我尝试使用以下步骤在Ubuntu EC2示例中部署Wazuh Docker容器(安装了Docker和Docker compose)。
git -c http.proxy="http://tstark:pssecrocks@172.31.245.222:8888" clone https://github.com/wazuh/wazuh-docker.git -b v4.3.10 --depth=1
docker-compose -f generate-indexer-certs.yml run --rm generator
docker-compose up -d
我通过代理运行并创建了以下服务
echo "[Service]" >> /etc/systemd/system/docker.service.d/proxy.conf
echo "Environment=\"HTTP_PROXY=http://a:b@ip:port\"" >> /etc/systemd/system/docker.service.d/proxy.conf
echo "Environment=\"HTTPS_PROXY=a:b@ip:port\"" >> /etc/systemd/system/docker.service.d/proxy.conf
echo "Environment=\"NO_PROXY=localhost,127.0.0.1,::1\"" >> /etc/systemd/system/docker.service.d/proxy.conf
预期行为(基于普通Ubuntu 20虚拟机中的部署)
这些命令的输出应为
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 26847 100 26847 0 0 229k 0 --:--:-- --:--:-- --:--:-- 227k
Cert tool exists in Packages bucket
07/12/2022 07:45:30 INFO: Admin certificates created.
07/12/2022 07:45:30 INFO: Wazuh indexer certificates created.
07/12/2022 07:45:30 INFO: Wazuh server certificates created.
07/12/2022 07:45:30 INFO: Wazuh dashboard certificates created.
Moving created certificates to destination directory
changing certificate permissions
Setting UID indexer and dashboard
Setting UID for wazuh manager and worker
实际行为
docker-compose -f generate-indexer-certs.yml run --rm generator
Creating network "single-node_default" with the default driver
Pulling generator (wazuh/wazuh-certs-generator:0.0.1)...
0.0.1: Pulling from wazuh/wazuh-certs-generator
d7bfe07ed847: Pull complete
a6023cfa8265: Pull complete
6135753eefe9: Pull complete
9aaf0dae5d3f: Pull complete
Digest: sha256:6fc929d58d01b789d4a19c5da476c78cc267c0af07d1b22227ccae49acb084dc
Status: Downloaded newer image for wazuh/wazuh-certs-generator:0.0.1
Cert tool does not exist in any bucket
ERROR: certificates were not created
有人能告诉我是什么导致了这个错误吗?
1条答案
按热度按时间ktecyv1j1#
由generate-indexer-certs.yml创建的容器运行一个名为entrypoint.sh的脚本。该脚本尝试从https://packages.wazuh.com/4.3/wazuh-certs-tool.sh下载一个工具。当下载失败时,将显示错误“Cert tool does not exist in any bucket”。很可能是您的容器没有功能性网络。您需要解决这个问题。