search

teamdfir / sift

SIFT
MIT License
479 stars 67 forks source link

Issue installing v2019.12.0 #419

Closed Queen-Nahla closed 4 years ago

Queen-Nahla commented 4 years ago

I'm trying to install SIFT v2019.12.0 on Ubuntu desktop 16.04. At the end of the installation I receive the following errors:

Update returned exit code not zero Error: Update returned exit code not zero at ChildProcess.update.on (/snapshot/sift-cli/sift-cli.js:488:23) at emitTwo (events.js:106:13) at ChildProcess.emit (events.js:194:7) at maybeClose (internal/child_process.js:899:16) at Process.ChildProcess._handle.onexit (internal/child_process.js:226:5)

I've updated pyOpenSSL per the same problem in a previous issue, but still receive the same thing. Please advise.

ekristen commented 4 years ago

Please attach your saltstack.log and the more of the output of the CLI tool.

ekristen commented 4 years ago

I would also suggest trying 18.04 if you are trying to install fresh.

Queen-Nahla commented 4 years ago

Hi Erik,

I’ve tried on 16.04 and 18.04 and am getting the same results on both.

The saltstack log from 18.04 and the install output are attached. Thank you so much for the quick response!

Kristen

From: Erik Kristensen notifications@github.com Sent: Thursday, December 26, 2019 5:31 PM To: teamdfir/sift sift@noreply.github.com Cc: Kristen Fettig kristen.fettig@infor.com; Author author@noreply.github.com Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

I would also suggest trying 18.04 if you are trying to install fresh.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPKSHA4XZU2PU3IJNJLQ2UWCBA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHWHBLA#issuecomment-569143468, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPPQYIQZHZXGYZMK7JDQ2UWCBANCNFSM4J7RA6HQ.

sift-cli@1.5.1-beta.0-master.154cb2f sift-version: notinstalled

Installing and configuring SaltStack properly ...

downloading v2019.12.0

downloading sift-saltstack-v2019.12.0.tar.gz.asc downloading sift-saltstack-v2019.12.0.tar.gz.sha256 downloading sift-saltstack-v2019.12.0.tar.gz.sha256.asc downloading sift-saltstack-v2019.12.0.tar.gz validating file sift-saltstack-v2019.12.0.tar.gz validating signature for sift-saltstack-v2019.12.0.tar.gz.sha256 extracting update sift-saltstack-v2019.12.0.tar.gz performing update v2019.12.0 Log file: /var/cache/sift/cli/v2019.12.0/saltstack.log

Running: software-properties-common Running: apt-transport-https Running: deb [arch=amd64] https://download.docker.com/linux/ubuntu bionic stable Running: sift-gift-dev Running: gift Running: /etc/apt/preferences.d/gift Running: sift-dev Running: sift-repo Running: /etc/apt/preferences.d/sift Running: noobslab-themes Running: noobslab-icons Running: openjdk-repo Running: deb http://archive.ubuntu.com/ubuntu/ bionic multiverse Running: deb http://archive.ubuntu.com/ubuntu/ bionic-security multiverse Running: sift-universe-repo Running: ubuntutweak Running: binplist Running: unity-webapps-common Running: aeskeyfind Running: afflib-tools Running: aircrack-ng Running: apache2 Running: arp-scan Running: autopsy Running: bcrypt Running: bkhive Running: bless Running: blt Running: build-essential Running: bulk-extractor Running: cabextract Running: ccrypt Running: cifs-utils Running: clamav Running: cmospwd Running: cryptcat Running: cryptsetup Running: curl Running: dc3dd Running: dcfldd Running: dconf-tools Running: docker-ce Running: driftnet Running: dsniff Running: e2fslibs-dev Running: ent Running: epic5 Running: etherape Running: ettercap-graphical Running: exfat-fuse Running: exfat-utils Running: exif Running: extundelete Running: fdupes Running: feh Running: flasm Running: flex Running: foremost Running: g++ Running: gawk Running: gcc Running: gdb Running: gddrescue Running: ghex Running: git Running: graphviz Running: grepcidr Running: gthumb Running: gzrt Running: hexedit Running: htop Running: hydra Running: hydra-gtk Running: ipython Running: jq Running: kdiff3 Running: knocker Running: kpartx Running: lft Running: libafflib-dev Running: libafflib0v5 Running: libbde Running: libbde-tools Running: libdatetime-perl Running: libesedb Running: libesedb-tools Running: libevt Running: libevt-tools Running: libevtx Running: libevtx-tools Running: libewf Running: libewf-dev Running: libewf-python Running: libewf-tools Running: libffi-dev Running: libfsapfs-tools Running: libfuse-dev Running: libfvde Running: libfvde-tools Running: libguestfs-tools Running: liblightgrep Running: libmsiecf Running: libncurses5-dev Running: libnet1 Running: libolecf Running: libparse-win32registry-perl Running: sift-package-libpff Running: sift-package-libpff-dev Running: sift-package-libpff-python Running: sift-package-libpff-tools Running: libplist-utils Running: libregf Running: libregf-dev Running: libregf-python Running: libregf-tools Running: libssl-dev Running: libtext-csv-perl Running: libvmdk Running: libvshadow Running: libvshadow-dev Running: libvshadow-python Running: libvshadow-tools Running: libxml2-dev Running: libxslt1-dev Running: md5deep Running: nbd-client Running: nbtscan Running: netcat-openbsd Running: netpbm Running: netsed Running: netwox Running: nfdump Running: ngrep Running: nikto Running: okular Running: open-iscsi Running: openjdk-8-jdk Running: ophcrack Running: ophcrack-cli Running: outguess Running: p0f Running: p7zip-full Running: malteworld-repo Running: pdftk Running: sift-package-pdftk-distro Running: perl Running: perl -MCPAN -e 'my $c = "CPAN::HandleConfig"; $c->load(doit => 1, autoconfig => 1); $c->edit(prerequisites_policy => "follow"); $c->edit(build_requires_install_policy => "yes"); $c->commit' Running: pev Running: phonon Running: pkg-config Running: python-plaso Running: python-dfvfs Running: python Running: python3-xlsxwriter Running: python-xlsxwriter Running: python-dfvfs Running: python-plaso Running: plaso-tools Running: /var/cache/sift/archives/powershell_6.2.0-1.ubuntu.18.04_amd64.deb Running: sift-powershell Running: sift-package-powershell-distro Running: pv Running: pyew Running: python-dev Running: sift-package-python-flowgrep Running: python-fuse Running: python-nids Running: python-pefile Running: python-pip Running: pytsk3 Running: python-pytsk3 Running: python-qt4 Running: python-tk Running: python-virtualenv Running: python-yara Running: python3 Running: python3-pip Running: qemu Running: qemu-utils Running: radare2 Running: rar Running: pst-utils Running: sift-package-readpst-distro Running: rsakeyfind Running: safecopy Running: samba Running: samdump2 Running: scalpel Running: sleuthkit Running: socat Running: ssdeep Running: ssldump Running: sslsniff Running: stunnel4 Running: system-config-samba Running: tcl Running: tcpflow Running: tcpick Running: tcpreplay Running: tcpslice Running: tcpstat Running: tcptrace Running: tcptrack Running: tcpxtract Running: testdisk Running: tofrodos Running: transmission Running: unity-control-center Running: unrar Running: upx-ucl Running: vbindiff Running: vim Running: virtuoso-minimal Running: vmfs-tools Running: winbind Running: wine-stable Running: sift-package-wine-distro Running: wireshark Running: xdot Running: xfsprogs Running: xmount Running: xpdf Running: zenity Running: sift-packages Running: git+https://github.com/dkovar/analyzeMFT.git@64c71d7c8905a119b7abdf9813e6ef5f11d3ccf1 Running: git+https://github.com/mbevilacqua/appcompatprocessor.git@46ba76a73fcf71640f2a6e9db02afaaac3e178b9 Running: argparse Running: bitstring Running: colorama Running: construct Running: distorm3 Running: docopt Running: geoip2 Running: lxml Running: ioc_writer Running: defang==0.5.2 Running: machinae Running: git+https://github.com/csababarta/ntdsxtract.git@7fa1c8c28cbbf97a42bef40f20009dba85e4c25f Running: sift-python-ntdsxtract-distro Running: pefile Running: pip==9.0.3 Running: pysocks Running: python-dateutil >= 2.4.2 Running: python-evtx Running: python-magic Running: python-registry Running: setuptools Running: wheel Running: /opt/rekall Running: rekall Running: /usr/local/bin/rekall Running: six Running: stix Running: stix-validator Running: timesketch Running: unicodecsv Running: usnparser Running: virustotal-api Running: python-m2crypto Running: swig Running: m2crypto Running: dpapick Running: haystack Running: pycoin Running: simplejson Running: yara-python Running: git+https://github.com/volatilityfoundation/volatility.git@2.6.1 Running: https://github.com/sans-dfir/volatility-plugins-community.git Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/sift/ Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/malprocfind.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/idxparser.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/chromehistory.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/mimikatz.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/openioc_scan.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/pstotal.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/firefoxhistory.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/autoruns.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/malfinddeep.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/prefetch.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/ssdeepscan.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/uninstallinfo.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/trustrecords.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/usnparser.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/apihooksdeep.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/editbox.py Running: /usr/local/lib/python2.7/dist-packages/volatility/plugins/javarat.py Running: sift-python-volatility-distro Running: windowsprefetch Running: sift-python-packages Running: https://github.com/cheeky4n6monkey/4n6-scripts.git Running: /usr/local/bin/WP8_AppPerms.py Running: /usr/local/bin/bing-bar-parser.pl Running: /usr/local/bin/chunkymonkey.py Running: /usr/local/bin/dextract.def Running: /usr/local/bin/dextract.py Running: /usr/local/bin/docx-font-extractor.pl Running: /usr/local/bin/exif2map.pl Running: /usr/local/bin/fbmsg-extractor.py Running: /usr/local/bin/gis4cookie.pl Running: /usr/local/bin/google-ei-time.py Running: /usr/local/bin/imgcache-parse-mod.py Running: /usr/local/bin/imgcache-parse.py Running: /usr/local/bin/json-printer.pl Running: /usr/local/bin/msoffice-pic-extractor.py Running: /usr/local/bin/plist2db.py Running: /usr/local/bin/print_apk_perms.py Running: /usr/local/bin/s2-cellid2latlong.py Running: /usr/local/bin/s2-latlong2cellid.py Running: /usr/local/bin/sms-grep-sample-config.txt Running: /usr/local/bin/sms-grep.pl Running: /usr/local/bin/sqlite-base64-decode.py Running: /usr/local/bin/sqlite-blob-dumper.py Running: /usr/local/bin/sqlite-parser.pl Running: /usr/local/bin/squirrelgripper-README.txt Running: /usr/local/bin/squirrelgripper.pl Running: /usr/local/bin/timediff32.pl Running: /usr/local/bin/vmail-db-2-html.pl Running: /usr/local/bin/wp8-1-callhistory.py Running: /usr/local/bin/wp8-1-contacts.py Running: /usr/local/bin/wp8-1-mms-filesort.py Running: /usr/local/bin/wp8-1-mms.py Running: /usr/local/bin/wp8-1-sms.py Running: /usr/local/bin/wp8-callhistory.py Running: /usr/local/bin/wp8-contacts.py Running: /usr/local/bin/wp8-fb-msg.py Running: /usr/local/bin/wp8-sha256-pin-finder.py Running: /usr/local/bin/wp8-sms.py Running: /usr/local/bin/wwf-chat-parser.py Running: /usr/local/bin/afterglow.pl Running: /usr/local/bin/afterglow.pl Running: sift-script-afterglow Running: /usr/local/bin/amcache.py Running: /usr/local/bin/amcache.py Running: /var/www/html/cyberchef Running: /var/www/html/cyberchef/index.html Running: /usr/local/src/densityscout/densityscout_build_45_linux Running: /usr/local/bin/densityscout-build-45 Running: /usr/local/bin/densityscout Running: /usr/local/bin/dumbpig.pl Running: /usr/local/bin/dump-mft-entry.pl Running: /usr/local/bin/dump-mft-entry.pl Running: /usr/local/bin/imageMounter.py Running: /usr/local/bin/idx_parser.py Running: /usr/local/bin/jobparser.py Running: https://github.com/keydet89/Tools.git Running: /usr/local/bin/bodyfile.pl Running: /usr/local/bin/bodyfile.pl Running: /usr/local/bin/evtparse.pl Running: /usr/local/bin/evtparse.pl Running: /usr/local/bin/evtrpt.pl Running: /usr/local/bin/evtrpt.pl Running: /usr/local/bin/evtxparse.pl Running: /usr/local/bin/evtxparse.pl Running: /usr/local/bin/fb.pl Running: /usr/local/bin/fb.pl Running: /usr/local/bin/ff.pl Running: /usr/local/bin/ff.pl Running: /usr/local/bin/ff_signons.pl Running: /usr/local/bin/ff_signons.pl Running: /usr/local/bin/ftkparse.pl Running: /usr/local/bin/ftkparse.pl Running: /usr/local/bin/idx.pl Running: /usr/local/bin/idx.pl Running: /usr/local/bin/idxparse.pl Running: /usr/local/bin/idxparse.pl Running: /usr/local/bin/jl.pl Running: /usr/local/bin/jl.pl Running: /usr/local/bin/jobparse.pl Running: /usr/local/bin/jobparse.pl Running: /usr/local/bin/lfle.pl Running: /usr/local/bin/lfle.pl Running: /usr/local/bin/lnk.pl Running: /usr/local/bin/lnk.pl Running: /usr/local/bin/mft.pl Running: /usr/local/bin/mft.pl Running: /usr/local/bin/parse.pl Running: /usr/local/bin/parse.pl Running: /usr/local/bin/parsei30.pl Running: /usr/local/bin/parsei30.pl Running: /usr/local/bin/parseie.pl Running: /usr/local/bin/parseie.pl Running: /usr/local/bin/pie.pl Running: /usr/local/bin/pie.pl Running: /usr/local/bin/pref.pl Running: /usr/local/bin/pref.pl Running: /usr/local/bin/rawie.pl Running: /usr/local/bin/rawie.pl Running: /usr/local/bin/recbin.pl Running: /usr/local/bin/recbin.pl Running: /usr/local/bin/regslack.pl Running: /usr/local/bin/regslack.pl Running: /usr/local/bin/regtime.pl Running: /usr/local/bin/regtime.pl Running: /usr/local/bin/rfc.pl Running: /usr/local/bin/rfc.pl Running: /usr/local/bin/rlo.pl Running: /usr/local/bin/rlo.pl Running: /usr/local/bin/tln.pl Running: /usr/local/bin/tln.pl Running: /usr/local/bin/usnj.pl Running: /usr/local/bin/usnj.pl Running: /usr/local/bin/packerid.py Running: /usr/local/bin/packerid.py Running: /usr/local/bin Running: /usr/local/bin/parseusn.py Running: /usr/local/bin Running: /usr/local/bin/pecarve.py Running: /usr/local/bin/pecarve.py Running: git+https://github.com/jtpereyda/libdasm.git@68d61b1#egg=version_subpkg&subdirectory=pydasm Running: /usr/local/bin/pescanner.py Running: https://github.com/keydet89/RegRipper2.8.git Running: /usr/share/regripper Running: /usr/share/regripper/rip.pl Running: /usr/share/regripper/plugins Running: /usr/local/bin/rip.pl Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "All" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/all Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "All" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/all Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "NTUSER" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/ntuser Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "NTUSER" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/ntuser Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "USRCLASS" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/usrclass Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "USRCLASS" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/usrclass Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "SAM" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/sam Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "SAM" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/sam Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "Security" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/security Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "Security" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/security Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "Software" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/software Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "Software" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/software Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "System" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/system Running: grep -R "my %config = (hive" /usr/share/regripper/plugins | grep "System" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed 's/.pl$//' > /usr/share/regripper/plugins/system Running: /usr/local/bin/set-display-scale Running: /usr/local/bin/ShimCacheParser.py Running: /usr/local/bin/ShimCacheParser.py Running: /usr/share/sift/resources Running: /usr/share/sift/images Running: /usr/share/sift/audio Running: /usr/share/sift/other Running: /usr/share/sift/scripts Running: /usr/share/sift Running: /usr/share/tsk/sorter Running: /usr/share/tsk/sorter Running: /usr/local/bin/fun_stuff.pl Running: /usr/local/bin/sqlite_miner.pl Running: /usr/local/bin/sqlite_miner.pl Running: /usr/local/bin/sqlparser.py Running: /usr/local/bin/sqlparser.py Running: /usr/local/bin/usbdeviceforensics.py Running: /usr/local/bin/usbdeviceforensics.py Running: /usr/local/src/virustotal-search-v0.1.4 Running: /usr/local/bin/virustotal-search.py Running: /usr/local/src/virustotal-submit-v0.0.3 Running: /usr/local/bin/virustotal-submit.py Running: /usr/local/bin/vshot Running: sift-scripts Running: /etc/hostname Running: hostnamectl set-hostname siftworkstation Running: siftworkstation Running: ubuntu Running: /home/ubuntu/.bash_aliases Running: /home/ubuntu/.bash_aliases Running: /root/.bash_aliases Running: /home/ubuntu/.bashrc Running: /home/ubuntu/.bashrc Running: /home/ubuntu/.bashrc Running: /home/ubuntu/.bashrc Running: /home/ubuntu/.bashrc Running: /root/.bashrc Running: /root/.bashrc Running: /root/.bashrc Running: /home/ubuntu/.config/autostart Running: /home/ubuntu/Desktop/Network-Forensics-Poster.pdf Running: /home/ubuntu/Desktop/DFIR-Threat-Intel-Poster.pdf Running: /home/ubuntu/Desktop/SIFT-REMnux-Poster.pdf Running: /home/ubuntu/Desktop/Memory-Forensics-Poster.pdf Running: /home/ubuntu/Desktop/Rekall-Cheatsheet.pdf Running: /home/ubuntu/Desktop/DFIR-Smartphone-Forensics-Poster.pdf Running: /home/ubuntu/Desktop/Windows-Forensics-Poster.pdf Running: /home/ubuntu/Desktop/Find-Evil.pdf Running: /home/ubuntu/Desktop/SIFT-Cheatsheet.pdf Running: /home/ubuntu/Desktop/Linux-Shell-Survival-Guide.pdf Running: /home/ubuntu/Desktop/Windows-to-Unix-Cheatsheet.pdf Running: /home/ubuntu/Desktop/Volatility-Cheatsheet.pdf Running: /home/ubuntu/Desktop/Hex-File-Regex-Cheatsheet.pdf Running: /home/ubuntu/.rekallrc Running: /home/ubuntu/.ssh/config Running: /home/ubuntu/.ssh/config Running: /home/ubuntu/Desktop Running: /home/ubuntu/Desktop/mount_points Running: /home/ubuntu/Desktop/cases Running: /usr/share/sift/terminal-profiles.txt Running: dconf load /org/gnome/terminal/legacy/profiles:/:b1dcc9dd-5262-4d8d-a863-c897e6d979b9/ < /usr/share/sift/terminal-profiles.txt Running: sift-config-user-terminal Running: /usr/share/backgrounds Running: /usr/share/backgrounds/forensics_blue.jpg Running: gsettings set org.gnome.desktop.background picture-uri file:///usr/share/backgrounds/forensics_blue.jpg Running: /home/ubuntu/.config/autostart/ Running: /home/ubuntu/.config/autostart/gnome-terminal.desktop Running: gsettings set org.gnome.shell favorite-apps "['gnome-terminal.desktop', 'firefox.desktop', 'org.gnome.Nautilus.desktop']" Running: gsettings set org.gnome.shell.extensions.dash-to-dock dock-position BOTTOM Running: sift-config-user-theme Running: sift-config-user Running: Etc/UTC Running: /cases Running: /mnt/usb Running: /mnt/vss Running: /mnt/shadow_mount Running: /mnt/windows_mount Running: /mnt/ewf_mount Running: /mnt/e01 Running: /mnt/aff Running: /mnt/ewf Running: /mnt/bde Running: /mnt/iscsi Running: /mnt/windows_mount1 Running: /mnt/windows_mount2 Running: /mnt/windows_mount3 Running: /mnt/windows_mount4 Running: /mnt/windows_mount5 Running: /mnt/shadow_mount/vss1 Running: /mnt/shadow_mount/vss2 Running: /mnt/shadow_mount/vss3 Running: /mnt/shadow_mount/vss4 Running: /mnt/shadow_mount/vss5 Running: /mnt/shadow_mount/vss6 Running: /mnt/shadow_mount/vss7 Running: /mnt/shadow_mount/vss8 Running: /mnt/shadow_mount/vss9 Running: /mnt/shadow_mount/vss10 Running: /mnt/shadow_mount/vss11 Running: /mnt/shadow_mount/vss12 Running: /mnt/shadow_mount/vss13 Running: /mnt/shadow_mount/vss14 Running: /mnt/shadow_mount/vss15 Running: /mnt/shadow_mount/vss16 Running: /mnt/shadow_mount/vss17 Running: /mnt/shadow_mount/vss18 Running: /mnt/shadow_mount/vss19 Running: /mnt/shadow_mount/vss20 Running: /mnt/shadow_mount/vss21 Running: /mnt/shadow_mount/vss22 Running: /mnt/shadow_mount/vss23 Running: /mnt/shadow_mount/vss24 Running: /mnt/shadow_mount/vss25 Running: /mnt/shadow_mount/vss26 Running: /mnt/shadow_mount/vss27 Running: /mnt/shadow_mount/vss28 Running: /mnt/shadow_mount/vss29 Running: /mnt/shadow_mount/vss30 Running: salt-minion Running: /etc/samba/smb.conf Running: smbd Running: smbd Running: nmbd Running: nmbd Running: /etc/foremost.conf Running: /usr/local/etc/foremost.conf Running: sift-config-tools Running: sift-config Update returned exit code not zero Error: Update returned exit code not zero at ChildProcess.update.on (/snapshot/sift-cli/sift-cli.js:488:23) at emitTwo (events.js:106:13) at ChildProcess.emit (events.js:194:7) at maybeClose (internal/child_process.js:899:16) at Process.ChildProcess._handle.onexit (internal/child_process.js:226:5) ubuntu@ip-10-0-0-176:~$ scp ubuntu@ec2-52-55-57-202.compute-1.amazonaws.com:/var/cache/sift/cli/v2019.12.0/saltstack.log

ekristen commented 4 years ago

Please attach /var/cache/sift/cli/v2019.12.0/saltstack.log <--

Also please provide me with which version of the CLI you are using. You are the only one to report this and I cannot reproduce it.

Queen-Nahla commented 4 years ago

The saltstack.log I attached in my previous email is from /var/cache/sift/cli/v2019.12.0. In case it got stripped or something, I’ve attached it again.

This issue is occurring on AWS AMIs. As previously mentioned, I’ve tried Ubuntu server 16.04 and Ubuntu desktop 16.04 & 18.04. All of them have the same errors at the end of the install.

I’m running the wget commands from here to get the files: https://gist.github.com/jermdw/4dd16bceef8d032acda81907511e9099 After which I’m following steps 6 and 7 from here: https://github.com/teamdfir/sift-cli

Thank you

From: Erik Kristensen notifications@github.com Sent: Friday, December 27, 2019 12:41 PM To: teamdfir/sift sift@noreply.github.com Cc: Kristen Fettig kristen.fettig@infor.com; Author author@noreply.github.com Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please attach /var/cache/sift/cli/v2019.12.0/saltstack.log <--

Also please provide me with which version of the CLI you are using. You are the only one to report this and I cannot reproduce it.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPMNQGY5MWNNKUJXYDDQ2Y44LA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXQWQA#issuecomment-569314112, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPKKOUW643QSF5SQQCTQ2Y44LANCNFSM4J7RA6HQ.

Queen-Nahla commented 4 years ago

Sorry, the cli version is 1.5.1-beta.0-master.154cb2f

From: Kristen Fettig Sent: Friday, December 27, 2019 12:53 PM To: teamdfir/sift reply@reply.github.com; teamdfir/sift sift@noreply.github.com Cc: Author author@noreply.github.com Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

The saltstack.log I attached in my previous email is from /var/cache/sift/cli/v2019.12.0. In case it got stripped or something, I’ve attached it again.

This issue is occurring on AWS AMIs. As previously mentioned, I’ve tried Ubuntu server 16.04 and Ubuntu desktop 16.04 & 18.04. All of them have the same errors at the end of the install.

I’m running the wget commands from here to get the files: https://gist.github.com/jermdw/4dd16bceef8d032acda81907511e9099 After which I’m following steps 6 and 7 from here: https://github.com/teamdfir/sift-cli

Thank you

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com> Sent: Friday, December 27, 2019 12:41 PM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com>; Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please attach /var/cache/sift/cli/v2019.12.0/saltstack.log <--

Also please provide me with which version of the CLI you are using. You are the only one to report this and I cannot reproduce it.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPMNQGY5MWNNKUJXYDDQ2Y44LA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXQWQA#issuecomment-569314112, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPKKOUW643QSF5SQQCTQ2Y44LANCNFSM4J7RA6HQ.

ekristen commented 4 years ago

Please upgrade to the latest version of the CLI.

Sent from my iPhone

On Dec 27, 2019, at 10:54, Queen-Nahla notifications@github.com wrote:

Sorry, the cli version is 1.5.1-beta.0-master.154cb2f

From: Kristen Fettig Sent: Friday, December 27, 2019 12:53 PM To: teamdfir/sift reply@reply.github.com; teamdfir/sift sift@noreply.github.com Cc: Author author@noreply.github.com Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

The saltstack.log I attached in my previous email is from /var/cache/sift/cli/v2019.12.0. In case it got stripped or something, I’ve attached it again.

This issue is occurring on AWS AMIs. As previously mentioned, I’ve tried Ubuntu server 16.04 and Ubuntu desktop 16.04 & 18.04. All of them have the same errors at the end of the install.

I’m running the wget commands from here to get the files: https://gist.github.com/jermdw/4dd16bceef8d032acda81907511e9099 After which I’m following steps 6 and 7 from here: https://github.com/teamdfir/sift-cli

Thank you

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com> Sent: Friday, December 27, 2019 12:41 PM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com>; Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please attach /var/cache/sift/cli/v2019.12.0/saltstack.log <--

Also please provide me with which version of the CLI you are using. You are the only one to report this and I cannot reproduce it.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPMNQGY5MWNNKUJXYDDQ2Y44LA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXQWQA#issuecomment-569314112, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPKKOUW643QSF5SQQCTQ2Y44LANCNFSM4J7RA6HQ. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

Queen-Nahla commented 4 years ago

Just did when I saw I was behind. I’m trying the install again now. Thank you

From: Erik Kristensen notifications@github.com Sent: Friday, December 27, 2019 1:06 PM To: teamdfir/sift sift@noreply.github.com Cc: Kristen Fettig kristen.fettig@infor.com; Author author@noreply.github.com Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please upgrade to the latest version of the CLI.

Sent from my iPhone

On Dec 27, 2019, at 10:54, Queen-Nahla notifications@github.com wrote:

Sorry, the cli version is 1.5.1-beta.0-master.154cb2f

From: Kristen Fettig Sent: Friday, December 27, 2019 12:53 PM To: teamdfir/sift reply@reply.github.com; teamdfir/sift sift@noreply.github.com Cc: Author author@noreply.github.com Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

The saltstack.log I attached in my previous email is from /var/cache/sift/cli/v2019.12.0. In case it got stripped or something, I’ve attached it again.

This issue is occurring on AWS AMIs. As previously mentioned, I’ve tried Ubuntu server 16.04 and Ubuntu desktop 16.04 & 18.04. All of them have the same errors at the end of the install.

I’m running the wget commands from here to get the files: https://gist.github.com/jermdw/4dd16bceef8d032acda81907511e9099 After which I’m following steps 6 and 7 from here: https://github.com/teamdfir/sift-cli

Thank you

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com> Sent: Friday, December 27, 2019 12:41 PM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com>; Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please attach /var/cache/sift/cli/v2019.12.0/saltstack.log <--

Also please provide me with which version of the CLI you are using. You are the only one to report this and I cannot reproduce it.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPMNQGY5MWNNKUJXYDDQ2Y44LA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXQWQA#issuecomment-569314112, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPKKOUW643QSF5SQQCTQ2Y44LANCNFSM4J7RA6HQ. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPKYHPKCJ2JQR6NH6YLQ2Y7YTA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXRVQY#issuecomment-569318083, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPLCAZVOEEKZB3DKHOTQ2Y7YTANCNFSM4J7RA6HQ.

Queen-Nahla commented 4 years ago

This is what happens after updating the cli:

Incomplete due to Failures -- Success: 547, Failure: 4

List of Failures (first 10 only)

 NOTE: First failure is generally the root cause.

 IMPORTANT: If opening a ticket, please include this information.

  - ID: sift-scripts-cyberchef-index
    SLS: sift.scripts.cyberchef
    Run#: 335
    Comment: The target file "/var/www/html/cyberchef/index.html" exists and will not be overwritten
  - ID: undefined
    SLS: sift.scripts
    Run#: 453
    Comment: One or more requisite failed: sift.scripts.cyberchef.sift-scripts-cyberchef-index
  - ID: undefined
    SLS: sift.server
    Run#: 454
    Comment: One or more requisite failed: sift.scripts.sift-scripts
  - ID: undefined
    SLS: sift.desktop
    Run#: 557
    Comment: One or more requisite failed: sift.server.sift-server-version-file

New log is attached

From: Erik Kristensen notifications@github.com Sent: Friday, December 27, 2019 1:06 PM To: teamdfir/sift sift@noreply.github.com Cc: Kristen Fettig kristen.fettig@infor.com; Author author@noreply.github.com Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please upgrade to the latest version of the CLI.

Sent from my iPhone

On Dec 27, 2019, at 10:54, Queen-Nahla notifications@github.com wrote:

Sorry, the cli version is 1.5.1-beta.0-master.154cb2f

From: Kristen Fettig Sent: Friday, December 27, 2019 12:53 PM To: teamdfir/sift reply@reply.github.com; teamdfir/sift sift@noreply.github.com Cc: Author author@noreply.github.com Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

The saltstack.log I attached in my previous email is from /var/cache/sift/cli/v2019.12.0. In case it got stripped or something, I’ve attached it again.

This issue is occurring on AWS AMIs. As previously mentioned, I’ve tried Ubuntu server 16.04 and Ubuntu desktop 16.04 & 18.04. All of them have the same errors at the end of the install.

I’m running the wget commands from here to get the files: https://gist.github.com/jermdw/4dd16bceef8d032acda81907511e9099 After which I’m following steps 6 and 7 from here: https://github.com/teamdfir/sift-cli

Thank you

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com> Sent: Friday, December 27, 2019 12:41 PM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com>; Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please attach /var/cache/sift/cli/v2019.12.0/saltstack.log <--

Also please provide me with which version of the CLI you are using. You are the only one to report this and I cannot reproduce it.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPMNQGY5MWNNKUJXYDDQ2Y44LA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXQWQA#issuecomment-569314112, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPKKOUW643QSF5SQQCTQ2Y44LANCNFSM4J7RA6HQ. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPKYHPKCJ2JQR6NH6YLQ2Y7YTA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXRVQY#issuecomment-569318083, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPLCAZVOEEKZB3DKHOTQ2Y7YTANCNFSM4J7RA6HQ.

Queen-Nahla commented 4 years ago

Hi,

Any updates/comments?

Thanks, Kristen

From: Kristen Fettig Sent: Friday, December 27, 2019 1:26 PM To: teamdfir/sift reply@reply.github.com; teamdfir/sift sift@noreply.github.com Cc: Author author@noreply.github.com Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

This is what happens after updating the cli:

Incomplete due to Failures -- Success: 547, Failure: 4

List of Failures (first 10 only)

 NOTE: First failure is generally the root cause.

 IMPORTANT: If opening a ticket, please include this information.

  - ID: sift-scripts-cyberchef-index
    SLS: sift.scripts.cyberchef
    Run#: 335
    Comment: The target file "/var/www/html/cyberchef/index.html" exists and will not be overwritten
  - ID: undefined
    SLS: sift.scripts
    Run#: 453
    Comment: One or more requisite failed: sift.scripts.cyberchef.sift-scripts-cyberchef-index
  - ID: undefined
    SLS: sift.server
    Run#: 454
    Comment: One or more requisite failed: sift.scripts.sift-scripts
  - ID: undefined
    SLS: sift.desktop
    Run#: 557
    Comment: One or more requisite failed: sift.server.sift-server-version-file

New log is attached

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com> Sent: Friday, December 27, 2019 1:06 PM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com>; Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please upgrade to the latest version of the CLI.

Sent from my iPhone

On Dec 27, 2019, at 10:54, Queen-Nahla notifications@github.com<mailto:notifications@github.com> wrote:

Sorry, the cli version is 1.5.1-beta.0-master.154cb2f

From: Kristen Fettig Sent: Friday, December 27, 2019 12:53 PM To: teamdfir/sift reply@reply.github.com<mailto:reply@reply.github.com>; teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

The saltstack.log I attached in my previous email is from /var/cache/sift/cli/v2019.12.0. In case it got stripped or something, I’ve attached it again.

This issue is occurring on AWS AMIs. As previously mentioned, I’ve tried Ubuntu server 16.04 and Ubuntu desktop 16.04 & 18.04. All of them have the same errors at the end of the install.

I’m running the wget commands from here to get the files: https://gist.github.com/jermdw/4dd16bceef8d032acda81907511e9099 After which I’m following steps 6 and 7 from here: https://github.com/teamdfir/sift-cli

Thank you

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com<mailto:notifications@github.com%3cmailto:notifications@github.com>> Sent: Friday, December 27, 2019 12:41 PM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com<mailto:sift@noreply.github.com%3cmailto:sift@noreply.github.com>> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com<mailto:kristen.fettig@infor.com%3cmailto:kristen.fettig@infor.com>>; Author author@noreply.github.com<mailto:author@noreply.github.com<mailto:author@noreply.github.com%3cmailto:author@noreply.github.com>> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please attach /var/cache/sift/cli/v2019.12.0/saltstack.log <--

Also please provide me with which version of the CLI you are using. You are the only one to report this and I cannot reproduce it.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPMNQGY5MWNNKUJXYDDQ2Y44LA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXQWQA#issuecomment-569314112, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPKKOUW643QSF5SQQCTQ2Y44LANCNFSM4J7RA6HQ. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPKYHPKCJ2JQR6NH6YLQ2Y7YTA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXRVQY#issuecomment-569318083, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPLCAZVOEEKZB3DKHOTQ2Y7YTANCNFSM4J7RA6HQ.

ekristen commented 4 years ago

It’s 99% installed so that’s the good news.

Try the latest release, it should be fixed.

Erik

Sent from my iPhone

On Dec 30, 2019, at 14:38, Queen-Nahla notifications@github.com wrote:

Hi,

Any updates/comments?

Thanks, Kristen

From: Kristen Fettig Sent: Friday, December 27, 2019 1:26 PM To: teamdfir/sift reply@reply.github.com; teamdfir/sift sift@noreply.github.com Cc: Author author@noreply.github.com Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

This is what happens after updating the cli:

Incomplete due to Failures -- Success: 547, Failure: 4

List of Failures (first 10 only)

NOTE: First failure is generally the root cause.

IMPORTANT: If opening a ticket, please include this information.

  • ID: sift-scripts-cyberchef-index SLS: sift.scripts.cyberchef Run#: 335 Comment: The target file "/var/www/html/cyberchef/index.html" exists and will not be overwritten
  • ID: undefined SLS: sift.scripts Run#: 453 Comment: One or more requisite failed: sift.scripts.cyberchef.sift-scripts-cyberchef-index
  • ID: undefined SLS: sift.server Run#: 454 Comment: One or more requisite failed: sift.scripts.sift-scripts
  • ID: undefined SLS: sift.desktop Run#: 557 Comment: One or more requisite failed: sift.server.sift-server-version-file

New log is attached

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com> Sent: Friday, December 27, 2019 1:06 PM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com>; Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please upgrade to the latest version of the CLI.

Sent from my iPhone

On Dec 27, 2019, at 10:54, Queen-Nahla notifications@github.com<mailto:notifications@github.com> wrote:

Sorry, the cli version is 1.5.1-beta.0-master.154cb2f

From: Kristen Fettig Sent: Friday, December 27, 2019 12:53 PM To: teamdfir/sift reply@reply.github.com<mailto:reply@reply.github.com>; teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

The saltstack.log I attached in my previous email is from /var/cache/sift/cli/v2019.12.0. In case it got stripped or something, I’ve attached it again.

This issue is occurring on AWS AMIs. As previously mentioned, I’ve tried Ubuntu server 16.04 and Ubuntu desktop 16.04 & 18.04. All of them have the same errors at the end of the install.

I’m running the wget commands from here to get the files: https://gist.github.com/jermdw/4dd16bceef8d032acda81907511e9099 After which I’m following steps 6 and 7 from here: https://github.com/teamdfir/sift-cli

Thank you

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com<mailto:notifications@github.com%3cmailto:notifications@github.com>> Sent: Friday, December 27, 2019 12:41 PM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com<mailto:sift@noreply.github.com%3cmailto:sift@noreply.github.com>> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com<mailto:kristen.fettig@infor.com%3cmailto:kristen.fettig@infor.com>>; Author author@noreply.github.com<mailto:author@noreply.github.com<mailto:author@noreply.github.com%3cmailto:author@noreply.github.com>> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please attach /var/cache/sift/cli/v2019.12.0/saltstack.log <--

Also please provide me with which version of the CLI you are using. You are the only one to report this and I cannot reproduce it.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPMNQGY5MWNNKUJXYDDQ2Y44LA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXQWQA#issuecomment-569314112, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPKKOUW643QSF5SQQCTQ2Y44LANCNFSM4J7RA6HQ. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPKYHPKCJ2JQR6NH6YLQ2Y7YTA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXRVQY#issuecomment-569318083, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPLCAZVOEEKZB3DKHOTQ2Y7YTANCNFSM4J7RA6HQ. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

Queen-Nahla commented 4 years ago

I’ve encountered some issues with the python venv and since both 2 and 3 are installed, I’ve set the primary version to 3.6.9. This is what I’m getting when I’m attempting the upgrade: (new log attached)

Incomplete due to Failures -- Success: 543, Failure: 8

List of Failures (first 10 only)

 NOTE: First failure is generally the root cause.

 IMPORTANT: If opening a ticket, please include this information.

  - ID: appcompatprocessor
   SLS: sift.python-packages.appcompatprocessor
    Run#: 226
    Comment: Failed to install packages: git+https://github.com/mbevilacqua/appcompatprocessor.git@46ba76a73fcf71640f2a6e9db02afaaac3e178b9. Error: Collecting git+https://github.com/mbevilacqua/appcompatprocessor.git@46ba76a73fcf71640f2a6e9db02afaaac3e178b9

Cloning https://github.com/mbevilacqua/appcompatprocessor.git (to 46ba76a73fcf71640f2a6e9db02afaaac3e178b9) to /tmp/pip-23ivq28f-build Complete output from command python setup.py egg_info: Traceback (most recent call last): File "", line 1, in File "/tmp/pip-23ivq28f-build/setup.py", line 4, in from settings import version File "/tmp/pip-23ivq28f-build/settings.py", line 9, in from Queue import Empty ModuleNotFoundError: No module named 'Queue'

----------------------------------------   Could not find a tag or branch '46ba76a73fcf71640f2a6e9db02afaaac3e178b9', assuming commit.

Command "python setup.py egg_info" failed with error code 1 in /tmp/pip-23ivq28f-build/

From: Erik Kristensen notifications@github.com Sent: Monday, December 30, 2019 11:44 PM To: teamdfir/sift sift@noreply.github.com Cc: Kristen Fettig kristen.fettig@infor.com; Author author@noreply.github.com Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

It’s 99% installed so that’s the good news.

Try the latest release, it should be fixed.

Erik

Sent from my iPhone

On Dec 30, 2019, at 14:38, Queen-Nahla notifications@github.com wrote:

Hi,

Any updates/comments?

Thanks, Kristen

From: Kristen Fettig Sent: Friday, December 27, 2019 1:26 PM To: teamdfir/sift reply@reply.github.com; teamdfir/sift sift@noreply.github.com Cc: Author author@noreply.github.com Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

This is what happens after updating the cli:

Incomplete due to Failures -- Success: 547, Failure: 4

List of Failures (first 10 only)

NOTE: First failure is generally the root cause.

IMPORTANT: If opening a ticket, please include this information.

  • ID: sift-scripts-cyberchef-index SLS: sift.scripts.cyberchef Run#: 335 Comment: The target file "/var/www/html/cyberchef/index.html" exists and will not be overwritten
  • ID: undefined SLS: sift.scripts Run#: 453 Comment: One or more requisite failed: sift.scripts.cyberchef.sift-scripts-cyberchef-index
  • ID: undefined SLS: sift.server Run#: 454 Comment: One or more requisite failed: sift.scripts.sift-scripts
  • ID: undefined SLS: sift.desktop Run#: 557 Comment: One or more requisite failed: sift.server.sift-server-version-file

New log is attached

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com> Sent: Friday, December 27, 2019 1:06 PM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com>; Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please upgrade to the latest version of the CLI.

Sent from my iPhone

On Dec 27, 2019, at 10:54, Queen-Nahla notifications@github.com<mailto:notifications@github.com> wrote:

Sorry, the cli version is 1.5.1-beta.0-master.154cb2f

From: Kristen Fettig Sent: Friday, December 27, 2019 12:53 PM To: teamdfir/sift reply@reply.github.com<mailto:reply@reply.github.com>; teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

The saltstack.log I attached in my previous email is from /var/cache/sift/cli/v2019.12.0. In case it got stripped or something, I’ve attached it again.

This issue is occurring on AWS AMIs. As previously mentioned, I’ve tried Ubuntu server 16.04 and Ubuntu desktop 16.04 & 18.04. All of them have the same errors at the end of the install.

I’m running the wget commands from here to get the files: https://gist.github.com/jermdw/4dd16bceef8d032acda81907511e9099 After which I’m following steps 6 and 7 from here: https://github.com/teamdfir/sift-cli

Thank you

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com<mailto:notifications@github.com%3cmailto:notifications@github.com>> Sent: Friday, December 27, 2019 12:41 PM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com<mailto:sift@noreply.github.com%3cmailto:sift@noreply.github.com>> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com<mailto:kristen.fettig@infor.com%3cmailto:kristen.fettig@infor.com>>; Author author@noreply.github.com<mailto:author@noreply.github.com<mailto:author@noreply.github.com%3cmailto:author@noreply.github.com>> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Please attach /var/cache/sift/cli/v2019.12.0/saltstack.log <--

Also please provide me with which version of the CLI you are using. You are the only one to report this and I cannot reproduce it.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPMNQGY5MWNNKUJXYDDQ2Y44LA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXQWQA#issuecomment-569314112, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPKKOUW643QSF5SQQCTQ2Y44LANCNFSM4J7RA6HQ. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPKYHPKCJ2JQR6NH6YLQ2Y7YTA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHXRVQY#issuecomment-569318083, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPLCAZVOEEKZB3DKHOTQ2Y7YTANCNFSM4J7RA6HQ. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPJEJK5MMNSYMQMV7R3Q3LE23A5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEH3WV7I#issuecomment-569862909, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPMXCYDIA5VO5DS2BTDQ3LE23ANCNFSM4J7RA6HQ.

mrh1 commented 4 years ago

It’s 99% installed so that’s the good news. Try the latest release, it should be fixed. Erik

I just installed a fresh Ubuntu 18.04 as a VM in VirtualBox, did an apt install and upgrade, then downloaded and ran the latest CLI 1.8. First, it failed due to a network problem (when trying to install wine). I re-ran the install, it successfully installed wine this time but it failed with the same error that Queen-Nahla reported.

I removed the /var/www/html/cyberchef/index.html file and reran the install. That completed successfully.

Incomplete due to Failures -- Success: 547, Failure: 4

List of Failures (first 10 only) NOTE: First failure is generally the root cause.

 IMPORTANT: If opening a ticket, please include this information.

  - ID: sift-scripts-cyberchef-index
    SLS: sift.scripts.cyberchef
    Run#: 335
    Comment: The target file "/var/www/html/cyberchef/index.html" exists and will not be overwritten
  - ID: undefined
    SLS: sift.scripts
    Run#: 453
    Comment: One or more requisite failed: sift.scripts.cyberchef.sift-scripts-cyberchef-index
  - ID: undefined
    SLS: sift.server
    Run#: 454
    Comment: One or more requisite failed: sift.scripts.sift-scripts
  - ID: undefined
    SLS: sift.desktop
    Run#: 557
    Comment: One or more requisite failed: sift.server.sift-server-version-file
ekristen commented 4 years ago

That bug should have already been addressed. I’ll test again tonight.

Queen-Nahla commented 4 years ago

Hi,

Any updates? I’m getting the same error message:

Incomplete due to Failures -- Success: 543, Failure: 8

List of Failures (first 10 only)

 NOTE: First failure is generally the root cause.

 IMPORTANT: If opening a ticket, please include this information.

  - ID: appcompatprocessor
    SLS: sift.python-packages.appcompatprocessor
    Run#: 226
    Comment: Failed to install packages: git+https://github.com/mbevilacqua/appcompatprocessor.git@46ba76a73fcf71640f2a6e9db02afaaac3e178b9. Error: Collecting git+https://github.com/mbevilacqua/appcompatprocessor.git@46ba76a73fcf71640f2a6e9db02afaaac3e178b9

Cloning https://github.com/mbevilacqua/appcompatprocessor.git (to 46ba76a73fcf71640f2a6e9db02afaaac3e178b9) to /tmp/pip-q43e41mf-build Complete output from command python setup.py egg_info: Traceback (most recent call last): File "", line 1, in File "/tmp/pip-q43e41mf-build/setup.py", line 4, in from settings import version File "/tmp/pip-q43e41mf-build/settings.py", line 9, in from Queue import Empty ModuleNotFoundError: No module named 'Queue'

From: Erik Kristensen notifications@github.com Sent: Saturday, January 4, 2020 7:24 PM To: teamdfir/sift sift@noreply.github.com Cc: Kristen Fettig kristen.fettig@infor.com; Author author@noreply.github.com Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

That bug should have already been addressed. I’ll test again tonight.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPJ7DHB7XZWUQULSLZLQ4ESDNA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEIDDK7Q#issuecomment-570832254, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPNNID4SKYZLXP5RGJDQ4ESDNANCNFSM4J7RA6HQ.

ekristen commented 4 years ago

The latest solves it. v2020.1.0

Queen-Nahla commented 4 years ago

Hi,

Unfortunately still getting the same/similar error when attempting to upgrade to latest version. Latest log attached.

Incomplete due to Failures -- Success: 551, Failure: 6

List of Failures (first 10 only)

 NOTE: First failure is generally the root cause.

 IMPORTANT: If opening a ticket, please include this information.

  - ID: appcompatprocessor
    SLS: sift.python-packages.appcompatprocessor
    Run#: 226
    Comment: Failed to install packages: git+https://github.com/mbevilacqua/appcompatprocessor.git@46ba76a73fcf71640f2a6e9db02afaaac3e178b9. Error: Collecting git+https://github.com/mbevilacqua/appcompatprocessor.git@46ba76a73fcf71640f2a6e9db02afaaac3e178b9

Cloning https://github.com/mbevilacqua/appcompatprocessor.git (to 46ba76a73fcf71640f2a6e9db02afaaac3e178b9) to /tmp/pip-treg2cr4-build Complete output from command python setup.py egg_info: Traceback (most recent call last): File "", line 1, in File "/tmp/pip-treg2cr4-build/setup.py", line 4, in from settings import version File "/tmp/pip-treg2cr4-build/settings.py", line 9, in from Queue import Empty ModuleNotFoundError: No module named 'Queue'

----------------------------------------   Could not find a tag or branch '46ba76a73fcf71640f2a6e9db02afaaac3e178b9', assuming commit.

Command "python setup.py egg_info" failed with error code 1 in /tmp/pip-treg2cr4-build/

From: Erik Kristensen notifications@github.com Sent: Tuesday, January 7, 2020 11:44 AM To: teamdfir/sift sift@noreply.github.com Cc: Kristen Fettig kristen.fettig@infor.com; Author author@noreply.github.com Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

The latest solves it. v2020.1.0

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPPX5U43RBNLICQFFVTQ4SWNZA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEIJP5NY#issuecomment-571670199, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPKBHXFTT4K424OBXUDQ4SWNZANCNFSM4J7RA6HQ.

Queen-Nahla commented 4 years ago

Hello,

Any updates?

Thank you, Kristen

From: Kristen Fettig Sent: Tuesday, January 7, 2020 5:57 PM To: teamdfir/sift reply@reply.github.com; teamdfir/sift sift@noreply.github.com Cc: Author author@noreply.github.com Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Hi,

Unfortunately still getting the same/similar error when attempting to upgrade to latest version. Latest log attached.

Incomplete due to Failures -- Success: 551, Failure: 6

List of Failures (first 10 only)

 NOTE: First failure is generally the root cause.

 IMPORTANT: If opening a ticket, please include this information.

  - ID: appcompatprocessor
    SLS: sift.python-packages.appcompatprocessor
    Run#: 226
    Comment: Failed to install packages: git+https://github.com/mbevilacqua/appcompatprocessor.git@46ba76a73fcf71640f2a6e9db02afaaac3e178b9. Error: Collecting git+https://github.com/mbevilacqua/appcompatprocessor.git@46ba76a73fcf71640f2a6e9db02afaaac3e178b9

Cloning https://github.com/mbevilacqua/appcompatprocessor.git (to 46ba76a73fcf71640f2a6e9db02afaaac3e178b9) to /tmp/pip-treg2cr4-build Complete output from command python setup.py egg_info: Traceback (most recent call last): File "", line 1, in File "/tmp/pip-treg2cr4-build/setup.py", line 4, in from settings import version File "/tmp/pip-treg2cr4-build/settings.py", line 9, in from Queue import Empty ModuleNotFoundError: No module named 'Queue'

----------------------------------------   Could not find a tag or branch '46ba76a73fcf71640f2a6e9db02afaaac3e178b9', assuming commit.

Command "python setup.py egg_info" failed with error code 1 in /tmp/pip-treg2cr4-build/

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com> Sent: Tuesday, January 7, 2020 11:44 AM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com>; Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

The latest solves it. v2020.1.0

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPPX5U43RBNLICQFFVTQ4SWNZA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEIJP5NY#issuecomment-571670199, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPKBHXFTT4K424OBXUDQ4SWNZANCNFSM4J7RA6HQ.

mrh1 commented 4 years ago

Kristen, Erik Kristensen said this in a January 7 email: The latest solves it. v2020.1.0

I don't see that as a release yet, though.

-Mark

On Tuesday, January 14, 2020, 10:21:33 AM PST, Queen-Nahla notifications@github.com wrote:

Hello,

Any updates?

Thank you, Kristen

From: Kristen Fettig Sent: Tuesday, January 7, 2020 5:57 PM To: teamdfir/sift reply@reply.github.com; teamdfir/sift sift@noreply.github.com Cc: Author author@noreply.github.com Subject: RE: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Hi,

Unfortunately still getting the same/similar error when attempting to upgrade to latest version. Latest log attached.

Incomplete due to Failures -- Success: 551, Failure: 6

List of Failures (first 10 only)

NOTE: First failure is generally the root cause.

IMPORTANT: If opening a ticket, please include this information.

From: Erik Kristensen notifications@github.com<mailto:notifications@github.com> Sent: Tuesday, January 7, 2020 11:44 AM To: teamdfir/sift sift@noreply.github.com<mailto:sift@noreply.github.com> Cc: Kristen Fettig kristen.fettig@infor.com<mailto:kristen.fettig@infor.com>; Author author@noreply.github.com<mailto:author@noreply.github.com> Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

The latest solves it. v2020.1.0

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPPX5U43RBNLICQFFVTQ4SWNZA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEIJP5NY#issuecomment-571670199, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPKBHXFTT4K424OBXUDQ4SWNZANCNFSM4J7RA6HQ.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

mrh1 commented 4 years ago

Is that a new release, or will be release 4.8? Or do you mean the latest checked-in software fixes the problem, but I need to build it myself?

On Tuesday, January 7, 2020, 8:44:14 AM PST, Erik Kristensen <notifications@github.com> wrote:

The latest solves it. v2020.1.0

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

mrh1 commented 4 years ago

Or did you mean the latest version of SIFT?

On Tuesday, January 7, 2020, 8:44:14 AM PST, Erik Kristensen <notifications@github.com> wrote:

The latest solves it. v2020.1.0

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

Queen-Nahla commented 4 years ago

When running sift install or sift upgrade the version being installed is v2020.1.0, but I'm still getting the same/similar message:

mrh1 commented 4 years ago

Perhaps I've mixed up the responses for different issues. Are you having a problem with sift-cli, Rekall or with sleuthkit-java?  On Thursday, January 16, 2020, 05:14:37 AM PST, Queen-Nahla notifications@github.com wrote:

When running sift install or sift upgrade the version being installed is v2020.1.0, but I'm still getting the same/similar message:

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

Queen-Nahla commented 4 years ago

My issue is that I can't get the SIFT workstation to install. Haven't made it to the point of being able to use it.

mrh1 commented 4 years ago

Did you try to install it after a clean install of Ubuntu Linux? I had no problems when I first created a new Ubuntu 18.04, did all of the updates/upgrades, then downloaded and ran sift-cli.

On Thursday, January 16, 2020, 6:03:04 AM PST, Queen-Nahla <notifications@github.com> wrote:

My issue is that I can't get the SIFT workstation to install. Haven't made it to the point of being able to use it.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

Queen-Nahla commented 4 years ago

Yes. I’m attempting this in AWS, though, so that must make a difference. I’ve tried 6 different AMIs of 18.04 and 16.04 and have had issues on all of them. Is it possible to install an older version of SIFT? This was done in the past (2017/2018) by a previous colleague. Unfortunately no one can authenticate to the instance he built because we don’t have his keys.

From: mrh1 notifications@github.com Sent: Saturday, January 18, 2020 7:27 PM To: teamdfir/sift sift@noreply.github.com Cc: Kristen Fettig kristen.fettig@infor.com; Author author@noreply.github.com Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Did you try to install it after a clean install of Ubuntu Linux? I had no problems when I first created a new Ubuntu 18.04, did all of the updates/upgrades, then downloaded and ran sift-cli.

On Thursday, January 16, 2020, 6:03:04 AM PST, Queen-Nahla notifications@github.com wrote:

My issue is that I can't get the SIFT workstation to install. Haven't made it to the point of being able to use it.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPKMJCRTB5CAQYJKB4LQ6OM57A5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJKFHXA#issuecomment-575951836, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPJ5VZPFYQGZAQN45TTQ6OM57ANCNFSM4J7RA6HQ.

ekristen commented 4 years ago

We have a prebuilt AMI you can test.

https://github.com/teamdfir/sift/issues/407#issuecomment-569567335

Only in us-west-2 at the moment.

Sent from my iPhone

On Jan 21, 2020, at 07:32, Queen-Nahla notifications@github.com wrote:

Yes. I’m attempting this in AWS, though, so that must make a difference. I’ve tried 6 different AMIs of 18.04 and 16.04 and have had issues on all of them. Is it possible to install an older version of SIFT? This was done in the past (2017/2018) by a previous colleague. Unfortunately no one can authenticate to the instance he built because we don’t have his keys.

From: mrh1 notifications@github.com Sent: Saturday, January 18, 2020 7:27 PM To: teamdfir/sift sift@noreply.github.com Cc: Kristen Fettig kristen.fettig@infor.com; Author author@noreply.github.com Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Did you try to install it after a clean install of Ubuntu Linux? I had no problems when I first created a new Ubuntu 18.04, did all of the updates/upgrades, then downloaded and ran sift-cli.

On Thursday, January 16, 2020, 6:03:04 AM PST, Queen-Nahla notifications@github.com wrote:

My issue is that I can't get the SIFT workstation to install. Haven't made it to the point of being able to use it.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPKMJCRTB5CAQYJKB4LQ6OM57A5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJKFHXA#issuecomment-575951836, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPJ5VZPFYQGZAQN45TTQ6OM57ANCNFSM4J7RA6HQ. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

Queen-Nahla commented 4 years ago

Cool, thanks! I’ll check it out today.

From: Erik Kristensen notifications@github.com Sent: Tuesday, January 21, 2020 8:23 AM To: teamdfir/sift sift@noreply.github.com Cc: Kristen Fettig kristen.fettig@infor.com; Author author@noreply.github.com Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

We have a prebuilt AMI you can test.

https://github.com/teamdfir/sift/issues/407#issuecomment-569567335

Only in us-west-2 at the moment.

Sent from my iPhone

On Jan 21, 2020, at 07:32, Queen-Nahla notifications@github.com wrote:

Yes. I’m attempting this in AWS, though, so that must make a difference. I’ve tried 6 different AMIs of 18.04 and 16.04 and have had issues on all of them. Is it possible to install an older version of SIFT? This was done in the past (2017/2018) by a previous colleague. Unfortunately no one can authenticate to the instance he built because we don’t have his keys.

From: mrh1 notifications@github.com Sent: Saturday, January 18, 2020 7:27 PM To: teamdfir/sift sift@noreply.github.com Cc: Kristen Fettig kristen.fettig@infor.com; Author author@noreply.github.com Subject: Re: [teamdfir/sift] Issue installing v2019.12.0 (#419)

Sent by an external sender

Did you try to install it after a clean install of Ubuntu Linux? I had no problems when I first created a new Ubuntu 18.04, did all of the updates/upgrades, then downloaded and ran sift-cli.

On Thursday, January 16, 2020, 6:03:04 AM PST, Queen-Nahla notifications@github.com wrote:

My issue is that I can't get the SIFT workstation to install. Haven't made it to the point of being able to use it.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPKMJCRTB5CAQYJKB4LQ6OM57A5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJKFHXA#issuecomment-575951836, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPJ5VZPFYQGZAQN45TTQ6OM57ANCNFSM4J7RA6HQ. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/teamdfir/sift/issues/419?email_source=notifications&email_token=AMVCZPMFNDCAQMWNK7YXGDTQ63ZLZA5CNFSM4J7RA6H2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJPW3EA#issuecomment-576679312, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMVCZPJUHA3SMJHEE7CIZVLQ63ZLZANCNFSM4J7RA6HQ.

ekristen commented 4 years ago

Issue maintenance. Closing. Seems like the issue is likely resolved. If you are still having issues please install the latest version of the CLI and install the latest version of SIFT using it.