The Wazuh indexer package does not set revision in the package metadata

[rauldpm]

Description

Testing the v4.9.0-alpha1 Wazuh installation assistant script to build the AMI and the OVA, I found that the Wazuh indexer package failed to be installed from the packages-dev.wazuh.com/pre-release repository

The Wazuh installation assistant used the following command: wazuh-indexer=4.9.0-* to install the package but failed to install it, note that this only happens with the Wazuh indexer

Install testing

root@ubuntu20stack:/home/vagrant# apt install wazuh-manager=4.9.0-1
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Suggested packages:
  expect
The following NEW packages will be installed:
  wazuh-manager
0 upgraded, 1 newly installed, 0 to remove and 91 not upgraded.
Need to get 319 MB of archives.
After this operation, 928 MB of additional disk space will be used.
Get:1 https://packages-dev.wazuh.com/pre-release/apt unstable/main amd64 wazuh-manager amd64 4.9.0-1 [319 MB]
Fetched 319 MB in 15s (20.8 MB/s)                                                                                                                                                                                 
Selecting previously unselected package wazuh-manager.
(Reading database ... 120030 files and directories currently installed.)
Preparing to unpack .../wazuh-manager_4.9.0-1_amd64.deb ...
Unpacking wazuh-manager (4.9.0-1) ...
Setting up wazuh-manager (4.9.0-1) ...
Processing triggers for systemd (245.4-4ubuntu3.22) ...

root@ubuntu20stack:/home/vagrant# apt install wazuh-dashboard=4.9.0-1
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following NEW packages will be installed:
  wazuh-dashboard
0 upgraded, 1 newly installed, 0 to remove and 91 not upgraded.
Need to get 170 MB of archives.
After this operation, 977 MB of additional disk space will be used.
Get:1 https://packages-dev.wazuh.com/pre-release/apt unstable/main amd64 wazuh-dashboard amd64 4.9.0-1 [170 MB]
Fetched 170 MB in 9s (18.8 MB/s)                                                                                                                                                                                  
Selecting previously unselected package wazuh-dashboard.
(Reading database ... 142599 files and directories currently installed.)
Preparing to unpack .../wazuh-dashboard_4.9.0-1_amd64.deb ...
Creating wazuh-dashboard group... OK
Creating wazuh-dashboard user... OK
Unpacking wazuh-dashboard (4.9.0-1) ...
Setting up wazuh-dashboard (4.9.0-1) ...

root@ubuntu20stack:/home/vagrant# apt install wazuh-indexer=4.9.0-1
Reading package lists... Done
Building dependency tree       
Reading state information... Done
E: Version '4.9.0-1' for 'wazuh-indexer' was not found

The Wazuh indexer package can be installed using wazuh-indexer without specifying version and revision, it also fails when the package specifies revision * (this will match the last revision of the package i.e. -2)

Failed install with * revision

root@ubuntu20stack:/home/vagrant# apt install wazuh-indexer=4.9.0-*
Reading package lists... Done
Building dependency tree       
Reading state information... Done
E: Version '4.9.0-*' for 'wazuh-indexer' was not found

Installing the package without version and revision shows no revision value in the output

Successful install without version-revision

root@ubuntu20stack:/home/vagrant# apt install wazuh-indexer
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following NEW packages will be installed:
  wazuh-indexer
0 upgraded, 1 newly installed, 0 to remove and 91 not upgraded.
Need to get 0 B/850 MB of archives.
After this operation, 1,077 MB of additional disk space will be used.
Selecting previously unselected package wazuh-indexer.
(Reading database ... 236363 files and directories currently installed.)
Preparing to unpack .../wazuh-indexer_4.9.0_amd64.deb ...
Running Wazuh Indexer Pre-Installation Script
Unpacking wazuh-indexer (4.9.0) ...
Setting up wazuh-indexer (4.9.0) ...
Running Wazuh Indexer Post-Installation Script
### NOT starting on installation, please execute the following statements to configure wazuh-indexer service to start automatically using systemd
 sudo systemctl daemon-reload
 sudo systemctl enable wazuh-indexer.service
### You can start wazuh-indexer service by executing
 sudo systemctl start wazuh-indexer.service
Processing triggers for systemd (245.4-4ubuntu3.22) ...

This means that the package metadata is incorrect, we need to investigate the cause and fix it so we can test the package

Looking at the cache data of the repository, we can see that package 4.9.0 has no revision (check the version field)

Package metadata

Package: wazuh-indexer
Priority: optional
Section: web
Installed-Size: 1051397
Maintainer: Wazuh Indexer Team <[email protected]>
Architecture: amd64
Version: 4.9.0
Filename: pool/main/w/wazuh-indexer/wazuh-indexer_4.9.0-1_amd64.deb
Size: 850268764
MD5sum: 0e1c17303680446bd60f6ffac77d898f
SHA1: 6bf876f4401d2c466bbe60a5aa1282ce73256e65
SHA256: 3f2ba63a0668f07a29ddec61fcbba39b03061ac825b49e4060f1997b5d0ccba5
SHA512: 01f79019b7247b6ac6fec3e8d87d246a90fc8c7d27a85b5c2d5a8b5d5038a0f3d7a077c52bcade2d3c0493dd0791c34d0a17ec865a6726b221d8b7436fdf392d
Description: Wazuh indexer is a near real-time full-text search and analytics engine that gathers security-related data into one platform.
 This Wazuh central component indexes and stores alerts generated by the Wazuh server.
 Wazuh indexer can be configured as a single-node or multi-node cluster, providing scalability and high availability.
 Documentation can be found at https://documentation.wazuh.com/current/getting-started/components/wazuh-indexer.html
Description-md5: 0f9eef3d6be6ac2c69521d8b94b9e01f
Homepage: https://www.wazuh.com/
License: Apache-2.0

Package: wazuh-indexer
Priority: extra
Section: admin
Installed-Size: 1025350
Maintainer: Wazuh, Inc <[email protected]>
Architecture: amd64
Version: 4.8.0-1
Depends: debconf, adduser, procps
Filename: pool/main/w/wazuh-indexer/wazuh-indexer_4.8.0-1_amd64.deb
Size: 758596794
MD5sum: f9bd443a480f7c7b70c8b91b744fcf61
SHA1: 9f2b10790322396e04502f8603b43ff454edc304
SHA256: 922a22a15119e35a2c19f05b1b13089eb4e8d9d4440373077cbf33d0c3564bc1
SHA512: 3a45e1cd982bef2bb20375f1766d97b7522bfe76d006b95a9bc6df098c10a46d41a950e83d7d512c4b23f3bdf38dc3681523bcf5ebb4e0121f49f3be21e2be98
Description: Wazuh indexer is a near real-time full-text search and analytics engine that gathers security-related data into one platform.
 This Wazuh central component indexes and stores alerts generated by the Wazuh server.
 Wazuh indexer can be configured as a single-node or multi-node cluster, providing scalability and high availability.
 Documentation can be found at https://documentation.wazuh.com/current/getting-started/components/wazuh-indexer.html
Description-md5: 0f9eef3d6be6ac2c69521d8b94b9e01f
Homepage: https://www.wazuh.com

The package has been created in the following GitHub Actions:

• https://github.com/wazuh/wazuh-indexer/actions/runs/9602522572
• https://github.com/wazuh/wazuh-indexer/actions/runs/9602522518

Related

• Wazuh packages redesign tier 1 - Stage 2 - Migrate Wazuh indexer #155

[AlexRuiz7]

The revision is passed correctly to debmake. The cause why it's not saved in the metadata is unknown.

2024-06-20T18:33:26.7234044Z + echo 'DEBUILD_DPKG_BUILDPACKAGE_OPTS="-us -uc -ui -b"'
2024-06-20T18:33:26.7238403Z + debmake --fullname 'Wazuh Team' --email [email protected] --invoke debuild --package wazuh-indexer --native --revision 1 --upstreamversion 4.9.0
2024-06-20T18:33:26.8519906Z I: set parameters
2024-06-20T18:33:26.8556374Z I: sanity check of parameters
2024-06-20T18:33:26.8557425Z W: -p "wazuh-indexer" != auto set value ""
2024-06-20T18:33:26.8558342Z W: -u "4.9.0" != auto set value ""
2024-06-20T18:33:26.8559208Z W: -r "1" != auto set value ""
2024-06-20T18:33:26.8560103Z I: pkg="wazuh-indexer", ver="4.9.0", rev="1"

[f-galland]

The .deb package metadata is controlled from distribution/packages/build.gradle, and the version number seems to be extracted from the VERSION file in the repo's root.

[f-galland]

Setting the value of release in build.gradle's commonDebConfig closure seems to add a revision to the packages:

Closure commonDebConfig(boolean jdk, String architecture) {
  return {
    configure(commonPackageConfig('deb', jdk, architecture))
    release = 1

    // jdeb does not provide a way to set the License control attribute, and ospackage
    // silently ignores setting it. Instead, we set the license as "custom field"
    customFields['License'] = 'ASL-2.0'

    archiveVersion = project.version.replace('-', '~')
    packageGroup 'web'

    // versions found on oldest supported distro, centos-6
    requires('bash', '4.1', GREATER | EQUAL)
    requires('lsb-base', '4', GREATER | EQUAL)
    requires 'libc6'
    requires 'adduser'

  }

$ dpkg -I distribution/packages/deb/build/distributions/wazuh-indexer-min_4.9.0_amd64.deb 
 new Debian package, version 2.0.
 size 253031066 bytes: control archive=15756 bytes.
     156 bytes,     6 lines      conffiles            
     563 bytes,    14 lines      control              
   39073 bytes,   435 lines      md5sums              
    4337 bytes,   124 lines   *  postinst             #!/usr/bin/env
    3072 bytes,   123 lines   *  postrm               #!/bin/sh
    2427 bytes,    88 lines   *  preinst              #!/usr/bin/env
    2661 bytes,   101 lines   *  prerm                #!/bin/sh
 Package: wazuh-indexer
 Source: wazuh-indexer
 Version: 4.9.0-1
 Section: web
 Priority: optional
 Architecture: amd64
 Depends: bash (>= 4.1), lsb-base (>= 4), libc6, adduser, coreutils (>= 8.4)
 Installed-Size: 435773
 Maintainer: Wazuh, Inc <[email protected]>
 Description: Distributed RESTful search engine built for the cloud
  Reference documentation can be found at
    https://documentation.wazuh.com/current/getting-started/components/wazuh-indexer.html
 Homepage: https://documentation.wazuh.com/current/getting-started/components/wazuh-indexer.html
 License: ASL-2.0