Skip to content

Binary Packages

Jump to bottom
Johanna edited this page Nov 21, 2024 · 10 revisions

Linux Binary Packages for Zeek

We are providing binary packages for a number of different Linux distributions, via the openSUSE Build Service. Once you've configured the OBS repositories on your system, you can easily install the packages using your distribution's package manager.

The Zeek repository is currently split into multiple packages. Typically you will just install a toplevel Zeek meta-package that captures the release train you'd like to install, for example zeek-6.0 for the latest Zeek 6.0.x release. This will then automatically install everything needed to run Zeek and ZeekControl.

With "<ver>" referring to your chosen release train (such as "6.0"), the individual packages are:

  • zeek-<ver> is the meta-package establishing dependencies.
  • zeek-<ver>-core only contains the Zeek core and scripts.
  • zeekctl-<ver> contains ZeekControl.
  • zeek-<ver>-devel (or zeek-<ver>-core-dev for .deb-based systems) contains header and other development files necessary to compile plugins.
  • zeek-<ver>-spicy-devel (or zeek-<ver>-spicy-dev for .deb-based systems) contains Spicy header and development files.
  • libbroker-<ver>-devel (or libbroker-<ver>-dev for .deb-based systems) contains Broker header and development files.
  • zeek-<ver>-btest is installed starting with the 4.0 release - and contains the system that is used to drive unit tests and may be necessary to test plugins.
  • zeek-<ver>-zkg contains the Zeek package manager.
  • zeek-<ver>-client contains the Management framework's command-line client.

All packages are installed into /opt/zeek. A group named zeek is added to the system, if it does not already exist. Users that are part of the zeek group can edit configuration files and view the Zeek log files.

We also provide nightly builds tracking the most current development version. The package names for our nightly builds are zeek-nightly, zeek-nightly-core, etc. Nightly packages are installed to /opt/zeek-nightly and can be installed simultaneously with the other zeek packages.

For a list of supported operating systems, see the support matrix.

Note: we no longer support the older abstract package naming of zeek-lts that automatically referred to the latest LTS release. Explicit selection of LTS release lines is safer for most users. zeek continues to refer to the latest feature release.

Note: /opt/zeek/bin is not automatically added to $PATH. You either have to run Zeek using the full path to the binaries or add it to your $PATH.

Note: The binary packages are automatically signed by the openSUSE Build Service, which is outside of our control. For debian-based systems you have to manually re-add the key, getting it from the listed location on the download page and adding it with apt-key add Release.key when the old key expires.

Installation Instructions

This section gives short installation instructions for the distributions that we currently offer packages for. To see the supported architectures for each distributions, please see the current build states on OBS..

Debian Testing

echo 'deb http://download.opensuse.org/repositories/security:/zeek/Debian_Testing/ /' | sudo tee /etc/apt/sources.list.d/security:zeek.list
curl -fsSL https://download.opensuse.org/repositories/security:zeek/Debian_Testing/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null
sudo apt update
sudo apt install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

Debian 12

echo 'deb http://download.opensuse.org/repositories/security:/zeek/Debian_12/ /' | sudo tee /etc/apt/sources.list.d/security:zeek.list
curl -fsSL https://download.opensuse.org/repositories/security:zeek/Debian_12/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null
sudo apt update
sudo apt install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

Debian 11

echo 'deb http://download.opensuse.org/repositories/security:/zeek/Debian_11/ /' | sudo tee /etc/apt/sources.list.d/security:zeek.list
curl -fsSL https://download.opensuse.org/repositories/security:zeek/Debian_11/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null
sudo apt update
sudo apt install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

Fedora 41

dnf config-manager addrepo --from-repofile=https://download.opensuse.org/repositories/security:zeek/Fedora_41/security:zeek.repo
dnf install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

Fedora 40

dnf config-manager --add-repo https://download.opensuse.org/repositories/security:zeek/Fedora_40/security:zeek.repo
dnf install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

OpenSUSE Tumbleweed

zypper addrepo https://download.opensuse.org/repositories/security:zeek/openSUSE_Tumbleweed/security:zeek.repo
zypper refresh
zypper install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

OpenSUSE Leap 15.5

zypper addrepo https://download.opensuse.org/repositories/security:zeek/15.5/security:zeek.repo
zypper refresh
zypper install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

OpenSUSE Leap 15.6

zypper addrepo https://download.opensuse.org/repositories/security:zeek/15.6/security:zeek.repo
zypper refresh
zypper install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

Raspbian 11 (armhf only - for arm64, please use Debian packages)

echo 'deb http://download.opensuse.org/repositories/security:/zeek/Raspbian_11/ /' | sudo tee /etc/apt/sources.list.d/security:zeek.list
curl -fsSL https://download.opensuse.org/repositories/security:zeek/Raspbian_11/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null
sudo apt update
sudo apt install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

Raspbian 12 (armhf only - for arm64, please use Debian packages)

echo 'deb http://download.opensuse.org/repositories/security:/zeek/Raspbian_12/ /' | sudo tee /etc/apt/sources.list.d/security:zeek.list
curl -fsSL https://download.opensuse.org/repositories/security:zeek/Raspbian_12/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null
sudo apt update
sudo apt install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

Ubuntu 24.10

echo 'deb http://download.opensuse.org/repositories/security:/zeek/xUbuntu_24.10/ /' | sudo tee /etc/apt/sources.list.d/security:zeek.list
curl -fsSL https://download.opensuse.org/repositories/security:zeek/xUbuntu_24.10/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null
sudo apt update
sudo apt install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

Ubuntu 24.04

echo 'deb http://download.opensuse.org/repositories/security:/zeek/xUbuntu_24.04/ /' | sudo tee /etc/apt/sources.list.d/security:zeek.list
curl -fsSL https://download.opensuse.org/repositories/security:zeek/xUbuntu_24.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null
sudo apt update
sudo apt install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

Ubuntu 22.04

echo 'deb http://download.opensuse.org/repositories/security:/zeek/xUbuntu_22.04/ /' | sudo tee /etc/apt/sources.list.d/security:zeek.list
curl -fsSL https://download.opensuse.org/repositories/security:zeek/xUbuntu_22.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null
sudo apt update
sudo apt install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]

Ubuntu 20.04

echo 'deb http://download.opensuse.org/repositories/security:/zeek/xUbuntu_20.04/ /' | sudo tee /etc/apt/sources.list.d/security:zeek.list
curl -fsSL https://download.opensuse.org/repositories/security:zeek/xUbuntu_20.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null
sudo apt update
sudo apt install [zeek, zeek-6.0, zeek-7.0, or zeek-nightly]
Clone this wiki locally