Mar 12 14:57:54 ubuntu systemd: rvice: Unit entered failed state. Mar 12 14:57:54 ubuntu systemd: Failed to start Process Monitoring and Control Daemon. Mar 12 14:57:54 ubuntu systemd: rvice: Control process exited, code=exited status=203 Mar 12 14:57:54 ubuntu systemd: Starting Process Monitoring and Control Daemon. Process: 863 ExecStartPre=/bin/mkdir /var/run/minemeld (code=exited, status=0/SUCCESS) Process: 876 ExecStartPre=/bin/chown -R minemeld:minemeld /var/run/minemeld/ (code=exited, status=0/SUCCESS) Process: 882 ExecStart=/opt/minemeld/engine/current/bin/supervisord -c /opt/minemeld/supervisor/config/nf -pidfile /var/run/minemeld/minemeld.pid (code=exited, status=203/EXEC) Loaded: loaded (/lib/systemd/system/rvice enabled vendor preset: enabled)Īctive: failed (Result: exit-code) since Tue 14:57:54 PDT 1min 32s ago
Minemeld-supervisord-listener RUNNING pid 3730, uptime 0:08:50ĭone! Check the Quick Tour article to get started. Minemeld-web RUNNING pid 3729, uptime 0:08:50 Minemeld-traced RUNNING pid 3728, uptime 0:08:50 Minemeld-engine RUNNING pid 3727, uptime 0:08:50 $ sudo -u minemeld /opt/minemeld/engine/current/bin/supervisorctl -c /opt/minemeld/local/supervisor/config/nf status We should restart the instance to make sure all the configurations are applied and all the services are started in the right order: sudo shutdown -r nowĬheck if the 3 MineMeld services are up and running: Sudo apt install -o Dpkg::Options::="-force-overwrite" -y minemeld
CURL INSTALL MELD DOWNLOAD
This will also automatically trigger the download of the latest MineMeld packages. Install the MineMeld infrastructure package via apt. We have to install them before installing MineMeld package to avoid configuration conflicts: sudo apt install -y nginx redis-server Sudo add-apt-repository "deb xenial-minemeld main"
CURL INSTALL MELD UPDATE
Key fingerprint = E558 CE6E 3968 0F31 8F6C BFAC B401 E02E DD0D A1F9Īdd the MineMeld APT repo to the system list and update the apt cache: Sudo bash -c "ip6tables-save > /etc/iptables/rules.v6"Īdd the MineMeld repo GPG key to the APT trusted keyring:ĭouble check the GPG key fingerprint, to make sure it is matching the official MineMeld GPG key (fingerprint should match characters in bold):Įxecuting: gpg -ignore-time-conflict -no-options -no-default-keyring -homedir /tmp/tmp.W74MaAG3pI -no-auto-check-trustdb -trust-model always -keyring /etc/apt/trusted.gpg -primary-keyring /etc/apt/trusted.gpg -fingerprint DD0DA1F9 Sudo bash -c "iptables-save > /etc/iptables/rules.v4" Sudo iptables -A INPUT -p icmp -m icmp -icmp-type 11 -j ACCEPT Sudo iptables -A INPUT -p icmp -m icmp -icmp-type 8 -j ACCEPT Sudo iptables -A INPUT -p icmp -m icmp -icmp-type 3 -j ACCEPT
Sudo iptables -A INPUT -p icmp -m icmp -icmp-type 0 -j ACCEPT Sudo iptables -A INPUT -p tcp -m tcp -dport 13514 -j ACCEPT Sudo iptables -A INPUT -p tcp -m tcp -dport 443 -j ACCEPT Sudo iptables -A INPUT -p tcp -m tcp -dport 80 -j ACCEPT
Sudo iptables -A INPUT -p tcp -m tcp -dport 22 -j ACCEPT Sudo iptables -A INPUT -m conntrack -ctstate RELATED,ESTABLISHED -j ACCEPT Also these rules drop all IPv6 traffic, if you are running MineMeld in an IPv6 network make sure you change the suggested rules. You can use the following commands to configure iptables to allow sessions on ports used by MineMeld. sudo apt update & sudo apt dist-upgrade -y Update all the packages of the instance before installing.
CURL INSTALL MELD 64 BITS
Note: Binary packages are only available for 64 bits architectures.įirst thing you should harden your new instance. Please read this article to learn about our recommended migration options.Īn easy way to use MineMeld is installing the binary packages on an Ubuntu 16.04 instance. Note: Palo Alto Networks made an end-of-life announcement about the MineMeld™ application in AutoFocus™ on August 1, 2021.
0 kommentar(er)
