Endpoint Protection

 View Only

 Stuck installing SEP on Ubuntu

rmoc's profile image
rmoc posted Jan 02, 2021 01:15 PM
Ubuntu LTS 20.04, all upgrades, updates.
SEP 14.3 MP1
I generated linux installers from my SEPM.  That gave me dpkg and rpm zips.  I'm really not sure what the difference is between dpkg and rpm.  Probably something with how it's installed on linux.
The machine is a Windows PC, x64 install of Ubuntu.


dpkg looked workable so I started with that one.

I got the zip unzipped.

I was following this.
How to Install Symantec Endpoint Protection Client 14 on Ubuntu 19.04 LTS - Linux Windows and android Tutorials
Linux Windows and android Tutorials remove preview
How to Install Symantec Endpoint Protection Client 14 on Ubuntu 19.04 LTS - Linux Windows and android Tutorials
Symantec End Point Manager server install is only supported on Windows Servers. Client version created with SEPM can be installed on Linux computers and servers as manged and un-manged version You can install an UN-managed or managed Symantec Endpoint Protection client directly on a Linux computer.
View this on Linux Windows and android Tutorials >



for the install.sh, I had to do   chmod 744 install.sh.  


Then it ends up actually being sudo ./install.sh -i    for the line that would install.   But that errors out.  

So it needs x86 libraries.... I found this.
"Libraries are missing" error when installing SEP Linux onto 64-bit Linux

Broadcom remove preview
"Libraries are missing" error when installing SEP Linux onto 64-bit Linux
Issue/Introduction "Libraries are missing" error when installing SEP Linux onto 64-bit Linux Example errors: [email protected]:/# ./install.sh -i Starting to install Symantec Endpoint Protection for Linux Performing pre-check... Error: Installation requires 32bits glibc library. Please install it and try again. Warning: X11 libraries are missing, GUI component will not be installed!
View this on Broadcom >



And I ran these.

On Ubuntu or Debian Linux distros:

sudo dpkg --add-architecture i386; sudo apt-get update
sudo apt-get install libc6:i386 libx11-6:i386 libdbus-1-dev:i386

Those errored out a lot too.




So I ran this first line.
sudo dpkg --add-architecture i386

That gives me this...
dpkg: error: unable to create new file '/var/lib/dpkg/arch-new': Read-only file system


I'm stuck on googling that now.  I also don't want to screw anything up.  I could start over if that happens and it's needed.


How do I get SEP installed on this Ubuntu machine?  I'm really not sure why it's saying it's a read-only file system.  I did run as sudo for that. 

For linux, I know some basics, enough to be dangerous.  I'm from Windows.  This looked doable though -- Just install some x86 libraries, run the SEP installer... done, except it's not.




rmoc's profile image
rmoc
Yeah, it's this again.  Two years later, same thing.  I never did figure it out on Ubuntu 18.04.  I wouldn't mind getting it working there too this time.



https://community.broadcom.com/symantecenterprise/communities/community-home/digestviewer/viewthread?MessageKey=8093f37c-7822-4229-9b8c-ba889591d647&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=digestviewer#bm8093f37c-7822-4229-9b8c-ba889591d647
rmoc's profile image
rmoc
It appears to have working on the 20.04 LTS Ubuntu machine.

I restarted.  That may have been it.

Then I went back and ran each line individually.  I didn't see any errors.
sudo dpkg --add-architecture i386
sudo apt-get update

sudo apt-get install libc6:i386
sudo apt-get install libx11-6:i386
sudo apt-get install libdbus-1-dev:i386

Then sudo ./install.sh -i


I do see an error on the SEP install.... "Error: No drivers are loaded into kernel."   For whatever that means....
rmoc's profile image
rmoc
Looks like it worked... mostly.

SEPM shows the Ubuntu 20.04 LTS machine.  

The machine itself shows SEP.  There's not much there at all compared to a Windows install.

I see it's not connecting to the SEPM server though for updates.  It's on a subnet that can connect to the SEPM server, but this Ubuntu machine is not on the AD. 

Although now the gui SEP on Ubuntu shows the server ip address, so it must be connecting now.   

Gui says auto-protect is malfunctioning....
rmoc's profile image
rmoc
Looks like I managed to get SEP installed, but.... From the SEPM side, the Ubuntu clients are there.  Everything's just disabled and malfunctioning according to SEPM. :/

Can't reinstall it either.  It says it will only install a newer version and stops.  I guess I could try uninstalling and reinstalling.
rmoc's profile image
rmoc
Trying an uninstall and reinstall.

https://community.broadcom.com/symantecenterprise/communities/community-home/librarydocuments/viewdocument?DocumentKey=0437cbca-647c-45e1-b3a4-c468e73fbf37&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=librarydocuments
How to uninstall Symantec Endpoint Protection client for Linux
Chetan Savade

cd /opt/Symantec/symantec_antivirus
sudo ./uninstall.sh
rmoc's profile image
rmoc
That got "Component is Malfunctioning" in SEPM for the machine for antivirus status to turn into "Disabled."  That was uninstalling and reinstalling over ssh.  Icon is still green.  Maybe it takes a while to enable everything.... It looks like it reinstalled.  Everything's just disabled on it.  So the software is installed but nothing appears to be enabled.
rmoc's profile image
rmoc
And now antivirus status says malfunctioning again, so no change really.  It does look like one Ubuntu machine did a scan though.  That's all I'm seeing for normal activity.  It just looks installed but everything disabled.
John Owens's profile image
Broadcom Employee John Owens
I would get a support case opened. Also, make sure LiveUpdate has successfully run.