[go: up one dir, main page]
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ARM64 Buil and Install #178

Closed
rmsferreira opened this issue Aug 26, 2024 · 6 comments
Closed

ARM64 Buil and Install #178

rmsferreira opened this issue Aug 26, 2024 · 6 comments

Comments

@rmsferreira
Copy link
rmsferreira commented Aug 26, 2024 •
edited
Loading

Dear all.

I build from repo, on Ubuntu 22.04 and Alpine, both ARM, with success.

Then I run the install scripts without error, providing the --token and --email values.

However the agent don't appears on the console.

Can you tell me how can I debug the problem.

Thanks.

rmsf@TESTOPENAPPSEC:/Users/rmsf/openappsec/build_out$ ./install-cp-nano-agent.sh --install --hybrid_mode --token xxxxxxxxx --email xxxxxxxxxxxxxrui.m.s.ferreira@outlook.com
Check Point Nano Agent Version private Install Package
Verifying archive integrity... 100% All good.
Uncompressing... 100%
Fog address='https://inext-agents.cloud.ngen.checkpoint.com'
/usr/bin/which
/usr/sbin/ldconfig

Starting installation of open-appsec Nano Agent [Mon Aug 26 23:30:08 WEST 2024]
Creating env details file
Copying cp-nano-agent binary file to folder: /etc/cp/orchestration/cp-nano-orchestration
Run Orchestration nano service in hybrid mode
Installing the watchdog
Start cp-nano-agent service
Note: in order for the agent to remain active and effective it must connect to the Fog/Cloud at least every 45 days
open-appsec Orchestration Nano Service installation completed successfully
rmsf@TESTOPENAPPSEC:/Users/rmsf/openappsec/build_out$ install-cp-nano-service-http-transaction-handler.sh –install
-bash: install-cp-nano-service-http-transaction-handler.sh: command not found
rmsf@TESTOPENAPPSEC:/Users/rmsf/openappsec/build_out$ ./install-cp-nano-service-http-transaction-handler.sh –install
Administrative privileges required for this archive (use su or sudo)
rmsf@TESTOPENAPPSEC:/Users/rmsf/openappsec/build_out$ sudo ./install-cp-nano-service-http-transaction-handler.sh –install
Check Point HTTP Transaction Handler Nano Service Version private Install Package
Verifying archive integrity... 100% All good.
Uncompressing... 100%
Check Point: available flags are
--install : install HTTP Transaction Handler Nano Service
--uninstall : remove HTTP Transaction Handler Nano Service
--pre_install_test : run Pre-installation test for HTTP Transaction Handler Nano Service install package
--post_install_test : run Post-installation test for HTTP Transaction Handler Nano Service install package
rmsf@TESTOPENAPPSEC:/Users/rmsf/openappsec/build_out$ sudo ./install-cp-nano-service-http-transaction-handler.sh --install
Check Point HTTP Transaction Handler Nano Service Version private Install Package
Verifying archive integrity... 100% All good.
Uncompressing... 100%
Starting installation of Check Point HTTP Transaction Handler service [Mon Aug 26 23:30:45 WEST 2024]

Installation completed successfully.
rmsf@TESTOPENAPPSEC:/Users/rmsf/openappsec/build_out$ sudo ./install-cp-nano-attachment-registration-manager.sh --install
Check Point Attachment Registration Manager Nano Service Version private Install Package
Verifying archive integrity... 100% All good.
Uncompressing... 100%
Starting installation of Check Point Attachment Registrator Nano service [Mon Aug 26 23:30:57 WEST 2024]

cat: /etc/cp/watchdog/platform: No such file or directory
Installation completed successfully.
@orianelou
Copy link
Collaborator

Hi @rmsferreira,

Can you please share the output of the following command - open-appsec-ctl -s to verify the agent is up and running? Also, have you verified the that connection to our fog (https://inext-agents.cloud.ngen.checkpoint.com) is allowed?

@rmsferreira
Copy link
Author
rmsferreira commented Aug 27, 2024 •
edited
Loading

Hi @orianelou,

After I compiled and package I follow install using:

For Linux, if you’ve built your own package use the following commands:

$ install-cp-nano-agent.sh --install --hybrid_mode
$ install-cp-nano-service-http-transaction-handler.sh –install
$ install-cp-nano-attachment-registration-manager.sh --install

So right now I don't have the command - open-appsec-ctl.

I try to install using:
sudo ./open-appsec-install --download
open-appsec for NGINX, Kong and APISIX Installer v1.2245.1
For release notes and known limitations check:
https://docs.openappsec.io/release-notes
Searching local NGINX…
nginx version found: 1.22.1-9
The combination of xxxxx on aarch64 is unsupported. Please see docs.openappsec.io

Thanks.

@rmsferreira
Copy link
Author

After I download the file from repo and execute:

rmsf@TESTOPENAPPSEC:~$ sudo ./appsec-ctl.sh -s
---- open-appsec Nano Agent ----
Version: -open-source
Status: Running
AI model version: Simple model V1.0
Management mode: Local management
Agent ID: 2ec80fc5-b415-4763-85af-6e514a581fcf
Policy files:
/etc/cp/conf/local_policy.yaml
Policy load status: Success
Last policy update: None

So I see even I provide the --token is still on Local Management

@rmsferreira
Copy link
Author

After I see that is Local Managed, I follow the DOC on https://www.openappsec.io/post/how-to-connect-your-locally-managed-open-appsec-deployment-to-management-portal-saas-in-two-steps.

However I have the following error:

Configuration upload to profile: Linux Embedded Agents failed. Please verify that the local policy is accurate, or contact support

@rmsferreira
Copy link
Author

Finally I figure out.
I do the following:

  1. Build from source code
  2. Install as described on the repo (the agent don't connect to management even I provide the --token)
  3. add open-appsec-ctl from repo to /usr/bin
  4. go to Management portal and do:

That works for me.

@rmsferreira
Copy link
Author

Done

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@rmsferreira @orianelou and others