From f96e94b4a0183f550fbcf47023c04ddf00abaf8e Mon Sep 17 00:00:00 2001 From: N Prakash Date: Fri, 7 Aug 2026 14:38:10 +0530 Subject: [PATCH 1/2] Docker and Debian-13 WAF compiler installation steps update --- content/includes/nim/tech-specs/supported-distros.md | 2 +- .../configuration/install-waf-compiler/install.md | 8 ++++++++ .../docker-compose/docker-compose-lightweight.yaml | 2 ++ static/scripts/docker-compose/docker-compose.yaml | 2 ++ 4 files changed, 13 insertions(+), 1 deletion(-) diff --git a/content/includes/nim/tech-specs/supported-distros.md b/content/includes/nim/tech-specs/supported-distros.md index 400a70702..63cade5b5 100644 --- a/content/includes/nim/tech-specs/supported-distros.md +++ b/content/includes/nim/tech-specs/supported-distros.md @@ -14,7 +14,7 @@ The following table lists the Linux distributions supported by NGINX Instance Ma |-----------------|----------------------------------------|------------------|-----------------------------------------------------|----------------------------------------------------| | Debian | 11
12
13 | x86_64
x86_64
x86_64 | Supported
Supported
Supported | Supported
Supported
Supported | | Oracle Linux | 8.0 and later in the 8.x family | x86_64 | Supported | Supported | -| RHEL and Rocky | 8.0 and later in the 8.x family
9.0 and later in the 9.x family
10.0 and later in the 10.x family | x86_64
x86_64
x86_64 | Supported
Supported
Supported | Supported
Supported
Supported | +| RHEL and Rocky | 8.0 and later in the 8.x family
9.0 and later in the 9.x family
10.0 and later in the 10.x family | x86_64
x86_64
x86_64 | Supported
Supported
Supported | Supported
Supported
Supported on only Redhat-10 | | Ubuntu | 22.04
24.04 | x86_64
x86_64 | Supported
Supported on 2.18.0+ | Supported
Supported | {{}} diff --git a/content/nim/waf-integration/configuration/install-waf-compiler/install.md b/content/nim/waf-integration/configuration/install-waf-compiler/install.md index 5a8b1171d..9f9107c55 100644 --- a/content/nim/waf-integration/configuration/install-waf-compiler/install.md +++ b/content/nim/waf-integration/configuration/install-waf-compiler/install.md @@ -59,6 +59,14 @@ Earlier releases used 4.x.x for VM packages (for example, NAP 4.15.0, NAP 4.16.0 sudo apt-get install nms-nap-compiler-v5.690.0 -o Dpkg::Options::="--force-overwrite" ``` +1. Export `LD_LIBRARY_PATH` environment variable for Debian-13: + + ```shell + export LD_LIBRARY_PATH=/lib/x86_64-linux-gnu:/opt/app_protect/lib + ``` + + If you observe following error in nms log `/usr/bin/perl: symbol lookup error: /opt/nms-nap-compiler/app_protect-5.635.4/bin/../lib/perl/auto/F5/PatternMatching/PatternMatching.so: undefined symbol: _ZN3re23RE2C1EN4absl7debian711string_viewERKNS0_7OptionsE` on the other falvour of ubuntu or debian then export `LD_LIBRARY_PATH` environment variable as described above. + 1. {{< include "nim/waf/restart-nms-integrations.md" >}} {{% /tab %}} diff --git a/static/scripts/docker-compose/docker-compose-lightweight.yaml b/static/scripts/docker-compose/docker-compose-lightweight.yaml index 08f508673..4e67bc583 100644 --- a/static/scripts/docker-compose/docker-compose-lightweight.yaml +++ b/static/scripts/docker-compose/docker-compose-lightweight.yaml @@ -77,6 +77,8 @@ services: # Configure proxy SSL verification to trust the proxy server. PROXY_SSL_VERIFY: true ENABLE_METRICS: false + # export the LD_LIBRARY_PATH to include the App Protect library path. This is required for NIM to compile older version of NAP compiler . + LD_LIBRARY_PATH: "/lib/x86_64-linux-gnu:/opt/app_protect/lib" networks: external_network: driver: bridge diff --git a/static/scripts/docker-compose/docker-compose.yaml b/static/scripts/docker-compose/docker-compose.yaml index 5831f5d6b..9d1568c64 100644 --- a/static/scripts/docker-compose/docker-compose.yaml +++ b/static/scripts/docker-compose/docker-compose.yaml @@ -80,6 +80,8 @@ services: # PROXY_PASSWORD: "" # Configure this setting to set the proxy connection verification (is the proxy trusted by the host) PROXY_SSL_VERIFY: true + # export the LD_LIBRARY_PATH to include the App Protect library path. This is required for NIM to compile older version of NAP compiler . + LD_LIBRARY_PATH: "/lib/x86_64-linux-gnu:/opt/app_protect/lib" clickhouse: image: clickhouse/clickhouse-server:23-alpine hostname: clickhouse From 06bc11f11ebfe14f5914a48a798adc5b5aba5c66 Mon Sep 17 00:00:00 2001 From: N Prakash Date: Mon, 10 Aug 2026 20:38:45 +0530 Subject: [PATCH 2/2] symbolik link changes update for NAP compiler --- content/includes/nim/waf/nim-waf-before-you-begin.md | 9 ++++++++- .../configuration/install-waf-compiler/install.md | 4 ++-- 2 files changed, 10 insertions(+), 3 deletions(-) diff --git a/content/includes/nim/waf/nim-waf-before-you-begin.md b/content/includes/nim/waf/nim-waf-before-you-begin.md index 0662116e9..e847080af 100644 --- a/content/includes/nim/waf/nim-waf-before-you-begin.md +++ b/content/includes/nim/waf/nim-waf-before-you-begin.md @@ -19,4 +19,11 @@ Make sure you’ve completed the following tasks: The latest version of NGINX Instance Manager is recommended to ensure full compatibility and access to the newest features. - If you have a subscription for F5 WAF for NGINX, you can find your license in the subscription details section of [MyF5](https://my.f5.com). \ No newline at end of file + If you have a subscription for F5 WAF for NGINX, you can find your license in the subscription details section of [MyF5](https://my.f5.com). + +- If you're installing WAF compiler 5.690.0 or later, verify that the `/opt/app_protect` directory does not already exist before installation. After installation, confirm that `/opt/app_protect` is a symbolic link that points to the latest WAF compiler directory. + +```shell +$ ls -l /opt/app_protect +lrwxrwxrwx 1 root root 41 Aug 6 06:18 /opt/app_protect -> /opt/nms-nap-compiler/app_protect-5.690.0 +``` \ No newline at end of file diff --git a/content/nim/waf-integration/configuration/install-waf-compiler/install.md b/content/nim/waf-integration/configuration/install-waf-compiler/install.md index 9f9107c55..1f585570c 100644 --- a/content/nim/waf-integration/configuration/install-waf-compiler/install.md +++ b/content/nim/waf-integration/configuration/install-waf-compiler/install.md @@ -59,13 +59,13 @@ Earlier releases used 4.x.x for VM packages (for example, NAP 4.15.0, NAP 4.16.0 sudo apt-get install nms-nap-compiler-v5.690.0 -o Dpkg::Options::="--force-overwrite" ``` -1. Export `LD_LIBRARY_PATH` environment variable for Debian-13: +1. On Debian 13, export the `LD_LIBRARY_PATH` environment variable: ```shell export LD_LIBRARY_PATH=/lib/x86_64-linux-gnu:/opt/app_protect/lib ``` - If you observe following error in nms log `/usr/bin/perl: symbol lookup error: /opt/nms-nap-compiler/app_protect-5.635.4/bin/../lib/perl/auto/F5/PatternMatching/PatternMatching.so: undefined symbol: _ZN3re23RE2C1EN4absl7debian711string_viewERKNS0_7OptionsE` on the other falvour of ubuntu or debian then export `LD_LIBRARY_PATH` environment variable as described above. + For other Ubuntu or Debian variants, set `LD_LIBRARY_PATH` only if the NGINX Instance Manager logs show symbol resolution error like: `/usr/bin/perl: symbol lookup error: /opt/nms-nap-compiler/app_protect-5.635.4/bin/../lib/perl/auto/F5/PatternMatching/PatternMatching.so: undefined symbol: _ZN3re23RE2C1EN4absl7debian711string_viewERKNS0_7OptionsE`. 1. {{< include "nim/waf/restart-nms-integrations.md" >}}