kurco

Done I sent you a PM

Hi eornate,
it look like enhanced security is enabled and package manager is unable to check GPG keys. Our package isn't signed and therefore installation is failing. You should be able to install efs manually, but you need to skip gpg check. 
 
sudo dnf install --nogpgcheck ./efs-10.2.41.0.x86_64.rpm Regards,
Kurco

We updated to 10.2.2.0 and it is running now. Thank you very much

Thank you for this information. I will talk to my tech support and get back to you.

Alright
ii eea 10.0.3.0 amd64 ESET Endpoint Antivirus  

Thank you @kurco for your swift response and assistance. This has now been resolved.
 
For those that have a similar issue, you can resolve it by following this article https://support.eset.com/en/kb8571-eset-service-fails-to-start-when-installing-eset-server-security-or-eset-endpoint-antivirus-for-linux-on-ubuntu-2204-or-mint-21?ref=esf.

Hi BlueBear,
Confd is part of Endpoint Antivirus, if you are getting this error, there is something wrong with your installation. Could you please share logs? without them it's really hard to tell what is wrong. 
Regards
Kurco

yes, please try it. Most probably it will have problems to collect everything (because of confd issue), but for now, it should be enough. 
 

I have sent the logs as requested via a PM. 
 
Thanks

Thanks Kurco! That worked out, thank you very much!

Without any system/product logs, it is really hard to identify what is going on. Is it possible to share at least product event log (sudo /opt/eset/eea/sbin/lslog -ec)?  

Hi,
from provided logs, I can see that you have enabled secure boot, therefore you need to sign kernel modules, before they can be loaded into system. (Secure boot | ESET Endpoint Antivirus for Linux | ESET Online Help)
 
 
 

Hi,
most probably you are experiencing issue with missing compiler. Ubuntu latest released kernel was compiled with gcc-12, but this version isn't by default installed there and it results into issue during our kernel modules compilation. 
Please try to install gcc-12 package (sudo apt install gcc-12) and start again our service. 
Regards,
Kurco

There was no need to remove (during remove products are always deactivated) and install eea again. After installation of gcc-12, it is enough to try again starting our service sudo systemctl start eea. 

Thank you, Kurco. You're lightning fast.
This helped.
this is the command order and installation file:
sudo apt install gcc-12
sudo apt-get remove eea
Then download the installer from eset and installed the AV with:
sudo sh ./eeau.x86_64.bin
After the reinstall activation was off.

Hi,
most probably you are experiencing issue with missing compiler. Ubuntu latest released kernel was compiled with gcc-12, but this version isn't by default installed there and it results into issue during our kernel modules compilation. 
Please try to install gcc-12 package (sudo apt install gcc-12) and start again our service. 
Regards,
Kurco

Hi,
Could you please try to add Excluded IPs in Web Access Protection configuration for localhosts (127.0.0.1 & ::1)? Looks like WAP is interfering with Android Emulator local connections. There is no firewall feature in Endpoint Antivirus for linux. 
Regards,
Kurco

Hey, thanks so much! I was wondering if that wasn't the solution. 💫

Hi eab,
Endpoint service fails to start, because of error in module compilation. This is caused by missing 'gcc-12', installation of this package should resolve this issue. Please try to install gcc-12 and start eea service again. 
"Compilers differs warning" tries to tell you, that there are differences in version of compiler used to build kernel and currently found compiler. There should be no impact on Endpoint functionalities if module compilation is successful. 
Regards,
Kurco

@kurco we already have a ticket open with our local ESET supplier. We are preparing the necessary logs they requested. Will keep you posted ... 

Hi,
this looks like some issue during regular update of modules, they are triggered each hour. Would it be possible to send logs for further investigation? (Collect logs | ESET File Security for Linux | ESET Online Help). On first sight, I would tell, that product has issue to create temp file during download of latest modules. Maybe you could check, if there is enough space and also if there aren't some special write restrictions. 
Regards,
Kurco

hi @kurco
thanks for the information

Hi,
to see exit codes you need to use "echo $?", this is the standard way to get it from shell. However, it has been wrongly described in our documentation, we will fix it right away, thanks for pointing that out to us. 
Regards,
Kurco

Hi obee,
yes, it is possible to install it on a machine without internet access, but you need to ensure, that all dependencies are already installed there. 
Dependencies could be checked by dumping deb/rmp packages from bin installer and then get info from packages. For example on Debian like this:

 
# dump packages user@machine:~$$ ./efs.x86_64.bin -n -y Extracting: efs-8.1.813.0.x86_64.rpm efs-8.1.813.0.x86_64.deb .... # get package info and grep dependencies user@machine:~$ dpkg -I efs-8.1.813.0.x86_64.deb | grep Depends Depends: gcc, make, perl, openssl, linux-headers-generic|linux-headers-amd64, linux-headers-generic-hwe-20.04|linux-headers-generic-hwe-18.04|linux-headers-generic-hwe-16.04|linux-headers-amd64, libelf-dev|libelf-devel|elfutils-libelf-devel, libudev1, cron|cronie|systemd-cron, libsqlite3-0  
Regards,
Peter 

Hi Sebastian,
cls is currently no longer in active development and I can't guarantee you, that it will be present in further releases of ESS. I understand, that it is more convenient way, when used in scripts. But I would rather prefer executing odscan with custom profiles (containing predefined settings) and if needed parse scan logs. 
Regards,
Peter