Ppa:oisf/suricata-stable updated to pull version 8?

Help
1

I’m installing Suricata on a server using the basic commands, attempting to keep it at 7x

sudo apt install software-properties-common
sudo add-repository ppa:oisf/suricata-stable
sudo apt update
sudo apt install -y suricata

This is installing version 8, rather than 7. On Ubuntu Noble.

I’ve installed/updated Suricata since 5, haven’t run into this. I’ve uninstalled and deleted every file named containing Suricata in the name/path, hoping it was cache, after doing that, ran the above commands and 8 was installed again.

Any info is welcome, thanks!

2

Running the following confirms its pulling 8

sudo add-repository ppa:oisf/suricata-stable
sudo apt download suricata

ls -l | grep suricata
suricata_1%3a8.0.0-0ubuntu18_amd64.deb

Thanks again.

3

As Suricata 8.0.0 is the latest stable branch, this is expected.

I’m not sure if it’s really documented anywhere, but you can stick to a specific major release by using the ppa:oisf/suricata-7.0 PPA, which is at Suricata 7.0.11.

4

Thank you, from what i can see it is not. Also the install doesn’t work on ubuntu 24.04 it successfully installs but has many problems trying to start up.

Also any person that didn’t do sudo apt-mark hold suricata will get the updated version, when they run an apt update and subsequent install command

Making this very visible, should be done. The suricata install pages are not updated, google AI specifically says it works with 7, which is identical to the suricata help pages. I’m not relying on AI, in the least, but it would very likely pick up this change. Regular google search results, don’t show this change.

Thanks, this was kinda painful, as i really didn’t want to write the list, thinking it would have been my fault. It needs to be documented and plainly available.

I would consider a PR for the docs, but my guess is there should be more there, with words crafted from OISF.

Thank you,