Arch Linux User Repository

Thanks, worked!

with version 4.17.0 change line

ln -s /usr/share/java/sleuthkit-${_skver}.jar $pkgdir/usr/share/${pkgname}/${pkgname}/modules/ext/sleuthkit-postgresql-${_skver}.jar

to

ln -s /usr/share/java/sleuthkit-${_skver}.jar $pkgdir/usr/share/${pkgname}/${pkgname}/modules/ext/sleuthkit-${_skver}.jar

for it to work.

@test0 sudo yay -S sleuthkit

Where should I find sleuthkit-4.10.0.jar? I used yaourt -S autopsy and didn't download the jar file specifically

@test0 Please follow these instructions

cd /usr/share/java/

ls

sudo cp sleuthkit-4.10.0.jar /usr/share/autopsy/autopsy/modules/ext/

cd /usr/share/autopsy/autopsy/modules/ext/

sudo cp sleuthkit-4.10.0.jar sleuthkit-postgresql-4.10.0.jar

log out and log in

When running Autopsy after installation, I am getting this Error,

Activation failed: StandardModule:org.sleuthkit.autopsy.core jarFile: /usr/share/autopsy/autopsy/modules/org-sleuthkit-autopsy-core.jar: java.lang.UnsatisfiedLinkError: org.sleuthkit.datamodel.SleuthkitJNI.getVersionNat()Ljava/lang/String;

Then, the interface is opened, but without the core plugin so it is not useful. When trying to "Activate" the "Autopsy-Core" default plugin, this error is shown on Console.

Library not found in jar (libtsk_jni)
SleuthkitJNI: failed to load libtsk_jni

And the UI shown a message box with the Error pasted initially ("Activation failed: StandardModule:org.sleuthkit.autopsy.core....").

I tried some tricks suggested online like running Autopsy with JAVA_HOME=/usr/lib/jvm/java-8-openjdk but this did not help.

Would love your help with fixing this issue or instructing me about the steps I should take

I have the same problem as @tcmal. I have OpenJDK 8 set as default and also checked JAVA_HOME. I also tried starting it explicitly with: JAVA_HOME=/usr/lib/jvm/java-8-openjdk/ autopsy

JavaFx 8 is also intalled.

hey, you forgot

_skver=4.9.0

should be

_skver=4.10.0

for new sleuthkit-java ver

edit: this is borked because upstream sleuthkit is at 4.9.0

Hi all

First of all thank you for this amazing autopsy AUR package by these gentlements.

Submitter: Mikos Maintainer: tcmal

For (Manjaro/Arch linux)

to the people who are getting an error like this :

/sleuthkit-java/src/sleuthkit-4.9.0/bindings/java/build-unix.xml:41: JNInative library not built

please do following steps :

1.open console type :

cd /usr/lib/jvm/liberica-jdk-8-full/

2.Now type :

sudo nano /etc/profile

3.Bottom of the file type :

export JAVA_HOME="path that you found"

export PATH=$JAVA_HOME/bin:$PATH

4.Save the file.

5.Restart machine.

6.To verify type echo $JAVA_HOME

7.Now try to BUILD using autopsy AUR packages.

not related to AUR, but there is a dockerized version and seems to work pretty well https://github.com/bannsec/autopsy_docker