quarkslab / irma

IRMA is an asynchronous & customizable analysis system for suspicious files.
https://irma.quarkslab.com
Apache License 2.0
269 stars 55 forks source link

Error on launching playbook provisioning.yml #105

Open Rparte opened 1 year ago

Rparte commented 1 year ago

Hello,

I have been trying to install IRMA on Ubuntu 20.04.6. I am getting below error upon executing command python irma-ansible.py environments/allinone_prod.yml playbooks/provisioning.yml

/home/wonder/.local/lib/python2.7/site-packages/ansible/parsing/vault/__init__.py:41: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in the next release.
  from cryptography.exceptions import InvalidSignature
irma-ansible.py:38: YAMLLoadWarning: calling yaml.load() without Loader=... is deprecated, as the default Loader is unsafe. Please read https://msg.pyyaml.org/load for full details.
  self.config = yaml.load(f.read())
[+] Ansible vars written to /tmp/tmpxXfVWJ/vars.yml
[+] Ansible inventory written to /tmp/tmpxXfVWJ/inventory
[+] launching ansible-galaxy
- extracting ANXS.postgresql to /home/wonder/irma/ansible/roles/ANXS.postgresql
- ANXS.postgresql (cec55c974e6020044ef908e2acca9377d470b473) was installed successfully
- extracting franklinkim.sudo to /home/wonder/irma/ansible/roles/franklinkim.sudo
- franklinkim.sudo (1.9.0) was installed successfully
- extracting franklinkim.ufw to /home/wonder/irma/ansible/roles/franklinkim.ufw
- franklinkim.ufw (1.7.1) was installed successfully
- extracting jdauphant.nginx to /home/wonder/irma/ansible/roles/jdauphant.nginx
- jdauphant.nginx (v2.19) was installed successfully
- extracting Mayeu.RabbitMQ to /home/wonder/irma/ansible/roles/Mayeu.RabbitMQ
- Mayeu.RabbitMQ (47742f6d7c09edcd4ffb5b5c23ffff75599ed4e6) was installed successfully
- extracting mivok0.users to /home/wonder/irma/ansible/roles/mivok0.users
- mivok0.users (v1.2.5) was installed successfully
- extracting willshersystems.sshd to /home/wonder/irma/ansible/roles/willshersystems.sshd
- willshersystems.sshd (v0.7.2) was installed successfully
[+] launching ansible-playbook

PLAY [all] *********************************************************************
2023-07-04T13:06:29.128201 (delta: 0.022225)         elapsed: 0.022225 ******** 
=============================================================================== 

TASK [Gathering Facts] *********************************************************
2023-07-04T13:06:29.160314 (delta: 0.03207)         elapsed: 0.054338 ********* 
The authenticity of host '172.16.1.30 (172.16.1.30)' can't be established.
ECDSA key fingerprint is SHA256:0LPq1Ft47huodOEkDDZ0u/ddoq7fJNPVg27NEreV95Y.
Are you sure you want to continue connecting (yes/no/[fingerprint])? ok: [localhost]
yes
ok: [brain.irma]

TASK [Check ansible version] ***************************************************
2023-07-04T13:06:37.381036 (delta: 8.220652)         elapsed: 8.27506 ********* 
ok: [brain.irma -> localhost] => {
    "changed": false, 
    "msg": "All assertions passed"
}

PLAY [Common tasks to execute on all Linux servers] ****************************
2023-07-04T13:06:37.434029 (delta: 0.052917)         elapsed: 8.328053 ******** 
=============================================================================== 

TASK [quarkslab.apt : Check Apt last update] ***********************************
2023-07-04T13:06:37.469934 (delta: 0.035861)         elapsed: 8.363958 ******** 
ok: [brain.irma]

TASK [quarkslab.apt : Update Apt if needed] ************************************
2023-07-04T13:06:39.651884 (delta: 2.181906)         elapsed: 10.545908 ******* 
skipping: [brain.irma]

TASK [quarkslab.apt : Debian Security] *****************************************
2023-07-04T13:06:39.700841 (delta: 0.048885)         elapsed: 10.594865 ******* 
failed: [brain.irma] (item=[u'deb', u'http://security.debian.org/', u'stretch/updates', u'main']) => {"changed": false, "item": ["deb", "http://security.debian.org/", "stretch/updates", "main"], "msg": "Failed to auto-install python-apt. Error was: 'W: The repository 'http://deb.debian.org/debian stretch Release' does not have a Release file.\nW: The repository 'http://security.debian.org/debian-security stretch/updates Release' does not have a Release file.\nE: Failed to fetch http://deb.debian.org/debian/dists/stretch/main/source/Sources  404  Not Found [IP: 199.232.22.132 80]\nE: Failed to fetch http://security.debian.org/debian-security/dists/stretch/updates/main/source/Sources  404  Not Found [IP: 199.232.22.132 80]\nE: Some index files failed to download. They have been ignored, or old ones used instead.'"}
failed: [brain.irma] (item=[u'deb-src', u'http://security.debian.org/', u'stretch/updates', u'main']) => {"changed": false, "item": ["deb-src", "http://security.debian.org/", "stretch/updates", "main"], "msg": "Failed to auto-install python-apt. Error was: 'W: The repository 'http://security.debian.org/debian-security stretch/updates Release' does not have a Release file.\nW: The repository 'http://deb.debian.org/debian stretch Release' does not have a Release file.\nE: Failed to fetch http://security.debian.org/debian-security/dists/stretch/updates/main/source/Sources  404  Not Found [IP: 199.232.22.132 80]\nE: Failed to fetch http://deb.debian.org/debian/dists/stretch/main/source/Sources  404  Not Found [IP: 199.232.22.132 80]\nE: Some index files failed to download. They have been ignored, or old ones used instead.'"}

PLAY RECAP *********************************************************************
brain.irma                 : ok=3    changed=0    unreachable=0    failed=1   
localhost                  : ok=1    changed=0    unreachable=0    failed=0   

2023-07-04T13:06:51.089691 (delta: 11.388769)         elapsed: 21.983715 ****** 

I have referred to various issues present in the repository but could not find any solution to fix this issue. Please help me to find out the solution

ch0k0bn commented 1 year ago

Hello @Rparte

Irma in this version is made to run on debian 9. If you plan to use it, you should consider the whole repo as a template and update it to recent versions of the components, debugging the error step by step (either by updating ansible roles or if you are lucky, just by setting new variables that will replace the defaut outdated ones).

If you need an updated and supported commercial version, you should contact Quarkslab and have a look at QFlow (the docker based updated version of Irma).