teamdfir / sift

SIFT
MIT License
484 stars 67 forks source link

Error installing on ARM64 System #612

Closed Sherlocked97 closed 11 months ago

Sherlocked97 commented 11 months ago

When installing sift like this:

sudo cast install --mode desktop teamdfir/sift-saltstack

I get the following warning:

WARN[0000] using unauthenticated github client, could result in API rate limiting

Which then leads to the following 404 error when it gets to the point where it should download the tar file:

Prior to that I wasn't able to verify the release like this but I´m not sure if there is any correlation :

cosign verify-blob \ --key https://github.com/ekristen/cast/releases/download/v0.14.0/cosign.pub \ --signature https://github.com/ekristen/cast/releases/download/v0.14.0/cast_v0.14.0_linux_amd64.tar.gz.sig \ https://github.com/ekristen/cast/releases/download/v0.14.0/cast_v0.14.0_linux_amd64.tar.gz

or when even when I downloaded the keys and signature for the arm64 version.

Error: signature not found in transparency log main.go:74: error during command execution: signature not found in transparency log

digitalsleuth commented 11 months ago

Hi @Sherlocked97 , are you able to confirm that your Ubuntu system actually has connectivity prior to the attempted install, and that you're not behind a proxy?

Sherlocked97 commented 11 months ago

Hey @digitalsleuth, Yeah i tried pinging other websites and downloading other packages via apt and had no problems. I don't have a proxy installed either.

Also prior steps that include downloading files work without a problem: INFO[0005] downloading release file component=distro filename=sift-saltstack-2023.02.06.tar.gz.sha256.asc owner=teamdfir repo=sift-saltstack

I work on a freshly installed and updated ubuntu 22.04 VM with UTM on a MacBook with M1 so maybe there could be a problem caused by that?

ekristen commented 11 months ago

Looks like something might have broken upstream. I'll take a look today.

ekristen commented 11 months ago

Something I am not logging which I realize I should be is OS Architecture. What is the architecture of the hardware? I just ran the command without issue, getting a 404 there's only a few things I can think of that can lead to that, one being architecture mismatch.

Sherlocked97 commented 11 months ago

Architecure is ARM64. I used to prebuild Ubuntu VM from UTM: https://mac.getutm.app/gallery/ubuntu-20-04

ekristen commented 11 months ago

arm64 is not supported at this time

Sherlocked97 commented 11 months ago

Sad to hear, but thank you anyway for the fast response and help!