Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 11 replies
  • Answers 1 answer
  • Subscribers 9 subscribers
  • Views 16565 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Anti-Virus for Linux command line option to use free version

Moerkey

Hello,

which option can I use to select the free version of the Sophos Anti-Virus tool?

I try to install it via Puppet with parameters to have an unattended install.
I use the following command line.

bash install.sh --automatic --acceptlicence --autostart=True --enableOnBoot=True --live-protection=False --update-source-type=s /opt/sophos-av

After install via puppet can not use the update function due to missing credentials, which are automatically provided when I choose the free version via interactive install.

 

sudo /opt/sophos-av/bin/savupdate
Sophos Anti-Virus is not configured to update



But I miss the option to choose the free version.

 

install.sh: Install Sophos Anti-Virus
Usage: ./install.sh [INSTALL-DIRECTORY] [OPTION] ...
OPTION:
  --help                             Display this help information
  --automatic                        Perform an automatic installation, using
                                       default or command-line options
  --acceptlicence                    Automatically accept the licence
  --autostart[=False]                Start the Sophos Anti-Virus daemons
                                       after the installation [Do not start
                                       them]
  --enableOnBoot[=False]             Start the Sophos Anti-Virus daemons
                                       on system boot [Do not start them]
  --ignore-existing-installation     Ignore any existing installation
  --live-protection[=True]           Perform in-the-cloud lookup for
                                       suspicious files
  --preferFanotify[=False]           Specify Fanotify as on-access scanning
                                       interception method
  --SavWebUsername=USERNAME          Username for accessing Sophos Anti-Virus GUI
  --SavWebPassword=PASSWORD          Password for accessing Sophos Anti-Virus GUI
  --update-source-type=TYPE          Set the type of updates:
                                       TYPE=s Direct from Sophos
                                       TYPE=o From your own server
                                       TYPE=n Disable auto-updating
  --update-source-path=ADDRESS       Enable auto-updating from specified
                                       address
  --update-source-username=USERNAME  Username for accessing update source
  --update-source-password=PASSWORD  Password for accessing update source
  --update-all-distros[=False]       Download ALL files from update source rather
                                       than just those required locally
  --update-cache-path=DIRECTORY      Directory for local update cache
  --update-period=HOURS              Update interval in hours
  --update-proxy-address=URL         Address for HTTP proxy

 

 

Is there any option?

PS: I want the GUI back. ;P

Cheers



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to QC

    Thx for the reply. Unfortunately it doesn´t help.

    I tried running it with the switches --automatic and the --sophos and --update-type=f but I get the response that the switch update-type is unknown.

     

    root@host:/opt/sophos-av-src# cd /opt/sophos-av-src && bash install.sh --automatic --sophos -update-type=f --acceptlicence --autostart=True --enableOnBoot=True --live-protection=False /opt/sophos-av
    Invalid command-line option: -update-type=f

  • 0 in reply to Moerkey

    I had a typo. I was missing a - in -update-type=f.

    But that doesn´t help eather. Now it says that the option only accepts the parameter s/o/n

     

    root@host:/opt/sophos-av-src# cd /opt/sophos-av-src && bash install.sh --automatic --sophos --update-type=f --acceptlicence --autostart=True --enableOnBoot=True --live-protection=False --update-source-type=s /opt/sophos-av
    The update type must be one of s/o/n.

     
     
    I tried it then with s buuuut then the installer wants credentials.
    root@host:/opt/sophos-av-src# cd /opt/sophos-av-src && bash install.sh --automatic --sophos --update-type=s --acceptlicence --autostart=True --enableOnBoot=True --live-protection=False --update-source-type=s /opt/sophos-av
    Updating directly from Sophos.
    Installation aborted.
    You must specify a username using --update-source-username=USERNAME for Sophos updates.
     
     
     
    I think there is a switch in the install.sh missing.

     

  • 0 in reply to Moerkey

    Hello Moerkey,

    is this for a single deployment?
    Glancing over the old threads it looks like it (these switches) might only have worked for packages built with mkinstpkg. The other option is to fetch a set of credentials manually.

    Christian

  • 0 in reply to QC

    Si senor.

    Is it possible to get the password from a file?
    The username is visibile via the config.
    Otterwise I would just add these extracted credentials as a parameterrr.

  • +1 in reply to Moerkey

    Hello Moerkey,

    Si senor
    Si = a single one-time deployment? Likely not as puppet wouldn't make much sense then. Just asking. Be aware that you can/should just use it for initial deployment. From then on it manages the updates itslef (and also you should uninstall using uninstall.sh).

    Had some time to think and I am pretty sure that you can (still) use these switches with mkinstpkg to build a package for the free version.

    As for the credentials please see this post.

    Christian

  • +1 in reply to QC


    Hey,

    I am aware of that uninstall.sh thingy.
    I am just working with execs in Puppet.

    I solved it now with the following command. I hope it helps someone else too.

     

    cd /opt/sophos-av-src && bash install.sh --automatic --acceptlicence --autostart=True --enableOnBoot=True --live-protection=False --update-source-type=s --update-source-path=sophos: --update-source-username=$(curl -s amicreds.sophosupd.com/.../creds.dat | grep ^username= | cut -d "=" -f 2) --update-source-password=$(curl -s amicreds.sophosupd.com/.../creds.dat | grep ^password= | cut -d "=" -f 2) /opt/sophos-av

    So necessary parameters are.

    --update-source-type=s
    --update-source-path=sophos:
    --update-source-username=$(curl -s amicreds.sophosupd.com/.../creds.dat | grep ^username= | cut -d "=" -f 2)
    --update-source-password=$(curl -s amicreds.sophosupd.com/.../creds.dat | grep ^password= | cut -d "=" -f 2)

    Have a nice weekend

  • +1 in reply to Moerkey

    The option required is:

    --update-free=True

  • 0 in reply to DouglasLeeder

    I can acknowledge this. The following command is working fine when you want an unattended installation with (free) updates via Sophos.

    cd /opt/sophos-av-src && bash install.sh --automatic --acceptlicence --autostart=True --enableOnBoot=True --live-protection=False --update-free=True /opt/sophos-av

Unfiltered HTML