sublime-security / sublime-platform

A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Gain visibility and control, hunt for advanced threats, collaborate with the community, and write detections-as-code.
https://sublime.security
MIT License
159 stars 14 forks source link

Running on ARM fails #107

Closed DorianLoeben closed 1 year ago

DorianLoeben commented 1 year ago

I tried running the auto install script on a raspberry pi 4 which barely meets the minimum requirements in the docs. During installation it gives the warning for some images sublime_hydra The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and no specific platform was requested After the install during the health check afterwards, there is this output:

Checking health of containers...
exec /bin/sh: exec format error
exec /bin/sh: exec format error
exec /bin/sh: exec format error

** Successfully installed Sublime Platform! **

Afterwards some docker containers continue to restart with exec /bin/sh: exec format error in the logs The documentation doesn't mention that all the docker images are only available for linux/amd64 and doesn't work for linux/arm64. Failing Containers are:

sublime_strelka_frontend_1 
sublime_strelka_backend_1 
sublime_strelka_manager_1 
sublime_hydra 

If you want to support ARM I would suggest providing docker images for ARM architecture. Or if you don't want to support ARM, I would like mentions of ARM incompatibility in the docs and an additional check in the preflight script.

madirey commented 1 year ago

Hi @Aneduna! As you pointed out above, we unfortunately do not currently support arm64 for all of our containers. I've added a section to our docs to make this more clear. Additionally, I've created an internal task to track adding an architecture check in the install script.

A few of our containers have dependencies that make them difficult to build for arm64, but the team is exploring whether or not this is something we can address in the future. Stay tuned, and thanks for your interest!

cameron-dunn-sublime commented 1 year ago

@DorianLoeben we just finished releasing ARM images for all services! Please go ahead and give the setup another shot and let us know if there are any issues.

DorianLoeben commented 1 year ago

It works very well, thank you! Using the default docker install script, it installed without any issues and the WebUI works. Tested on a Raspberry Pi4. The Documentation isn't updated in the quickstart guide to show that arm64 is now available without apple emulation.

I still have problems connecting it to my Dovecot server as SPECIAL-USE capabilities are enabled, but not the \All Folder which requires fiddling around with plugins, but that's maybe part of another Issue or a thing I have to figure out with the Mail Server

cameron-dunn-sublime commented 1 year ago

Thanks @DorianLoeben! Really glad to hear everything on the setup side worked! I just updated the docs, thanks for pointing that out!

If you're still having troubles with the mail server, let's open up a fresh issue or join us in Slack.