The system/package dataset fails on Fedora 31 and newer because it cannot open librpm.
ERROR [package] package/package.go:246 failed to get packages: error getting RPM packages: unable to open a handle to the library
It uses dlopen, but does not try to load librpm.so.9 which is what Fedora 31 has.
|
func openLibrpm() (*librpm, error) { |
|
var librpmNames = []string{ |
|
"librpm.so", // with rpm-devel installed |
|
"librpm.so.8", // Fedora 29 |
|
"librpm.so.3", // CentOS 7 |
|
"librpm.so.1", // CentOS 6 |
|
|
|
// Following for completeness, but not explicitly tested |
|
"librpm.so.7", |
|
"librpm.so.6", |
|
"librpm.so.5", |
|
"librpm.so.4", |
|
"librpm.so.2", |
|
} |
As a workaround, installing rpm-devel will create symlink to fix the issue /usr/lib64/librpm.so -> librpm.so.9.0.1.
For confirmed bugs, please report:
- Version: v7.7.0, v7.8.0
- Operating System: Fedora 31
The system/package dataset fails on Fedora 31 and newer because it cannot open librpm.
ERROR [package] package/package.go:246 failed to get packages: error getting RPM packages: unable to open a handle to the libraryIt uses dlopen, but does not try to load librpm.so.9 which is what Fedora 31 has.
beats/x-pack/auditbeat/module/system/package/rpm_linux.go
Lines 207 to 220 in 5e69e25
As a workaround, installing
rpm-develwill create symlink to fix the issue/usr/lib64/librpm.so -> librpm.so.9.0.1.For confirmed bugs, please report: