search

zeek / zeekctl

Tool for managing Zeek deployments.
https://www.zeek.org
Other
53 stars 43 forks source link

Cluster: 'setcap' error on each node after installation (Operation not permitted) #71

Open superzerosec opened 1 month ago

superzerosec commented 1 month ago

Hi,

I'm deploying 2x workers and 1x manager node. When I run zeekctl install or zeekctl deploy on manager node, workers keep crashing with error (Operation not permitted).

I configure zeekctl-setcap plugin as here to automatically executing 'setcap' on each node after installation.

Appreciate if can patch this bug.

Thanks.

zeekctl==2.5.0 zeek==7.0.3

awelzel commented 1 month ago

Please provide the full output of your zeekctl session, including the diag output of a worker, too. Thanks!