Wazuh Docker部署意外行为

nbnkbykc  于 2022-12-11  发布在  Docker
关注(0)|答案(1)|浏览(176)

我尝试使用以下步骤在Ubuntu EC2示例中部署Wazuh Docker容器(安装了Docker和Docker compose)。

git -c http.proxy="http://tstark:pssecrocks@172.31.245.222:8888" clone https://github.com/wazuh/wazuh-docker.git -b v4.3.10 --depth=1   
docker-compose -f generate-indexer-certs.yml run --rm generator  
docker-compose up -d

我通过代理运行并创建了以下服务

echo "[Service]" >> /etc/systemd/system/docker.service.d/proxy.conf 
echo "Environment=\"HTTP_PROXY=http://a:b@ip:port\"" >> /etc/systemd/system/docker.service.d/proxy.conf 
echo "Environment=\"HTTPS_PROXY=a:b@ip:port\"" >> /etc/systemd/system/docker.service.d/proxy.conf 
echo "Environment=\"NO_PROXY=localhost,127.0.0.1,::1\"" >> /etc/systemd/system/docker.service.d/proxy.conf

预期行为(基于普通Ubuntu 20虚拟机中的部署)

这些命令的输出应为

% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 26847  100 26847    0     0   229k      0 --:--:-- --:--:-- --:--:--  227k
Cert tool exists in Packages bucket
07/12/2022 07:45:30 INFO: Admin certificates created.
07/12/2022 07:45:30 INFO: Wazuh indexer certificates created.
07/12/2022 07:45:30 INFO: Wazuh server certificates created.
07/12/2022 07:45:30 INFO: Wazuh dashboard certificates created.
Moving created certificates to destination directory
changing certificate permissions
Setting UID indexer and dashboard
Setting UID for wazuh manager and worker

实际行为

docker-compose -f generate-indexer-certs.yml run --rm generator
Creating network "single-node_default" with the default driver
Pulling generator (wazuh/wazuh-certs-generator:0.0.1)...
0.0.1: Pulling from wazuh/wazuh-certs-generator
d7bfe07ed847: Pull complete
a6023cfa8265: Pull complete
6135753eefe9: Pull complete
9aaf0dae5d3f: Pull complete
Digest: sha256:6fc929d58d01b789d4a19c5da476c78cc267c0af07d1b22227ccae49acb084dc
Status: Downloaded newer image for wazuh/wazuh-certs-generator:0.0.1
Cert tool does not exist in any bucket
ERROR: certificates were not created

有人能告诉我是什么导致了这个错误吗?

ktecyv1j

ktecyv1j1#

由generate-indexer-certs.yml创建的容器运行一个名为entrypoint.sh的脚本。该脚本尝试从https://packages.wazuh.com/4.3/wazuh-certs-tool.sh下载一个工具。当下载失败时,将显示错误“Cert tool does not exist in any bucket”。很可能是您的容器没有功能性网络。您需要解决这个问题。

相关问题