# Is it possible to run Auditbeat on Ubuntu on Power (ppc64le) hardware?

**URL:** <https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702>\
**Category:** Beats\
**Tags:** auditbeat\
**Created:** [November 14, 2018, 3:50pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702 "2018-11-14T15:50:18Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![nlh](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nlh](https://discuss.elastic.co/u/nlh)\
**Post date:** [November 14, 2018, 3:50pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702/1 "2018-11-14T15:50:18Z")

</div>

Question pretty much says it. Having to migrate to a beast of a machine with Ubuntu and a Power architecture.

[https://www.elastic.co/downloads/beats/auditbeat](https://www.elastic.co/downloads/beats/auditbeat)

,deb is the wrong architecture, but not sure what the Linux architecture is.

Or is this something that we would have to take the source for an build it?

(or will it not work at all?)

Thanks in advance. N

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [November 14, 2018, 5:18pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702/2 "2018-11-14T17:18:58Z")

</div>

We don't test on PPC, but we do have development snapshots that you could test out. If it works then I'd recommend building the release yourself from a git tag (you don't really want to deploy a snapshot build into prod).

- [https://beats-ci.elastic.co/job/elastic+beats+6.x+multijob-package-linux/gcsObjects/](https://beats-ci.elastic.co/job/elastic+beats+6.x+multijob-package-linux/gcsObjects/)

- [auditbeat-6.6.0-SNAPSHOT-ppc64el.deb](https://storage.cloud.google.com/beats-ci-artifacts/snapshots/auditbeat/auditbeat-6.6.0-SNAPSHOT-ppc64el.deb)

---

<div class="post-metadata">

**Author:** ![nlh](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nlh](https://discuss.elastic.co/u/nlh)\
**Post date:** [November 14, 2018, 5:32pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702/3 "2018-11-14T17:32:53Z")

</div>

Hi Andrew. Thanks as always! Will give it a go tomorrow. N

---

<div class="post-metadata">

**Author:** ![nlh](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nlh](https://discuss.elastic.co/u/nlh)\
**Post date:** [November 15, 2018, 10:26am UTC](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702/4 "2018-11-15T10:26:00Z")

</div>

Hi Andrew, not sure if this is a hiccup

```
 nhopper@ptcdeskfs:~/Downloads$ sudo apt install ./auditbeat-6.6.0-SNAPSHOT-ppc64el.deb
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Note, selecting 'auditbeat' instead of './auditbeat-6.6.0-SNAPSHOT-ppc64el.deb'
The following NEW packages will be installed
  auditbeat
0 to upgrade, 1 to newly install, 0 to remove and 0 not to upgrade.
Need to get 0 B/10.2 MB of archives.
After this operation, 34.5 MB of additional disk space will be used.
Get:1 /home/nhopper/Downloads/auditbeat-6.6.0-SNAPSHOT-ppc64el.deb auditbeat ppc64el 6.6.0 [10.2 MB]
Selecting previously unselected package auditbeat.
(Reading database ... 178442 files and directories currently installed.)
Preparing to unpack .../auditbeat-6.6.0-SNAPSHOT-ppc64el.deb ...
Unpacking auditbeat (6.6.0) ...
Setting up auditbeat (6.6.0) ...
Processing triggers for ureadahead (0.100.0-20) ...
Processing triggers for systemd (237-3ubuntu10.6) ...
N: Download is performed unsandboxed as root, as file '/home/nhopper/Downloads/auditbeat-6.6.0-SNAPSHOT-ppc64el.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
```

---

<div class="post-metadata">

**Author:** ![nlh](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nlh](https://discuss.elastic.co/u/nlh)\
**Post date:** [November 15, 2018, 10:46am UTC](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702/5 "2018-11-15T10:46:54Z")

</div>

Hi, While it says it installed, it fails to run so we are going to try and build it on there from the source and keep our fingers crossed. Cheers, N.

---

<div class="post-metadata">

**Author:** ![nlh](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nlh](https://discuss.elastic.co/u/nlh)\
**Post date:** [November 15, 2018, 1:11pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702/6 "2018-11-15T13:11:36Z")

</div>

Simple fix to the snapshot, just permissions on the auditbeat.yml

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [November 15, 2018, 10:02pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702/7 "2018-11-15T22:02:42Z")

</div>

What was the issue? The deb package installed the file with the wrong permissions? What were the permissions?

The build process for packaging should be [asserting](https://github.com/elastic/beats/blob/6.x/dev-tools/packaging/package_test.go#L42) the the permissions on the /etc/auditbeat/auditbeat.yml are 0600 with root ownership.

---

<div class="post-metadata">

**Author:** ![nlh](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nlh](https://discuss.elastic.co/u/nlh)\
**Post date:** [November 16, 2018, 8:48am UTC](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702/8 "2018-11-16T08:48:20Z")

</div>

Hi Andrew, should have said that was my fault, but not 100% sure why. Installed Auditbeat and copied across the auditbeat.yml file from another system before starting it. My guess is that the route it took must have messed up permissions. Once fixed, it ran fine. Cheers, N.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 7, 2018, 8:48am UTC](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702/9 "2018-12-07T08:48:29Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.
