.. _install-binary-rpm:

RPM Installation ################

Using the Fedora COPR system, the OISF provides Suricata packages for Fedora, Red Hat Enterprise Linux, and Enterprise Linux rebuilds.

The benefit of using the OISF maintained COPR package repositories is that the OISF maintains packages for all non-EOL Suricata versions for each distribution version. For example, the OISF maintains Suricata 7 and Suricata 8 packages for RHEL 9 and 10.

Installing From Package Repositories

.. note:: Instructions in the following sections require sudo to be installed.

Enterprise Linux and Rebuilds

.. code-block:: none

sudo dnf install epel-release dnf-plugins-core sudo dnf copr enable @oisf/suricata-8.0 sudo dnf install suricata

Fedora

.. code-block:: none

sudo dnf install dnf-plugins-core
sudo dnf copr enable @oisf/suricata-8.0
sudo dnf install suricata

Additional Notes for RPM Installations

• Suricata is pre-configured to run as the suricata user.

• Command line parameters such as providing the interface names can be configured in /etc/sysconfig/suricata.

• Users can run suricata-update without being root provided they are added to the suricata group.

• Directories:

  • /etc/suricata: Configuration directory
  • /var/log/suricata: Log directory
  • /var/lib/suricata: State directory rules, datasets.

Starting Suricata On-Boot

The Suricata RPMs are configured to run from Systemd.

.. note:: The following instructions require sudo to be installed.

To start Suricata::

sudo systemctl start suricata

To stop Suricata::

sudo systemctl stop suricata

To have Suricata start on-boot::

sudo systemctl enable suricata

To reload rules::

sudo systemctl reload suricata

After Installation

After installing you can proceed to the :ref:Basic setup.