eramba / docker Goto Github PK

This shows up when I try to bulk delete default entries in Threats.
Single deleting was still fine.
The account i was using is default Admin Admin.
The app version was 3.23.2
The DB schema version was 20240104121424
And i was using Community edition.

Hello,
Eramba version 1.3.0. Following basic instructions to setup test environment on docker, the cron container crashes with this message.
Arnaud

There are some system health issues while running a docker simple installation on Windows platform

That is because when Post Installation Command is run, Security Salt is generated which should be unique for every deployment instance.

Extending the upload file limits:
post_max_size=900M
upload_max_filesize=900M

We have identified two errors being reported by the health check having followed the community Docker deployment on Ubuntu 22.04.

One is that it is claiming that the eramba web directory is not owned by www-data. However checking the owner of the directory from within the container (via docker exec) shows that it is owned by www-data.

The second one is claiming a missing privilege (PROCESS) in MySQL.

to httpd conf add this:

ServerTokens Prod
ServerSignature Off

Right now, if you are behind the proxy, you have to setup proxy settings for the docker client and also for eramba in .env file.
Docker documentation states that these proxy settings can be inherited. It would be nice to have these settings directly in eramba.
Ref.: https://docs.docker.com/network/proxy/#configure-the-docker-client

using the docker instructions for community i manage to the the stack up and running, however when i try to load the page it redirects to

https://xxxxxxxxxxx:8443/login?redirect=%2F

and when i try to login i get the follwing

tried a different browser as well and clearing cookies and such.
any idea why this happens?

By default, simple install will initialise only SSL virtual host at 8443:443 port mapping, not including non-SSL (8080:80) with redirection to make it cleaner and easier to maintain or modify.

doplnit nejaky skript ktory ulahci ludom image-switching-update tj.

• urobi docker pull na :latest tag
• stopne containery
• nastartuje kontainery s tym aby sa vykonal entrypoint

I would like to run Eramba in Azure. I've been looking around and it seems that Azure App Service seems fit, since it can use docker-compose. However, I have not been successful in deploying it on there. Are there things I should change about the compose file, or other configurations that I might need?

Thanks!

Hi all,

Does Eramba GRC support OTP when we login or something like that ?

Thank you.

Eramba works but the Dashboard never shows up (never ending rotating circle). There are no errors in logs.

Int. ref.: https://discussions.eramba.org/t/question-modifying-ldap-conf-to-include-tls-reqcert-never/2477

Provide an option to setup this variable.

Functional: instead of git pull we want to use some command line prompt to do update of the docker layer

Certifikat sa vygeneruje:

openssl req -x509 -new -out mycert.crt -keyout mycert.key -days 365 -newkey rsa:4096 -sha256 -nodes

treba tie 2 subory co to vygemeruje hodit sem:

/apache/ssl/mycert.crt
/apache/ssl/mycert.key

Rozbehat docker compose

Erambu otvorit pod https://localhost:8443

Docker instances will have possibility to configure timezone in Settings, which will then be used to run daily tasks correctly at midnight within hourly cron

ref.: https://github.com/eramba/eramba/issues/4330

Getting an error of DSN string.

Exception: The DSN string '"Redis://?server=redis&port=6379&password=&timeout=3"' could not be parsed.
In [/var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Core/StaticConfigTrait.php, line 254]

The crontab in the cron container references a main.env file (/var/www/eramba/app/upgrade/vendor/eramba/docker/main.env) which appears to only include the default credentials (DB_PASSWORD=docker).

I have supplied a custom password and updated it in the locations specified by the community deployment documentation, the compose file and the main.env file, but this change does not seem to have made it to the above location.

This causes the cron jobs to fail until I manually edited this file from within the cron container.

Cronjobs currently look like this:
@hourly export $(cat /var/www/eramba/app/upgrade/vendor/eramba/docker/main.env) && /bin/sh /var/www/eramba/app/upgrade/bin/cake cron job hourly >> /var/log/cron.log 2>&1

Either the env vars passed in by the compose file under env_file should be used, or this specific main.env file (/var/www/eramba/app/upgrade/vendor/eramba/docker/main.env) needs to be also updated by any changes made in the main.env file in the root of the Git repo.

explore option to add postfix service by default into docker

My client has a policy only to use SQLServer databases -is there a way to specify their DB server and the mssql db type?

Hi! Thank you for your work!
Can you please explain how I can tag the Eramba image in the docker-compose file for the hardcore version? eramba:latest image today was updated to version: 3.24.0. After building docker-compose with eramba tag, for example, "eramba:3.23.2" I got the latest version eramba - 3.24.0

Eramba container tries to connect to MySQL container for 5times and then gives up and continues with composing process.
We should handle this situation with a clear error that it was not able to connect to MySQL container.

Int. ref.: https://discussions.eramba.org/t/question-post-install-php-errors/2438

Forward CRON logs (/var/log/cron.log) into standard container output, now its outputting nothing.
https://github.com/nginxinc/docker-nginx/blob/8921999083def7ba43a06fabd5f80e4406651353/mainline/jessie/Dockerfile#L21-L23

I am trying to install eramba on docker runing on a synology nas. I opted for Http setup. No change to the config file and yml script.

After the installation the 4 container are installed as follows:

ONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
f200f580d98e ghcr.io/eramba/eramba:latest "/docker-cron-entryp…" 15 minutes ago Up 15 minutes 80/tcp cron
e56825f882cc ghcr.io/eramba/eramba:latest "/docker-entrypoint.…" 16 minutes ago Up 13 minutes 80/tcp, 0.0.0.0:8080->8080/tcp eramba
9b51b904d081 mysql:8.0.28-oracle "docker-entrypoint.s…" 16 minutes ago Up 16 minutes 3306/tcp, 33060/tcp mysql

There is an issue with the eramba container. The database migration freeze:

Failed to connect to the database, exiting...
Deprecation Notice: Using ${var} in strings is deprecated, use {$var} instead in phar:///var/www/eramba/composer.phar/vendor/symfony/console/Command/DumpCompletionCommand.php:48
Deprecation Notice: Using ${var} in strings is deprecated, use {$var} instead in phar:///var/www/eramba/composer.phar/vendor/symfony/console/Command/DumpCompletionCommand.php:56
Deprecation Notice: Using ${var} in strings is deprecated, use {$var} instead in phar:///var/www/eramba/composer.phar/src/Composer/Autoload/AutoloadGenerator.php:875
Deprecation Notice: Using ${var} in strings is deprecated, use {$var} instead in phar:///var/www/eramba/composer.phar/src/Composer/Autoload/AutoloadGenerator.php:880

App\Console\Installer::postInstall
Welcome to Eramba installation procedure!
Skipped overwriting config/app_local.php file
No Security.salt placeholder to replace.
sending incremental file list
emails/.gitkeep

sent 888 bytes received 49 bytes 1,874.00 bytes/sec
total size is 0 speedup is 0.00
sending incremental file list
.gitkeep

sent 214 bytes received 37 bytes 502.00 bytes/sec
total size is 0 speedup is 0.00
Using connection: default

Waiting for database...
Connection to Mysql could not be established: SQLSTATE[HY000] [2002] Connection refused
Using connection: default

Database appears to be empty.
Running structural migrations.

== 20170222204044 Initial: migrating

Can you please help ?

Hello,

I installed eramba-community as described in
https://www.eramba.org/learning/courses/12/episodes/274#install_community

Here is my .env

DB_HOST=mysql
DB_DATABASE=docker
DB_USERNAME=docker
DB_PASSWORD=<my_alphanumeric_pw>
CACHE_URL=Redis://?server=redis&port=6379&password=&timeout=3
MYSQL_ROOT_PASSWORD=<my_alphanumeric_root_pw>
USE_PROXY=1
PROXY_HOST=<our_http_proxy>
PROXY_PORT=8080
USE_PROXY_AUTH=0
PROXY_AUTH_USER=
PROXY_AUTH_PASS=
PUBLIC_ADDRESS=https://<our_dns_name>
DOCKER_DEPLOYMENT=1
LDAPTLS_REQCERT=never

No change on the mysql configuration:

[mysqld]
disable-log-bin
max_allowed_packet=128M
sql_mode=NO_ENGINE_SUBSTITUTION
innodb_strict_mode=0
innodb_lock_wait_timeout=200
innodb_stats_on_metadata=OFF
binlog_row_image=MINIMAL
sync_binlog=1
local_infile=OFF
master_verify_checksum=ON
relay_log_purge=1
binlog_expire_logs_seconds=604800
slave_sql_verify_checksum=1
skip-host-cache
skip-name-resolve
slow_query_log=1
slow_query_log_file=/tmp/mysql-slow.log
log_bin_trust_function_creators=OFF
log_bin=OFF
bind-address=0.0.0.0

# performance config - uncomment if you need "performance_schema" monitoring
#performance_schema=ON
#performance-schema-instrument='statement/%=ON'
#performance-schema-consumer-statements-digest=ON
#innodb_monitor_enable=all

[mysql]

[mysqldump]
quick
quote-names
max_allowed_packet=128M

[client]
bind-address=0.0.0.0

But the following error is thrown in the initial db-migration step.
This error happens with eramba:latest (3.20.0) and also with a clean installation of eramba:3.19.3

eramba  | Running post process...
eramba  | Post process failed with error: PDOException: SQLSTATE[42000]: Syntax error or access violation: 1055 Expression #1 of SELECT list is not in GROUP BY clause and contains nonaggregated column 'docker.DashboardCalendarEvents.id' which is not functionally dependent on columns in GROUP BY clause; this is incompatible with sql_mode=only_full_group_by in /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Database/Statement/MysqlStatement.php:39
eramba  | Stack trace:
eramba  | #0 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Database/Statement/MysqlStatement.php(39): PDOStatement->execute(NULL)
eramba  | #1 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Database/Statement/StatementDecorator.php(180): Cake\Database\Statement\MysqlStatement->execute(NULL)
eramba  | #2 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Database/Log/LoggingStatement.php(75): Cake\Database\Statement\StatementDecorator->execute(NULL)
eramba  | #3 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Database/Connection.php(337): Cake\Database\Log\LoggingStatement->execute()
eramba  | #4 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Core/Retry/CommandRetry.php(70): Cake\Database\Connection->Cake\Database\{closure}()
eramba  | #5 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Database/Connection.php(340): Cake\Core\Retry\CommandRetry->run(Object(Closure))
eramba  | #6 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Database/Query.php(250): Cake\Database\Connection->run(Object(Cake\ORM\Query))
eramba  | #7 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/ORM/Query.php(1148): Cake\Database\Query->execute()
eramba  | #8 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Datasource/QueryTrait.php(288): Cake\ORM\Query->_execute()
eramba  | #9 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/ORM/Query.php(1096): Cake\ORM\Query->_all()
eramba  | #10 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Datasource/QueryTrait.php(305): Cake\ORM\Query->all()
eramba  | #11 /var/www/eramba/app/upgrade/plugins/Dashboard/src/Lib/DashboardCalendarManager.php(179): Cake\ORM\Query->toArray()
eramba  | #12 /var/www/eramba/app/upgrade/plugins/Dashboard/src/Lib/DashboardCalendarManager.php(198): Dashboard\Lib\DashboardCalendarManager->cleanUpDuplicates()
eramba  | #13 /var/www/eramba/app/upgrade/plugins/Dashboard/src/Command/EventsSyncCommand.php(56): Dashboard\Lib\DashboardCalendarManager->sync()
eramba  | #14 /var/www/eramba/app/upgrade/src/Command/PostProcessRunCommand.php(113): Dashboard\Command\EventsSyncCommand->execute(Object(Cake\Console\Arguments), Object(Cake\Console\ConsoleIo))
eramba  | #15 /var/www/eramba/app/upgrade/src/Lib/Updates/Migrator.php(395): App\Command\PostProcessRunCommand->execute(Object(Cake\Console\Arguments), Object(Cake\Console\ConsoleIo))
eramba  | #16 /var/www/eramba/app/upgrade/src/Lib/Updates/Migrator.php(339): App\Lib\Updates\Migrator->genericPostProcessSync()
eramba  | #17 /var/www/eramba/app/upgrade/src/Lib/Updates/Migrator.php(102): App\Lib\Updates\Migrator->runPostProcess()
eramba  | #18 /var/www/eramba/app/upgrade/src/Command/DatabaseInitializeCommand.php(96): App\Lib\Updates\Migrator->migrate('default')
eramba  | #19 /var/www/eramba/app/upgrade/src/Command/DatabaseInitializeCommand.php(90): App\Command\DatabaseInitializeCommand->execute(Object(Cake\Console\Arguments), Object(Cake\Console\ConsoleIo))
eramba  | #20 /var/www/eramba/app/upgrade/src/Command/DatabaseInitializeCommand.php(90): App\Command\DatabaseInitializeCommand->execute(Object(Cake\Console\Arguments), Object(Cake\Console\ConsoleIo))
eramba  | #21 /var/www/eramba/app/upgrade/src/Command/DatabaseInitializeCommand.php(90): App\Command\DatabaseInitializeCommand->execute(Object(Cake\Console\Arguments), Object(Cake\Console\ConsoleIo))
eramba  | #22 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Console/BaseCommand.php(179): App\Command\DatabaseInitializeCommand->execute(Object(Cake\Console\Arguments), Object(Cake\Console\ConsoleIo))
eramba  | #23 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Console/CommandRunner.php(334): Cake\Console\BaseCommand->run(Array, Object(Cake\Console\ConsoleIo))
eramba  | #24 /var/www/eramba/app/upgrade/vendor/cakephp/cakephp/src/Console/CommandRunner.php(172): Cake\Console\CommandRunner->runCommand(Object(App\Command\DatabaseInitializeCommand), Array, Object(Cake\Console\ConsoleIo))
eramba  | #25 /var/www/eramba/app/upgrade/bin/cake.php(12): Cake\Console\CommandRunner->run(Array)
eramba  | #26 {main}.
eramba  | Migration process failed.
eramba  | Initialisation process failed.
eramba exited with code 1

I would be very grateful for a hint.

Greetings
Adrian

Tested on 11 as well where the issue does not occur, so it is debian 10 specific.
When starting eramba simple install there is a problem with deploying of MySQL container.

actual version of the host