search

crowdsecurity / cs-nginx-bouncer

CrowdSec bouncer for Nginx
MIT License
50 stars 9 forks source link

Error install crowdsec-nginx-bouncer #53

Open valsha opened 9 months ago

valsha commented 9 months ago

What happened?

apt install crowdsec-nginx-bouncer

What did you expect to happen?

The following packages have unmet dependencies: libnginx-mod-http-lua : Depends: libnginx-mod-http-ndk but it is not going to be installed Depends: nginx-abi-1.22.1-7 E: Unable to correct problems, you have held broken packages.

How can we reproduce it (as minimally and precisely as possible)?

apt install crowdsec-nginx-bouncer

Anything else we need to know?

No response

Crowdsec version

```console $ cscli version # paste output here ``` 2024/02/14 23:07:43 version: v1.6.0-debian-pragmatic-amd64-4b8e6cd7 2024/02/14 23:07:43 Codename: alphaga 2024/02/14 23:07:43 BuildDate: 2024-01-24_11:01:12 2024/02/14 23:07:43 GoVersion: 1.21.3 2024/02/14 23:07:43 Platform: linux 2024/02/14 23:07:43 libre2: C++ 2024/02/14 23:07:43 Constraint_parser: >= 1.0, <= 3.0 2024/02/14 23:07:43 Constraint_scenario: >= 1.0, <= 3.0 2024/02/14 23:07:43 Constraint_api: v1 2024/02/14 23:07:43 Constraint_acquis: >= 1.0, < 2.0

OS version

```console # On Linux: $ cat /etc/os-release # paste output here $ uname -a # paste output here # On Windows: C:\> wmic os get Caption, Version, BuildNumber, OSArchitecture # paste output here ```

Enabled collections and parsers

```console $ cscli hub list -o raw # paste output here ```

Acquisition config

```console # On Linux: $ cat /etc/crowdsec/acquis.yaml /etc/crowdsec/acquis.d/* # paste output here # On Windows: C:\> Get-Content C:\ProgramData\CrowdSec\config\acquis.yaml # paste output here

Config show

```console $ cscli config show # paste output here ```

Prometheus metrics

```console $ cscli metrics # paste output here ```

Related custom configs versions (if applicable) : notification plugins, custom scenarios, parsers etc.

github-actions[bot] commented 9 months ago

@valsha: Thanks for opening an issue, it is currently awaiting triage.

In the meantime, you can:

  1. Check Crowdsec Documentation to see if your issue can be self resolved.
  2. You can also join our Discord.
  3. Check Releases to make sure your agent is on the latest version.
Details I am a bot created to help the [crowdsecurity](https://github.com/crowdsecurity) developers manage community feedback and contributions. You can check out my [manifest file](https://github.com/crowdsecurity/crowdsec/blob/master/.github/governance.yml) to understand my behavior and what I can do. If you want to use this for your project, you can check out the [BirthdayResearch/oss-governance-bot](https://github.com/BirthdayResearch/oss-governance-bot) repository.
blotus commented 9 months ago

Hello,

Which OS are you using ? The nginx bouncer requires the nginx lua module, which is not provided anymore on ubuntu >= 22.04.

If you are in this case, you can either:

valsha commented 9 months ago

Hello,

Which OS are you using ? The nginx bouncer requires the nginx lua module, which is not provided anymore on ubuntu >= 22.04.

If you are in this case, you can either:

* Manually install the LUA module (do NOT use the ondrej nginx stable PPA which has the module, it causes nginx to segfault, most likely due to an incompatiblity between recent nginx versions and older LUA module versions)

* Switch to openresty, which bundles the LUA module

(I'm transfering this issue to the nginx bouncer repository)

Distributor ID: Debian Description: Debian GNU/Linux 12 (bookworm) Release: 12 Codename: bookworm

sabban commented 7 months ago

The postinstal install script lacks only lua-resty-string, lua-resty-openssl but already install lua-cjson and lua-resty-http through luarocks.

We could add them, what do you think @blotus ?

steadfasterX commented 1 month ago

stumbled over this as well (Debian 12). so what is the recommended way to fix this? using openresty it seems?