but it is not going to be installed
             Recommends: syslog-ng-mod-redis but it is not going to be installed
             Recommends: syslog-ng-mod-stomp but it is not going to be installed
             Recommends: syslog-ng-mod-riemann but it is not going to be installed
             Recommends: syslog-ng-mod-graphite but it is not going to be installed
             Recommends: syslog-ng-mod-python but it is not going to be installed
             Recommends: syslog-ng-mod-java but it is not going to be installed
             Recommends: syslog-ng-mod-java-common-lib but it is not going to be installed
             Recommends: syslog-ng-mod-elastic but it is not going to be installed
             Recommends: syslog-ng-mod-hdfs but it is not going to be installed
             Recommends: syslog-ng-mod-kafka but it is not going to be installed
             Recommends: syslog-ng-mod-http but it is not going to be installed
             Recommends: syslog-ng-mod-curl but it is not going to be installed
             Recommends: syslog-ng-mod-kvformat but it is not going to be installed
             Recommends: syslog-ng-mod-add-contextual-data but it is not going to be installed
E: Unable to correct problems, you have held broken packages.
root at syslog:~# apt-get install syslog-ng-core
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 syslog-ng-core : Depends: syslog-ng-mod-journal but it is not going to be installed
E: Unable to correct problems, you have held broken packages.
root at syslog:~# apt-get install syslog-ng-mod-journal
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 syslog-ng-mod-journal : Depends: syslog-ng-abi-3.8-0 but it is not installable
E: Unable to correct problems, you have held broken packages.
root at syslog:~# apt-get install syslog-ng syslog-ng-core syslog-ng-mod-sql syslog-ng-mod-mongodb syslog-ng-mod-json syslog-ng-mod-journal
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 syslog-ng-mod-journal : Depends: syslog-ng-abi-3.8-0 but it is not installable
 syslog-ng-mod-json : Depends: syslog-ng-abi-3.8-0 but it is not installable
 syslog-ng-mod-mongodb : Depends: syslog-ng-abi-3.8-0 but it is not installable
 syslog-ng-mod-sql : Depends: syslog-ng-abi-3.8-0 but it is not installable
E: Unable to correct problems, you have held broken packages.
root at syslog:~#

regards

Simon - Hestor Ltd

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq




______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq



______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq



______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq


______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20161114/dfd8d7e7/attachment-0001.html>

More information about the syslog-ng mailing list