OISF官方suricata自动测试里的部署流程（Centos7）

cho "keepcache=1" >> /etc/yum.conf

yum -y install epel-release

yum -y install \

autoconf \

automake \

cargo \

diffutils \

file-devel \

gcc \

gcc-c++ \

jansson-devel \

jq \

lua-devel \

libtool \

libyaml-devel \

libnfnetlink-devel \

libnetfilter_queue-devel \

libnet-devel \

libcap-ng-devel \

libevent-devel \

libmaxminddb-devel \

libpcap-devel \

lz4-devel \

make \

nss-devel \

pcre2-devel \

pkgconfig \

python36-PyYAML \

rust \

sudo \

which \

zlib-devel

env:

DEFAULT_LIBHTP_REPO: GitHub - OISF/libhtp: LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces.

DEFAULT_LIBHTP_BRANCH: 0.5.x

DEFAULT_LIBHTP_PR:

DEFAULT_SU_REPO: GitHub - OISF/suricata-update: The tool for updating your Suricata rules.

DEFAULT_SU_BRANCH: master

DEFAULT_SU_PR:

DEFAULT_SV_REPO: GitHub - OISF/suricata-verify: Suricata Verification Tests - Testing Suricata Output

DEFAULT_SV_BRANCH: master

DEFAULT_SV_PR:

DEFAULT_CFLAGS: -Wall -Wextra -Werror -Wno-unused-parameter -Wno-unused-function

DEBIAN_FRONTEND: noninteractive

RUST_VERSION_KNOWN: 1.62.0

RUST_VERSION_MIN: 1.58.1

autoreconf -fv --install （autogen.sh就行）

CFLAGS="${DEFAULT_CFLAGS}" ./configure

(别忘了拷贝libhtp，还有 cargo install --force cbindgen)

make -j2

make install

make install-conf

make distcheck #巨慢，不要执行

python3 ./suricata-verify/run.py -q

(需要自己下载)