jaywalker
(Jaywalker)
October 2, 2023, 3:28pm
1
Hello,
the admin manual for NS8 beta 2 states regarding the crowdsec app:
To get a list of protected applications, access the server using SSH and type: cscli collection list
This is not working - there is no “cscli” command available on the server:
root@debiantest:~# cscli
-bash: cscli: Kommando nicht gefunden.
How can I interact with the running crowdsec instance?
You might not have the path setup for your profile?
Do you see cscli
binary within /usr/local/bin/cscli
OR /usr/bin/cscli
?
1 Like
jaywalker
(Jaywalker)
October 2, 2023, 4:25pm
3
Hi,
no, there is no cscli in /usr/bin or /usr/local/bin.
Can this be an error in the installation that could be fixed by deleting and reinstalling crowdsec?
jaywalker
(Jaywalker)
October 2, 2023, 5:17pm
4
I tried to reinstall crowdsec, i.e., I deleted it from the admin interface, and then added a new instance. Now I get an error " Subtask cluster/create-module failed".
Details of the errors during installation are below.
cluster/add-module:
<7>podman-pull-missing Package crowdsec · GitHub
Trying to pull Package crowdsec · GitHub …
Getting image source signatures
Copying blob sha256:92d3309c7149a2a0ee83cdbf67ca58643abd60e8969764f0543c031f67a5c25c
Copying config sha256:8ea44dcf3b65a8dcb6f50d2d1148672ede301f86a641152a970cc62a89ad3822
Writing manifest to image destination
Storing signatures
8ea44dcf3b65a8dcb6f50d2d1148672ede301f86a641152a970cc62a89ad3822
<7>extract-ui Package crowdsec · GitHub
Extracting container filesystem ui to /var/lib/nethserver/cluster/ui/apps/crowdsec3
ui/css/
ui/css/about~31ecd969.c692aa7f.css
ui/css/app~748942c6.47ba6839.css
ui/i18n/
ui/i18n/en/
ui/i18n/en/translation.json
ui/i18n/it/
ui/i18n/it/translation.json
ui/img/
ui/img/module_default_logo.ed42e539.png
ui/index.html
ui/js/
ui/js/about~31ecd969.ac7a172a.js
ui/js/about~31ecd969.ac7a172a.js.map
ui/js/app~748942c6.4d38590a.js
ui/js/app~748942c6.4d38590a.js.map
ui/js/chunk-vendors~0605657e.7f254d6a.js
ui/js/chunk-vendors~0605657e.7f254d6a.js.map
ui/js/chunk-vendors~0f485567.78f39f25.js
ui/js/chunk-vendors~0f485567.78f39f25.js.map
ui/js/chunk-vendors~17faf02d.7f68aab6.js
ui/js/chunk-vendors~17faf02d.7f68aab6.js.map
ui/js/chunk-vendors~1d97ff09.290bda9d.js
ui/js/chunk-vendors~1d97ff09.290bda9d.js.map
ui/js/chunk-vendors~2a42e354.0df57e14.js
ui/js/chunk-vendors~2a42e354.0df57e14.js.map
ui/js/chunk-vendors~2aa62147.38204dba.js
ui/js/chunk-vendors~2aa62147.38204dba.js.map
ui/js/chunk-vendors~41d44f25.e7779fa1.js
ui/js/chunk-vendors~41d44f25.e7779fa1.js.map
ui/js/chunk-vendors~46852254.0b6d19c2.js
ui/js/chunk-vendors~46852254.0b6d19c2.js.map
ui/js/chunk-vendors~57473a66.f586d2ed.js
ui/js/chunk-vendors~57473a66.f586d2ed.js.map
ui/js/chunk-vendors~5bb1f863.3efba861.js
ui/js/chunk-vendors~5bb1f863.3efba861.js.map
ui/js/chunk-vendors~5eba3806.b8428291.js
ui/js/chunk-vendors~5eba3806.b8428291.js.map
ui/js/chunk-vendors~690b702c.fd888ae3.js
ui/js/chunk-vendors~690b702c.fd888ae3.js.map
ui/js/chunk-vendors~7274e1de.dc9fe008.js
ui/js/chunk-vendors~7274e1de.dc9fe008.js.map
ui/js/chunk-vendors~86f6b1bc.be2cf131.js
ui/js/chunk-vendors~86f6b1bc.be2cf131.js.map
ui/js/chunk-vendors~b5906859.deff14e4.js
ui/js/chunk-vendors~b5906859.deff14e4.js.map
ui/js/chunk-vendors~bc21d4b3.68b10b46.js
ui/js/chunk-vendors~bc21d4b3.68b10b46.js.map
ui/js/chunk-vendors~be71a85b.9c367aa3.js
ui/js/chunk-vendors~be71a85b.9c367aa3.js.map
ui/js/chunk-vendors~c8728516.dd1ccc58.js
ui/js/chunk-vendors~c8728516.dd1ccc58.js.map
ui/js/chunk-vendors~d2305125.6a99a4ff.js
ui/js/chunk-vendors~d2305125.6a99a4ff.js.map
ui/js/chunk-vendors~d9886323.1a1a66f6.js
ui/js/chunk-vendors~d9886323.1a1a66f6.js.map
ui/js/chunk-vendors~db300d2f.ddb8641c.js
ui/js/chunk-vendors~db300d2f.ddb8641c.js.map
ui/js/chunk-vendors~ec8c427e.5c1734c3.js
ui/js/chunk-vendors~ec8c427e.5c1734c3.js.map
ui/js/chunk-vendors~fdc6512a.81c5c86c.js
ui/js/chunk-vendors~fdc6512a.81c5c86c.js.map
ui/js/lang-en-translation-json~9b60384d.c4816eef.js
ui/js/lang-en-translation-json~9b60384d.c4816eef.js.map
ui/js/lang-it-translation-json~e043826f.6678f236.js
ui/js/lang-it-translation-json~e043826f.6678f236.js.map
ui/metadata.json
ui/shortcuts.json
4ee865124306a2a35d3d98dde56af374553a698473da08dc7d9e1dbfe2561eb7
Assertion failed
File “/var/lib/nethserver/cluster/actions/add-module/50update”, line 223, in
agent.assert_exp(create_module_result[‘exit_code’] == 0) # Ensure create-module is successful
cluster/create-module:
/usr/bin/mkdir: Verzeichnis ‘secrets’ angelegt
debconf: kann Oberfläche nicht initialisieren: Dialog
debconf: (TERM ist nicht gesetzt, die Dialog-Oberfläche kann daher nicht verwendet werden.)
debconf: greife zurück auf die Oberfläche: Readline
debconf: kann Oberfläche nicht initialisieren: Readline
debconf: (Diese Oberfläche bedarf eines steuernden Terminals.)
debconf: greife zurück auf die Oberfläche: Teletype
dpkg-preconfigure: kann Stdin nicht wieder öffnen:
E: Sub-process /usr/bin/dpkg returned an error code (1)
jaywalker
(Jaywalker)
October 2, 2023, 5:19pm
5
Now I have a non-working crowdsec instance that I cannot uninstall anymore due to an error in “cluster/destroy-module”:
Failed to disable unit: Unit file crowdsec3.service does not exist.
stephdl
(Stéphane de Labrusse)
October 5, 2023, 1:57pm
6
Hello Laurence
Welcome here on the NethServer community. We met together on the crowdsec discord instance
I am happy to see you there
stephdl
(Stéphane de Labrusse)
October 5, 2023, 3:20pm
7
your issue is reproducible I am inspecting it
1 Like
stephdl
(Stéphane de Labrusse)
October 5, 2023, 9:10pm
8
NethServer:main
← NethServer:fixIpset
opened 04:33PM - 05 Oct 23 UTC
upgrade to 1.5.4-debian
The root cause is that with an upgrade the crowdsec-f… irewalld bouncer does a test before to start and if the confition are not satisfied it go to fail, so we canno create with a ExecStartPre like we did before
see : `ExecStartPre=/usr/bin/crowdsec-firewall-bouncer -c /etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml -t`
```
[Unit]
Description=The firewall bouncer for CrowdSec
After=syslog.target network.target remote-fs.target nss-lookup.target crowdsec.service
Before=netfilter-persistent.service
[Service]
Type=notify
ExecStart=/usr/bin/crowdsec-firewall-bouncer -c /etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml
ExecStartPre=/usr/bin/crowdsec-firewall-bouncer -c /etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml -t
ExecStartPost=/bin/sleep 0.1
Restart=always
RestartSec=10
LimitNOFILE=65536
[Install]
WantedBy=multi-user.target
```
should be fixed, we could test 1.5.4 too
jaywalker
(Jaywalker)
October 6, 2023, 8:54pm
10
@stephdl working for me, thank you.