From 9abc3a4b0a323cdd2617be673847422ad8d39fb5 Mon Sep 17 00:00:00 2001 From: iwitz Date: Fri, 15 Feb 2019 10:16:52 +0100 Subject: [PATCH] add: rhel installation instructions --- README.md | 38 +++++++++++++++++++++++++++++++++++++- 1 file changed, 37 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index b60accd..ee4f2f8 100644 --- a/README.md +++ b/README.md @@ -100,7 +100,7 @@ sudo sed -i -e '$i \sudo -u www-data /var/www/MISP/venv/bin/misp-modules -l 127. /var/www/MISP/venv/bin/misp-modules -l 127.0.0.1 -s & #to start the modules ~~~~ -## How to install and start MISP modules? +## How to install and start MISP modules on Debian-based distributions ? ~~~~bash sudo apt-get install python3-dev python3-pip libpq5 libjpeg-dev tesseract-ocr imagemagick @@ -115,6 +115,42 @@ sudo sed -i -e '$i \sudo -u www-data /var/www/MISP/venv/bin/misp-modules -l 127. /var/www/MISP/venv/bin/misp-modules -l 127.0.0.1 -s & #to start the modules ~~~~ +## How to install and start MISP modules on RHEL-based distributions ? +As of this writing, the official RHEL repositories only contain Ruby 2.0.0 and Ruby 2.1 or higher is required. As such, this guide installs Ruby 2.2 from the [SCL](https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.2_release_notes/chap-installation#sect-Installation-Subscribe) repository. +~~~~bash +yum install rh-ruby22 +cd /var/www/MISP +git clone https://github.com/MISP/misp-modules.git +cd misp-modules +scl enable rh-python36 ‘python3 –m pip install cryptography’ +scl enable rh-python36 ‘python3 –m pip install -I -r REQUIREMENTS’ +scl enable rh-python36 ‘python3 –m pip install –I .’ +scl enable rh-ruby22 ‘gem install asciidoctor-pdf –pre’ +~~~~ +Create the service file /etc/systemd/system/misp-workers.service : +~~~~ +[Unit] +Description=MISP's modules +After=misp-workers.service + +[Service] +Type=simple +User=apache +Group=apache +ExecStart=/usr/bin/scl enable rh-python36 rh-ruby22 ‘/opt/rh/rh-python36/root/bin/misp-modules –l 127.0.0.1 –s’ +Restart=always +RestartSec=10 + +[Install] +WantedBy=multi-user.target +~~~~ +The `After=misp-workers.service` must be changed or removed if you have not created a misp-workers service. +Then, enable the misp-modules service and start it ; +~~~~bash +systemctl daemon-reload +systemctl enable --now misp-modules +~~~~ + ## How to add your own MISP modules? Create your module in [misp_modules/modules/expansion/](misp_modules/modules/expansion/), [misp_modules/modules/export_mod/](misp_modules/modules/export_mod/), or [misp_modules/modules/import_mod/](misp_modules/modules/import_mod/). The module should have at minimum three functions: