search

wazuh / wazuh-packages

Wazuh - Tools for packages creation
https://wazuh.com
GNU General Public License v2.0
104 stars 94 forks source link

Add procps dependency in all deployment options #2806

Closed mjcr99 closed 8 months ago

mjcr99 commented 8 months ago
Wazuh version Component Install type Install method Platform
4.7.2 Wazuh Manager and Agent Manager/Agent Packages/Sources Yum based OS

Hi team,

while researching https://github.com/wazuh/wazuh/issues/13585, it has been found that procps is a needed dependency to let wazuh start and run in deployment over yum based os.

One example of a file that should be reviewed is the wazuh-install.sh. When it's used, it shows a log where it covers this dependency:

31/01/2024 16:00:23 INFO: --- Dependencies ---
31/01/2024 16:00:23 INFO: Installing procps-ng.

But after it, the dependency is removed:

31/01/2024 16:06:31 INFO: --- Dependencies ---
31/01/2024 16:06:31 INFO: Removing procps-ng.

Then if we try to start wazuh the following logs appear:

[root@centos9s vagrant]# /var/ossec/bin/wazuh-control start
Starting Wazuh v4.7.2...
wazuh-apid: Process 5049 not used by Wazuh, removing...
wazuh-apid: Orphan child process 5190 was terminated.
wazuh-apid: Orphan child process 5193 was terminated.
wazuh-apid: Orphan child process 5196 was terminated.
wazuh-apid: Process 7255 not used by Wazuh, removing...
wazuh-apid did not start correctly.

[root@centos9s vagrant]# /var/ossec/bin/wazuh-control status
wazuh-clusterd not running...
wazuh-modulesd: Process 5271 not used by Wazuh, removing...
wazuh-modulesd not running...
wazuh-monitord: Process 5261 not used by Wazuh, removing...
wazuh-monitord not running...
wazuh-logcollector: Process 5244 not used by Wazuh, removing...
wazuh-logcollector not running...
wazuh-remoted: Process 5211 not used by Wazuh, removing...
wazuh-remoted not running...
wazuh-syscheckd: Process 5185 not used by Wazuh, removing...
wazuh-syscheckd not running...
wazuh-analysisd: Process 5141 not used by Wazuh, removing...
wazuh-analysisd not running...
wazuh-maild not running...
wazuh-execd: Process 5126 not used by Wazuh, removing...
wazuh-execd not running...
wazuh-db: Process 5103 not used by Wazuh, removing...
wazuh-db not running...
wazuh-authd: Process 5089 not used by Wazuh, removing...
wazuh-authd not running...
wazuh-agentlessd not running...
wazuh-integratord not running...
wazuh-dbd not running...
wazuh-csyslogd not running...
wazuh-apid not running...

Wazuh can not start until procps dependency is covered again.

mjcr99 commented 8 months ago

Closed as duplicated of https://github.com/wazuh/wazuh-packages/issues/2805