Install MISP from RPM packages
Installation instructions:
- install rhel or centos minimal system
- update system to last updates
- install and enable epel repository
- add misp-release repo (also contains the official MariaDB repository)
currently the RPMs are provided in an repository which you have to install first
yum install http://repo.misp-project.ch/yum/misp/misp-release-latest.el7.noarch.rpm
yum install http://rpms.remirepo.net/enterprise/remi-release-7.rpm
- install misp
yum install misp misp-python-virtualenv misp-modules
dnf install MariaDB-client MariaDB-Server
- configure mariadb (Line 39 'XXXXXXXXX' references the MariaDB user's password)
# enable mariadb startup
systemctl enable mariadb.service
systemctl start mariadb.service
# secure the installation, set a reasonable password
mysql_secure_installation
# install MISP db schema
mysql -u root -p
MariaDB [(none)]> create database misp;
MariaDB [(none)]> grant usage on *.* to misp@localhost identified by 'XXXXXXXXX';
MariaDB [(none)]> grant all privileges on misp.* to misp@localhost ;
MariaDB [(none)]> exit
cd /var/www/MISP
# Import the empty MySQL database from MYSQL.sql
mysql -u misp -p misp < INSTALL/MYSQL.sql
- configure misp
cd /var/www/MISP/app/Config
cp -a bootstrap.default.php bootstrap.php
cp -a database.default.php database.php
cp -a core.default.php core.php
cp -a config.default.php config.php
# set DB details in database.php
# set baseurl in config.php
# set python_bin => '/var/www/cgi-bin/misp-virtualenv/bin/python3'
# set owner and selinux context
chown apache:apache /var/www/MISP/app/Config/config.php
chcon -t httpd_sys_rw_content_t /var/www/MISP/app/Config/config.php
# enable misp-workers at startup
systemctl enable misp-workers
systemctl start misp-workers
- configure php
all php settings are done in /etc/opt/remi/php74/php.ini
- start redis
# enable redis at startup
systemctl enable redis
systemctl start redis
- start httpd
# enable apache at startup
systemctl enable httpd
systemctl start httpd
- open firewall
# open firewall for http and https
firewall-cmd --permanent --zone=public --add-service http
firewall-cmd --permanent --zone=public --add-service https
systemctl restart firewalld
- enable misp-modules
# enable misp-modules at startup
systemctl enable misp-modules
systemctl start misp-modules
- link php
ln -s /bin/php74 /bin/php
- reboot to make sure all services are started correctly