Updating the kernel modules for the Symantec Agent for Linux
(For 14.3 RU1 and later)
Whenever a new Linux kernel update is released, the Symantec Agent for Linux for that platform needs to be updated to support the new kernel. To make the process more efficient, the kernel modules of the Linux agent can now be updated by using the Linux repository.
Ensure that the agents can connect to the Symantec repository server (https://linux-repo.us.securitycloud.symantec.com/) to download the kernel module updates.
Whenever you run the
yum updatecommand on a RHEL, Amazon Linux, Oracle Linux, or CentOS system, the command also looks for new agent packages. If an update is available, the latest kernel module is downloaded and the agent is updated automatically. After the kernel module is updated, you must restart the instance for the update to take effect.
Alternatively, you can update the agent kernel module by running the following command in the instance. Open a terminal window with root privileges, navigate to
/usr/lib/symantec/and run the following command:
For the Ubuntu systems, type the following commands:
- To refresh and update local package database:sudo apt-get cleansudo apt-get update
- To upgrade to the latest kernel module:/usr/lib/symantec/installagent.sh --update-kmodSuperuser privileges are required to perform this action.
In a restricted environment with no Internet connection, you can update the kernel modules in one of the following ways:
- Manually transfer the latest KMOD package to a system that has no Internet connection, attach the KMOD package to the LinuxInstaller, and then run the LinuxInstaller.
- On a system that has Internet connection, download the KMOD package../LinuxInstaller -d
- Manually copy and paste the KMOD package to the agent that you want to upgrade.
- List the attached packages../LinuxInstaller -l
- Attach the new KMOD package to the LinuxInstaller.tar czf - [KMOD-package-name] >> LinuxInstaller
- Make sure that the new KMOD package is included in the list of attached packages../LinuxInstaller -l
- Run the installer to update the kernel modules../LinuxInstaller -- --update-kmod
- Set up a local repository and edit the repository settings so that the agent uses the local repository instead of the default Symantec repository.
- Set up the local repository that hosts the KMOD packages.For information about how to create a local repository, refer to documentation of the respective Linux distribution that you are using.
- On the client computer, run the following command to redirect it to use the local repo:./LinuxInstaller --local-repo <localrepo_url>Example of the URL:--local-repo 'http://<repo_ip_or_hostname:<port_optional>/sep_linux'
- To update the KMOD, run:./LinuxInstaller -- --update-kmod
If you update the operating system kernel modules, you must also update the corresponding kernel module update for the client. Without the compatible kernel modules, the client may not work properly and some features may be disabled.