mirror of https://github.com/MISP/MISP
104 lines
3.5 KiB
Plaintext
104 lines
3.5 KiB
Plaintext
# In general, updating MISP between point releases (for exampe 2.4.50 -> 2.4.53) happens with one of the following two options (both are to be executed as root):
|
|
|
|
# Option 1: To update to the latest commit from the 2.4 branch simply pull the latest commit
|
|
cd /var/www/MISP
|
|
git pull origin 2.4
|
|
git submodule update --init --recursive
|
|
|
|
# Option 2: If you want to stick to a point release instead of pulling the latest commit directly:
|
|
cd /var/www/MISP
|
|
git fetch
|
|
git checkout tags/$(git describe --tags `git rev-list --tags --max-count=1`)
|
|
git submodule update --init --recursive
|
|
|
|
# If you would like to upgrade from a minor version to another, look at the UPGRADE.txt file instead (such as 2.3.142 -> 2.4.13)
|
|
|
|
# If for any reason something goes wrong with the above instructions, walk through the following manual upgrade
|
|
|
|
# 1. Update the MISP code to the latest hotfix.
|
|
As user root, do the following:
|
|
|
|
cd /var/www/MISP
|
|
git fetch
|
|
git checkout tags/$(git describe --tags `git rev-list --tags --max-count=1`)
|
|
# if the last shortcut doesn't work, specify the latest version manually
|
|
# example: git checkout tags/v2.4.XY
|
|
# the message regarding a "detached HEAD state" is expected behaviour
|
|
# (you only have to create a new branch, if you want to change stuff and do a pull request for example)
|
|
|
|
|
|
# 2. Update CakePHP to the latest supported version (if for some reason it doesn't get updated automatically with git submodule)
|
|
|
|
cd /var/www/MISP
|
|
git submodule update --init --recursive
|
|
|
|
|
|
# 3. Update Mitre's STIX and its dependencies
|
|
|
|
cd /var/www/MISP/app/files/scripts/
|
|
rm -rf python-cybox
|
|
rm -rf python-stix
|
|
sudo -u www-data git clone https://github.com/CybOXProject/python-cybox.git
|
|
sudo -u www-data git clone https://github.com/STIXProject/python-stix.git
|
|
cd /var/www/MISP/app/files/scripts/python-cybox
|
|
python3 setup.py install
|
|
cd /var/www/MISP/app/files/scripts/python-stix
|
|
python3 setup.py install
|
|
|
|
|
|
# 4. Update mixbox to accomodate the new STIX dependencies:
|
|
cd /var/www/MISP/app/files/scripts/
|
|
rm -rf mixbox
|
|
sudo -u www-data git clone https://github.com/CybOXProject/mixbox.git
|
|
cd /var/www/MISP/app/files/scripts/mixbox
|
|
python3 setup.py install
|
|
|
|
|
|
# 5. install PyMISP
|
|
cd /var/www/MISP/PyMISP
|
|
python3 setup.py install
|
|
|
|
|
|
# 6. For RHEL/CentOS: enable python3 for php-fpm
|
|
|
|
echo 'source scl_source enable rh-python36' >> /etc/opt/rh/rh-php71/sysconfig/php-fpm
|
|
sed -i.org -e 's/^;\(clear_env = no\)/\1/' /etc/opt/rh/rh-php71/php-fpm.d/www.conf
|
|
systemctl restart rh-php71-php-fpm.service
|
|
|
|
|
|
# 7. Update CakeResque and its dependencies
|
|
|
|
cd /var/www/MISP/app
|
|
|
|
# Edit composer.json so that cake-resque is allowed to be updated
|
|
# "kamisama/cake-resque": ">=4.1.2"
|
|
|
|
vim composer.json
|
|
php composer.phar self-update
|
|
# if behind a proxy use HTTP_PROXY="http://yourproxy:port" php composer.phar self-update
|
|
php composer.phar update
|
|
|
|
|
|
# To use the scheduler worker for scheduled tasks, do the following:
|
|
cp -fa /var/www/MISP/INSTALL/setup/config.php /var/www/MISP/app/Plugin/CakeResque/Config/config.php
|
|
|
|
|
|
# 8. Make sure all file permissions are set correctly
|
|
|
|
find /var/www/MISP -type d -exec chmod g=rx {} \;
|
|
chmod -R g+r,o= /var/www/MISP/
|
|
chown -R www-data:www-data /var/www/MISP/
|
|
|
|
|
|
# 9. Restart the CakeResque workers
|
|
|
|
su - www-data -s /bin/bash -c 'bash /var/www/MISP/app/Console/worker/start.sh'
|
|
|
|
# You can also do this using the MISP application by navigating to the workers tab in the server settings and clicking on the "Restart all workers" button.
|
|
|
|
|
|
# 10. Add any new dependencies that might have been added since you've last updated (shown below)
|
|
|
|
# 11. Add requirements for the pubsub optional feature
|
|
pip install pyzmq
|