I've been updating wazuh from sources recently on my servers because 4.7.5 is so old. The current release is 4.9.1 and I've been to compile that on freebsd-14.1p5 on amd64 but I've not been to get it to compile on arm64 as the compile dies with: rootcheck/os_string.c:191:20: error: use of undeclared identifier '__LDPGSZ' I'm really wondering if it's better that the ports tree gets updated for the more recent version? Thanks, Ian
^Triage: assign to maintainer.
Hello, what package are you trying compile? agent or manager/server? I guess you were compiling wazuh-agent. The main problem with wazuh is it seems like wazuh guys will remove FreeBSD compatibility/support on future release (https://github.com/wazuh/wazuh/issues/24037). I guess it can be on 5.x. I have sent some patch files to wazuh project for improve freeBSD support but they were ignored for a long time even one of them was marked like not planning. Take a look at https://github.com/wazuh/wazuh/issues/23387 and https://github.com/wazuh/wazuh/pull/19679 I'm evaluating if I must deprecated wazuh ports on FreeBSD. I don't want to spend much time on them if wazuh guys are not interested on include FreeBSD support. Maybe the best is search another SIEM alternative
What a shame... It's old OSSEC based I know but it's done so well over the years. I guess I just won't build any more arm64 boxes until I know what I'm going to do next. Apple silicon is just the platform I'm eventually going to move to over time to get away from intel.
(In reply to Ian Dickens from comment #3) And int that vein - it means using UTM (which can do emulation although that kinda sucks but it can do it). Ah, the other choice is I just abandon all FreeBSD servers in favor of something more supported by a SIEM and just move on - but I dunno, crossroads now.
(In reply to Ian Dickens from comment #3) If your problem only is aarch64-agent, you can apply the following patch: https://cgit.freebsd.org/ports/tree/security/wazuh-agent/files/patch-src_rootcheck_os__string.c on 4.9.1 Btw, I'm trying to update all of wazuh-* ports to 4.9.1, if you want I can share wazuh-agent port files
(In reply to Jose Alonso Cardenas Marquez from comment #5) That worked. I was able to compile from sources. Thanks a bunch, Ian
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=96a877888897b05b1bb5e8007ed845a0555d4d72 commit 96a877888897b05b1bb5e8007ed845a0555d4d72 Author: Jose Alonso Cardenas Marquez <acm@FreeBSD.org> AuthorDate: 2024-12-03 01:49:45 +0000 Commit: Jose Alonso Cardenas Marquez <acm@FreeBSD.org> CommitDate: 2024-12-03 01:49:45 +0000 security/wazuh-*: Update to 4.9.2 - wazuh-manager: Remove support for freebsd13-aarch64 - wazuh-manager: Cache files were generated from python3.11 instead of python3.10 - wazuh-manager: Remove obsolete patch files - wazuh-dashboards : Use opensearch-dashboards230 instead of opensearch-dashboards210 ChangeLog at: https://github.com/wazuh/wazuh/releases https://github.com/wazuh/wazuh-dashboard-plugins/releases PR: 282160 Reported by: Ian Dickens <ian at south-border.com> security/wazuh-agent/Makefile | 5 +- security/wazuh-agent/distinfo | 82 +- security/wazuh-agent/files/patch-src-Makefile | 67 +- .../patch-src-shared_modules-utils_stringHelper.h | 34 +- .../patch-src-shared_modules-utils_timeHelper.h | 22 +- security/wazuh-agent/pkg-plist | 49 +- security/wazuh-dashboard/Makefile | 10 +- security/wazuh-dashboard/distinfo | 10 +- security/wazuh-dashboard/pkg-plist | 2329 ++-- security/wazuh-indexer/Makefile | 4 +- security/wazuh-indexer/distinfo | 6 +- security/wazuh-manager/Makefile | 179 +- security/wazuh-manager/distinfo | 132 +- .../wazuh-manager/files/patch-freebsd-12 (gone) | 121 - .../files/patch-issue40422_issue40423 (gone) | 206 - .../patch-src-shared_modules-utils_stringHelper.h | 34 +- .../patch-src-shared_modules-utils_timeHelper.h | 22 +- security/wazuh-manager/files/patch-src_Makefile | 90 +- .../patch-src_external_cpython_Makefile.pre.in | 69 +- ...al_cpython_Modules___decimal___decimal.c (gone) | 20 - .../files/patch-src_external_cpython_configure | 12 +- ...patch-src_external_rocksdb_env_io_posix.h (new) | 11 + ...ared__modules_http-request_CMakeLists.txt (new) | 21 + ...modules_indexer__connector_CMakeLists.txt (new) | 11 + ...c_shared__modules_keystore_CMakeLists.txt (new) | 19 + ...src_shared__modules_router_CMakeLists.txt (new) | 19 + ...c_shared__modules_utils_socketWrapper.hpp (new) | 14 + ...d__modules_utils_xz_fileDataCollector.hpp (new) | 11 + ...les_vulnerability__scanner_CMakeLists.txt (new) | 28 + ...sttool_databaseFeedManager_argsParser.hpp (new) | 12 + ...__scanner_testtool_scanner_argsParser.hpp (new) | 12 + ...nner_testtool_wazuhDBQuery_CMakeLists.txt (new) | 8 + security/wazuh-manager/files/wazuh-manager.in | 2 + security/wazuh-manager/pkg-plist | 12129 +++++++++++++------ security/wazuh-server/Makefile | 5 +- security/wazuh-server/distinfo | 18 +- 36 files changed, 10032 insertions(+), 5791 deletions(-)