mandiant / VM-Packages

Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
Apache License 2.0
122 stars 61 forks source link

Failed to install ida.plugin.diaphora.vm #1077

Open superguo opened 3 weeks ago

superguo commented 3 weeks ago

What's the problem?

I have already installed flare-vm, and I tried to upgrade it by running install.ps1, something went wrong: (from log.txt)

2024/06/05 10:37:12 [installer.vm] chocolateyinstall.ps1 [+] ERROR : Failed to install: ida.plugin.diaphora.vm 2024/06/05 10:37:12 [installer.vm] chocolateyinstall.ps1 [+] ERROR : For each failed package, you may attempt a manual install via: choco install -y 2024/06/05 10:37:12 [installer.vm] chocolateyinstall.ps1 [+] ERROR : Failed package list saved to: C:\ProgramData_VM\failed_packages.txt 2024/06/05 10:37:12 [installer.vm] chocolateyinstall.ps1 [+] ERROR : Please check the following logs for additional errors: 2024/06/05 10:37:12 [installer.vm] chocolateyinstall.ps1 [+] ERROR : C:\ProgramData_VM\log.txt (this file) 2024/06/05 10:37:12 [installer.vm] chocolateyinstall.ps1 [+] ERROR : %PROGRAMDATA%\chocolatey\logs\chocolatey.log 2024/06/05 10:37:12 [installer.vm] chocolateyinstall.ps1 [+] ERROR : %LOCALAPPDATA%\Boxstarter\boxstarter.log [-] Please check the following logs for any errors: [-] C:\ProgramData_VM\log.txt [-] %PROGRAMDATA%\chocolatey\logs\chocolatey.log [-] %LOCALAPPDATA%\Boxstarter\boxstarter.log

Then I tried to install ida.plugin.diaphora.vm manually after reboot, but it still failed: (From the console. See Additional Information for the screenshot of the console output)

Chocolatey v2.2.2 Installing the following packages: ida.plugin.diaphora.vm By installing, you accept licenses for the packages. Progress: Downloading ida.plugin.diaphora.vm 3.2.1... 100%

ida.plugin.diaphora.vm v3.2.1 ida.plugin.diaphora.vm package files install completed. Performing other installation steps. Using system proxy server '192.168.3.6:7890'. File appears to be downloaded already. Verifying with package checksum to determine if it needs to be redownloaded. Hashes match. Hashes match. Extracting C:\Users\IEUser\AppData\Local\ChocoCache\ida.plugin.diaphora.vm\3.2.1\diaphora-3.2.1.zip to C:\Tools\diaphora... ERROR: Cannot bind argument to parameter 'Path' because it is an empty string. The install of ida.plugin.diaphora.vm was NOT successful. Error while running 'C:\ProgramData\chocolatey\lib\ida.plugin.diaphora.vm\tools\chocolateyinstall.ps1'. See log for details.

Chocolatey installed 0/1 packages. 1 packages failed. See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).

Failures - ida.plugin.diaphora.vm (exited -1) - Error while running 'C:\ProgramData\chocolatey\lib\ida.plugin.diaphora.vm\tools\chocolateyinstall.ps1'. See log for details. FLARE-VM 06/05/2024 19:28:01

Steps to Reproduce

  1. Installed flare-vm, except that some plugin failed to install
    • Posted #1064 for that plugin
    • Waited until it was fixed
  2. Tried to upgrade flare-vm by installing it again
  3. A window popped up and showed that ida.plugin.diaphora.vm will be added
  4. Failed (See log.txt in What's the problem?)
  5. Manually rebooted the VM
  6. Followed the instruction in the log mentioned above by running choco install -y ida.plugin.diaphora.vm
  7. Still failed (See console output in What's the problem? for logs)

Environment

Virtualization software: VMWare Workstation 17 Pro VM OS version: 10.0.17763 VM PowerShell version: 5.1.17763.316 VM Chocolatey version: 2.2.2 VM Boxstarter version: 3.0.3

Additional Information

The following screenshot is the output from running choco install -y ida.plugin.diaphora.vm

image

Detected by test suite

No

Ana06 commented 3 weeks ago

Can you please provide the log files C:\ProgramData\_VM\log.txt and C:\ProgramData\chocolatey\logs\chocolatey.log after installing the failing package?

superguo commented 3 weeks ago

@Ana06 Sure. You don't have to strip the old installation history, because the original log files have been moved to other place before running install.ps1, i.e. these two attached files contain only info about this run. log.txt chocolatey.log

Ana06 commented 3 weeks ago

I see some strange things in the logs:

@superguo please install a fresh install of FLARE (from an empty Windows without any package) and ensure you do not install ida.diaphora.vm. Let us know if that resolve the issue.

superguo commented 3 weeks ago

@Ana06 I just uninstalled ida.diaphora.vm and installed ida.plugin.diaphora.vm SUCCESSFULLY. I don't have much time and VPN traffic to do a fresh install, but since no other people or your CI have such a problem, you can close the issue.