seplpkg (SEP Linux Packager tool)

Utility for creating a full installable package for Linux for a given Symantec Endpoint Protection Linux agent.

Intro

The seplpkg tool makes it easy to create an full or offline LinuxInstaller package for a given platform or for all Linux distros.

This tool currently runs on Linux and Windows.

Use Cases

The following use case scenarios are supported:

  1. List latest agent packages for SEP Linux
  2. Download packages and create a full SEP Linux Installer for an unmanaged SEPM all platforms, which can be installed behind a firewall.
  3. Download packages and create a full SEP Linux Installer given a Cloud or SEPM Linux Installer stub on all platforms, which can be installed behind a firewall.

Download

Linux: seplpkg-linux-amd64 (version 1.0.2.69)

Windows: seplpkg-windows-amd64.exe (version 1.0.2.69)

Usage

For a general overview of seplpkg commands, run seplpkg --help.

# seplpkg [required_args] [optional_args] cmd 

  Required arguments:
    --platform        Specify Linux platform/distro (see Product and 
                      Platforms section below). In addition, a list can 
                      be provided seperated by space with double quotes,
                      or "all" to select all supported platforms.
                      (Ex: --platform "rhel7 rhel8" or --platform all)

  Optional arguments:
    --product         Specify SEP Linux product (i.e. 14.3ru4, 14.3ru5, 14.3ru6, 14.3ru8, 14.3ru9)
                      By default the latest release is selected (14.3ru9)
    --outdir          Specify an output directory. By default the output 
                      directory "SEPLPackage" is created in the 
                      current working directory.
    --download_retry_count <count>
                      Number of retry attempts for download (with incremental delay between attempts)
    --verbose         Verbose messages
    --version         Print version and exit
    --help            Show the help

  Commands:
    ls|list           List latest available packges
    dl|download       Generate an installer for an unmanaged SEPM agent.
    rp|repackage <LinuxInstaller>
                      Requires Linux Installer stub downloaded 
                      from SEPM or Cloud management server to the current working directory.

Products and Platforms

Note: The platform and product names are matched case insensitive.

Available SEP Product Releases

ReleaseAliases
SEP14.3RU4 14.3RU4, RU4
SEP14.3RU5 14.3RU5, RU5
SEP14.3RU6 14.3RU6, RU6
SEP14.3RU8 14.3RU8, RU8
SEP14.3RU9 14.3RU9, RU9

Available Platforms

PlatformAliases
amazonlinux2023 amzn2023, al2023
amazonlinux2 amzn2, al2
debian10 deb10
rhel7 el7, redhat7, centos7
rhel8 el8, redhat8, centos8, rocky8
rhel9 el9, redhat9, rocky9
sles15 suse15, sle15
ubuntu16 ub16
ubuntu18 ub18
ubuntu20 ub20
ubuntu22 ub22, kubuntu22
ubuntu24 ub24, kubuntu24

Older Platforms supported by prior releases

PlatformAliasesReleases
rhel6 el6, redhat6, centos6RU4, RU5, RU6, RU8
sles12 suse12, sle12RU4, RU5, RU6, RU8
debian9 deb9RU4, RU5, RU6, RU8
ubuntu14 ub14RU4

Examples

  1. List all the package versions available for 14.3RU9:

    seplpkg --platform all --product 14.3ru9 ls

  2. Create an unmanaged 14.3ru8 package for RHEL7 and RHEL8:

    seplpkg --platform "rhel7 rhel8" --product 14.3ru8 dl

  3. After downloading the LinuxInstaller stub from SEP Management server or Cloud Management server, create a fully installable package for Ubuntu 16, 18 and 20 (i.e. repackage):

    seplpkg --platform "ub16 ub18 ub20" --product RU8 --outdir /root/pkg rp LinuxInstallerStub

    • This command would download installers to the folder /root/pkg for all requsted Linux platforms. In addition, customer specific data from the STUB will be extracted and injected to each of the downloaded installer so the resulting installers in /root/pkg folder would enroll with respected management servers after installation.

  4. Create an unmanaged SEP 14.3ru8 client package for RHEL9:

    seplpkg --platform rhel9 --product 14.3ru8 download

    • Import the sylink.xml post installtion to enroll and be managed by the SEPM

      /opt/Symantec/sdcssagent/AMD/tools/sav manage -i sylink.xml

  5. Installing a downloaded package:

    seplpkg --platform "rhel7" --product RU8 --outdir /root/pkg repackage LinuxInstallerStub

    • The above command would download an installer for RedHat Enterprise Linux 7 to the folder /root/pkg with the file name "LinuxInstaller.rhel7.sep14.3ru8.<timestamp>". Copy this file to a system which has access to the Internet and run the installer. At the end of installation the installer would check with the Broadcom software repsitory on the Internet for software updates and if a newer version is available , it will download the latest version and update the product.

      /root/pkg/LinuxInstaller.rhel7.sep14.3ru8.<timestamp>

    • If the system is in an isolated environment without access to the Internet, run the installer with following option. This would install SEP Linux 14.3 RU8 without checking for software update.

      /root/pkg/LinuxInstaller.rhel7.sep14.3ru8.<timestamp> -- -g