My new repositories contain packages for Debian stretch (9), buster (10),
bullseye (11), bookworm (testing) and for Ubuntu trusty (14.04),
xenial (16.04), bionic (18.04), focal (20.04), groovy (20.10),
hirsute (21.04) and jammy (22.04).

Note: I only provide 64bit packages.

Starting with 2.1.x, I recommend you install "apt-listchanges" prior
installing/upgrading burp to be aware of major packaging changes.


Unlike other repositories (my old one included) I split up Burp in 3 packages:

- burp-core => it provides the binaries and manages dependencies
- burp-server => it depends on burp-core and provides the burp-server
  configurations
- burp-client => it depends on burp-core and provides the burp-client
  configurations

Of course you can install both burp-server and burp-client on the same host.

Note: The burp-client package deploys a custom crontab like this one:

8<-----------------------------------------------------------------------------
#
# Regular cron jobs for the burp package
#
# Run the burp client every 30 minutes + a random sleep between 0 and 1800
# seconds with the 'timed' option. The burp server will decide whether it is
# yet time to do a backup or not.
12,42 * * * *      root    [ -x /usr/sbin/burp ] && ( [ ! -e /etc/default/burp-client ] || /bin/grep -q -i run=yes /etc/default/burp-client ) && /usr/sbin/burp -a t -q 1800 >>/var/log/burp-client 2>&1
8<-----------------------------------------------------------------------------

It also deploys a "/etc/default/burp-client" file.
The cron job will only start if you remove that file or if you set "RUN=yes" in
it.
The cron job will then start every 30 minutes and the client will only perform
its job 0 to 1800 seconds after the cron job start.


To use these new repositories, you need to add them in your source list:

8<-----------------------------------------------------------------------------
cat >/etc/apt/sources.list.d/ziirish.list<<EOF
deb http://ziirish.info/repos/<dist>/<release> <repo> main
EOF
8<-----------------------------------------------------------------------------


<dist>: either "debian" or "ubuntu"
<release>: either "stretch", "buster", "bullseye" or "bookworm" for Debian and
"trusty", "xenial", "bionic", "focal", "groovy", "hirsute" or "jammy" for
Ubuntu
<repo>: "zi-latest" for the latest versions (2.5.x), or "zi-stable" for the
latest stable version (2.4.0)

Example:

8<-----------------------------------------------------------------------------
cat >/etc/apt/sources.list.d/ziirish.list<<EOF
deb http://ziirish.info/repos/debian/buster zi-stable main
EOF
8<-----------------------------------------------------------------------------


No more pinning needed since I renamed the packages to explicitly conflict with
the "old" ones. You cannot have both old and new burp packages at the same
time.


You then need my GPG public keys used to sign the repositories:

8<-----------------------------------------------------------------------------
wget http://ziirish.info/repos/<dist>.gpg -O- | gpg --no-default-keyring --keyring gnupg-ring:/etc/apt/trusted.gpg.d/ziirish-burp-<version>.gpg --import; chown _apt /etc/apt/trusted.gpg.d/ziirish-burp-<version>.gpg
8<-----------------------------------------------------------------------------

Example:

8<-----------------------------------------------------------------------------
wget http://ziirish.info/repos/debian.gpg -O- | gpg --no-default-keyring --keyring gnupg-ring:/etc/apt/trusted.gpg.d/ziirish-burp-$(lsb_release -sr).gpg --import; chown _apt /etc/apt/trusted.gpg.d/ziirish-burp-$(lsb_release -sr).gpg
8<-----------------------------------------------------------------------------


Now you can install the new packages:

8<-----------------------------------------------------------------------------
apt-get update
apt-get install burp-server
8<-----------------------------------------------------------------------------


Note: the burp-server package should deploy a burp-server.service file
compatible with systemd.


Tips: (Thanks to Marat)

If you want to run your burp-server with a non-root user, you may want to
tweak your configuration like this:

Note: this has been tested on Ubuntu 16.04 and may not work properly on other
systems

8<----------------------------------------------------------------------------
cat >/etc/tmpfiles.d/burp-server.conf<<EOF
#Type Path                     Mode UID  GID  Age Argument
f     /var/run/burp-server.pid -    burp backup -   -
EOF
8<----------------------------------------------------------------------------

##############################################################################
#                      UPGRADING FROM 2.0.x to 2.1.x                         #
##############################################################################

Between burp 2.0.x and burp 2.1.x, the packaging changed a bit.
If you do a fresh install of burp 2.1.x, your burp server will be run as the
burp:backup user and the client certificates will be stored in /var/lib/burp.

If you upgrade from burp 2.0.x, your config will remain unchanged, no user
will be created, the client certificate will remain in /etc/burp/CA, etc.

You can still backport the changes running the following commands and ensuring
you add the new 'user=burp' and 'group=backup' settings in your
burp-server.conf:

8<----------------------------------------------------------------------------
echo "Adding group 'backup'"
groupadd -r backup
echo "Adding user 'burp'"
useradd -r -m -d /var/lib/burp -s /usr/sbin/nologin -c "Burp Backup user" -g backup burp
dir=$( grep -E "^directory *=" /etc/burp/burp-server.conf | cut -d= -f2 )
# fix ownership
chown -R burp:backup $dir
8<----------------------------------------------------------------------------

You'll also have to adapt the whole ssl conf, but this is doable with a bit of
concentration (ie. read the error logs).