StamusNetworks / SELKS

A Suricata based IDS/IPS/NSM distro
https://www.stamus-networks.com/open-source/#selks
GNU General Public License v3.0
1.45k stars 284 forks source link

Docker: Issue summary #448

Open carbiderasp opened 1 year ago

carbiderasp commented 1 year ago

Docker install via easy_setup fails - Raspberry Pi 4b / 64bit During docker install on raspberry pi 4b (running 64bit), script failed with the following error: no matching manifest for linux/arm64/v8 in the manifest list entries

This was after the section that asks if you'd like to put the elasticsearch database somewhere other than /var/lib/docker but before completing the 'Pulling Containers' step

Steps to reproduce the issue:

  1. run easy-setup.sh script.
    • Docker seems to be installed properly
    • docker-compose installation found Found existing portainer installation, skipping... Unable to find image 'nginx:latest' locally
    • Certificate generated successfully
    • Certificate match private key

      SETTINGS

      Configure threat detection for INTERFACE(S): eth1 eth0 docker0 --took defaults on debug and containers auto-restarting on startup --took default for database location (/var/lib/docker) Unable to find image 'python:3.9.5-slim-buster' locally Status: Downloaded newer image for python:3.9.5-slim-buster

--- here's where it appears to bomb out: [+] Pulling 8/9 ⠹ arkime Pulling
✘ cron Error
✘ suricata Error
✔ nginx Pulled
✘ scirius Error
✘ elasticsearch Error
✘ logstash Error
✘ kibana Error
✘ evebox Error
no matching manifest for linux/arm64/v8 in the manifest list entries

-- script fails and I return to bash prompt

Describe the results you received: bad ones (lol)

Describe the results you expected: good ones (i.e. installed docker image)

Additional information you deem important (e.g. issue happens only occasionally): I've run into this before with other installs.. it seems the 64bit v8 manifest for bullseye doesn't exist..I could be wrong though

Output of docker version:

$ docker version
Client: Docker Engine - Community
 Version:           24.0.5
 API version:       1.43
 Go version:        go1.20.6
 Git commit:        ced0996
 Built:             Fri Jul 21 20:35:38 2023
 OS/Arch:           linux/arm64
 Context:           default

Server: Docker Engine - Community
 Engine:
  Version:          24.0.5
  API version:      1.43 (minimum version 1.12)
  Go version:       go1.20.6
  Git commit:       a61e2b4
  Built:            Fri Jul 21 20:35:38 2023
  OS/Arch:          linux/arm64
  Experimental:     false
 containerd:
  Version:          1.6.22
  GitCommit:        8165feabfdfe38c65b599c4993d227328c231fca
 runc:
  Version:          1.1.8
  GitCommit:        v1.1.8-0-g82f18fe
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

Output of docker-compose version:

Docker Compose version v2.20.2

Output of lsb_release -a:

No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 11 (bullseye)
Release:        11
Codename:       bullseye

Additional environment details: I'm booting from USB drive, no sdcard installed. External drive has over 60G free swapfile was changed prior to install. Set to 2G using usb dongle for eth1

pevma commented 1 year ago

I believe it is failing due to lack of arm support, currently some packages are missing.

syst3 commented 1 year ago

Raspberry pies are pretty expensive these days. I would go with mini x86 instead.