search

clong / DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices
MIT License
4.57k stars 978 forks source link

Expired TLS certificate on ping.detectionlab.network, preventing retrieval of the preseed config for ESXi deployment #897

Open Qazeer opened 1 year ago

Qazeer commented 1 year ago

Description of the issue:

The TLS certificate of ping.detectionlab.network is expired, preventing access to http://ping.detectionlab.network/preseed.cfg for the Packer ubuntu image. As a result, the provisioning process hangs at Waiting for SSH to become available....

Switching to http in the ESXi/Packer/ubuntu1804_esxi.json configuration file fixes the issue (but is more a hacky fix than a lasting solution):

preseed/url=http://ping.detectionlab.network/preseed.cfg<wait>
0xv1n commented 1 year ago

@Qazeer

AFAIK, callbacks to ping.detectionlab.network were removed in https://github.com/clong/DetectionLab/commit/70fb1ec147efd9f9f61e071202ad6662ddc18f37. The project is no longer being maintained, and the hosted resource there is probably inactive. My guess is the ESXi scripts didn't get updated?

Skr1ptKid-0x commented 8 months ago
  • Deploying via (VirtualBox/VMWare/AWS/Azure/ESXi): ESXi

Description of the issue:

The TLS certificate of ping.detectionlab.network is expired, preventing access to http://ping.detectionlab.network/preseed.cfg for the Packer ubuntu image. As a result, the provisioning process hangs at Waiting for SSH to become available....

Switching to http in the ESXi/Packer/ubuntu1804_esxi.json configuration file fixes the issue (but is more a hacky fix than a lasting solution):

preseed/url=http://ping.detectionlab.network/preseed.cfg<wait>

Still helped me out, thanks. Maybe we make a group repo, keep it going even a little bit. Can't install splunk lab on esxi, also a PITA with WSL2. Although I may have learned another way through here...

fsacer commented 4 months ago

Had this issue as well, maybe a good fix would be to just host it here inside the repo, so no other external resources are needed because the project is no longer maintained. Maybe also specific version numbers should be written down so everything is reproducible even if packages change.