Skip to content

DOC-257 #224

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 15 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,100 @@
# How to Switch to Manual Download and Installation for Cortex

This topic provides step-by-step instructions for switching from APT and YUM repositories to a manual process for installing and upgrading Cortex, following the [APT and YUM repositories deprecation notice](../../thehive/operations/apt-yum-repositories-end/apt-yum-deprecation-notice.md).

For instructions on performing the same process for TheHive, see [Switch to Manual Download and Installation for TheHive](../../thehive/installation/step-by-step-installation-guide.md).

!!! info "Are you concerned?"
Use this procedure if you currently install or update Cortex on-premises on Linux distributions using `apt-get install`, `apt-get upgrade`, `yum install`, or `yum update`.

You aren't affected if you use the SaaS solution or run Cortex through Docker deployments.

If you are a new user, follow the updated instructions in the [step-by-step installation guide](../installation-and-configuration/step-by-step-guide.md)

!!! warning "Prerequisites"
Before starting this procedure, check that you have installed the following tools:

* [Wget](https://www.gnu.org/software/wget/) to download package files (.deb or .rpm)
* [GPG](https://www.gnupg.org/) to verify the package’s GPG signature
* [sha256sum](https://linux.die.net/man/1/sha256sum) to check the SHA256 checksum of the downloaded package

<h2>Procedure</h2>

1. Download the package.

=== "Debian-based systems (Ubuntu, Debian)"

```bash
wget https://cortex.download.strangebee.com/cortex-x.y.z.deb
```

```bash
curl -O https://cortex.download.strangebee.com/cortex-x.y.z.deb
```

=== "RHEL-based systems (CentOS, Fedora, Rocky Linux)"

```bash
wget https://cortex.download.strangebee.com/cortex-x.y.z.rpm
```

```bash
curl -O https://cortex.download.strangebee.com/cortex-x.y.z.rpm
```

2. Verify the downloaded package.

* Match the SHA256 checksum against the value provided alongside the package link.

```bash
sha256sum cortex-latest.deb
```

* Verify the GPG signature using the public key available at XXX.

```bash
gpg --verify cortex-latest.deb.sig cortex-latest.deb
```

3. Install the package.

=== "Debian-based systems"

```bash
sudo dpkg -i cortex-x.y.z.deb
```

Then, resolve any missing dependencies:

```bash
sudo apt-get install -f
```

=== "RHEL-based systems"

```bash
sudo rpm -ivh cortex-x.y.z.rpm
```

4. Remove the old repository to avoid stale configurations.

=== "Debian-based systems"

```bash
sudo rm /etc/apt/sources.list.d/strangebee.list
sudo apt update
```

=== "RHEL-based systems"

```bash
sudo yum-config-manager --disable strangebee
```

Optionally, remove the repository file:

```bash
sudo rm /etc/yum.repos.d/strangebee.repo
```

<h2>Next steps</h2>
Original file line number Diff line number Diff line change
@@ -0,0 +1,38 @@
# APT and YUM Repositories Deprecation Notice

This topic explains the deprecation of APT and YUM repositories for TheHive and Cortex installations and upgrades.

Starting July 31, 2025, TheHive and Cortex will no longer be distributed via APT and YUM packages. Instead, installation and upgrades will be performed through direct downloads using tools like cURL or Wget followed by manual installation.

## Why APT and YUM repositories are being deprecated

Over time, several incidents have affected the availability of packages in our APT and YUM repositories, leading to unexpected downtime for users relying on these installation methods.

To address these issues and enhance reliability, we are transitioning to a unified, highly available distribution system. This new system supports all package formats (.deb and .rpm) and architectures (AMD64 and ARM64), providing a consistent experience across Linux distributions. Our site uses HTTPS, and every package comes with a [SHA256 checksum](https://linux.die.net/man/1/sha256sum) and [GPG](https://www.gnupg.org/) signature.

Key benefits include:

* Improved availability: Packages are served directly from our official, highly available download servers, eliminating dependencies on third-party repositories and reducing delays or interruptions.
* Simplified installation: A unified process across all supported Linux distributions streamlines package retrieval and installation.
* Faster updates: Users gain quicker access to new versions and security patches, ensuring their environments remain secure and up to date.

## Who is affected

This change applies to users deploying TheHive and Cortex on-premises on Linux distributions via package installations. It doesn't affect those using the SaaS solution or running TheHive and Cortex through Docker deployments.

## Timeline

* Manual download and installation become available starting July 10, 2025.
* APT and YUM repositories become unavailable starting July 31, 2025.
* The domain https://download.thehive-project.org/ becomes unavailable starting XXX.

## What you should do

If you are a new user, follow the updated instructions in [TheHive](../../installation/step-by-step-installation-guide.md) and [Cortex](../../../cortex/installation-and-configuration/step-by-step-guide.md) step-by-step installation guides.

If you currently install or update TheHive and Cortex using `apt-get install`, `apt-get upgrade`, `yum install`, or `yum update`, switch to manual package downloads and installations. For detailed instructions, see [Switch to Manual Download and Installation for TheHive](switch-to-manual-download-installation-thehive.md) and [Switch to Manual Download and Installation for Cortex](switch-to-manual-download-installation-thehive.md). Continuing with the current installation will allow the application to run but will prevent it from receiving updates.

<h2>Next steps</h2>

* [Switch to Manual Download and Installation for TheHive](switch-to-manual-download-installation-thehive.md)
* [Switch to Manual Download and Installation for Cortex](../../../cortex/operations/switch-to-manual-download-installation-cortex.md)
Original file line number Diff line number Diff line change
@@ -0,0 +1,100 @@
# How to Switch to Manual Download and Installation for TheHive

This topic provides step-by-step instructions for switching from APT and YUM repositories to a manual process for installing and upgrading TheHive, following the [APT and YUM repositories deprecation notice](apt-yum-deprecation-notice.md).

For instructions on performing the same process for Cortex, see [Switch to Manual Download and Installation for Cortex](../../../cortex/operations/switch-to-manual-download-installation-cortex.md).

!!! info "Are you concerned?"
Use this procedure if you currently install or update TheHive on-premises on Linux distributions using `apt-get install`, `apt-get upgrade`, `yum install`, or `yum update`.

You aren't affected if you use the SaaS solution or run TheHive through Docker deployments.

If you are a new user, follow the updated instructions in the [step-by-step installation guide](../../installation/step-by-step-installation-guide.md).

!!! warning "Prerequisites"
Before starting this procedure, check that you have installed the following tools:

* [Wget](https://www.gnu.org/software/wget/) to download package files (.deb or .rpm)
* [GPG](https://www.gnupg.org/) to verify the package’s GPG signature
* [sha256sum](https://linux.die.net/man/1/sha256sum) to check the SHA256 checksum of the downloaded package

<h2>Procedure</h2>

1. Download the package.

=== "Debian-based systems (Ubuntu, Debian)"

```bash
wget https://thehive.download.strangebee.com/thehive-x.y.z.deb
```

```bash
curl -O https://thehive.download.strangebee.com/thehive-x.y.z.deb
```

=== "RHEL-based systems (CentOS, Fedora, Rocky Linux)"

```bash
wget https://thehive.download.strangebee.com/thehive-x.y.z.rpm
```

```bash
curl -O https://thehive.download.strangebee.com/thehive-x.y.z.rpm
```

2. Verify the downloaded package.

* Match the SHA256 checksum against the value provided alongside the package link.

```bash
sha256sum thehive-latest.deb
```

* Verify the GPG signature using the public key available at XXX.

```bash
gpg --verify thehive-latest.deb.sig thehive-latest.deb
```

3. Install the package.

=== "Debian-based systems"

```bash
sudo dpkg -i thehive-x.y.z.deb
```

Then, resolve any missing dependencies:

```bash
sudo apt-get install -f
```

=== "RHEL-based systems"

```bash
sudo rpm -ivh thehive-x.y.z.rpm
```

4. Remove the old repository to avoid stale configurations.

=== "Debian-based systems"

```bash
sudo rm /etc/apt/sources.list.d/strangebee.list
sudo apt update
```

=== "RHEL-based systems"

```bash
sudo yum-config-manager --disable strangebee
```

Optionally, remove the repository file:

```bash
sudo rm /etc/yum.repos.d/strangebee.repo
```

<h2>Next steps</h2>
6 changes: 6 additions & 0 deletions mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -404,6 +404,9 @@ nav:
- 'Docker Compose': thehive/operations/backup-restore/restore/docker-compose.md
- 'Cloud Infrastructure': thehive/operations/backup-restore/restore/cloud.md
- 'Restore hot backups': thehive/operations/backup-restore/restore/restore-hot-backup.md
- 'End of APT and YUM repositories':
- 'Deprecation Notice': thehive/operations/apt-yum-repositories-end/apt-yum-deprecation-notice.md
- 'Switch to Manual Download and Installation': thehive/operations/apt-yum-repositories-end/switch-to-manual-download-installation-thehive.md
- 'Index Management': thehive/operations/change-index.md
- 'Troubleshooting Guide': thehive/operations/troubleshooting.md
- 'Monitoring Setup': thehive/operations/monitoring.md
Expand Down Expand Up @@ -792,6 +795,9 @@ nav:
- 'Backup & Restore': 'cortex/operations/backup-restore.md'
- 'Analyzers/Responders input and output': 'cortex/operations/input-output.md'
- 'Upgrade to Cortex 3.1': 'cortex/operations/upgrade_to_cortex_3_1_and_es7_x.md'
- 'End of APT and YUM repositories':
- 'Deprecation Notice': thehive/operations/apt-yum-repositories-end/apt-yum-deprecation-notice.md
- 'Switch to Manual Download and Installation': cortex/operations/switch-to-manual-download-installation-cortex.md
- 'API':
- 'API Guide': './cortex/api/api-guide.md'
- 'How to create an Analyzer' : './cortex/api/how-to-create-an-analyzer.md'
Expand Down