2.3.250 version: installation stuck at 95% for a long time then it completes with errors

[kikirizzi]

I'm having problems installing a fresh new infrastructure.
ISO was correctly downloaded and has passed succesfully all signature checks.
sosetup.log

When I try to install it on VMware ESXi with 4vCPU/32GB RAM/250 GB Hard Disk or to a bare metal server with 6core/22 GB RAM/1TB Hard disk the installation goes fine, but logging in and trying to configure any role (EVAL, STANDALONE, DISTRIBUTED it doesn't matter) after inserting all the requested informations it stuck at 95% for a long time. After 25/30 minutes it completes with an error. The /root/error.log is empty (0 bytes).

Thx

[dougburks]

Looking at your sosetup.log, it looks like you're having network issues. Double-check your network, firewall, and proxy configuration. If you don't have full Internet access, you may need to do an airgap installation. Here is some documentation which might help:
https://docs.securityonion.net/en/2.3/getting-started.html
https://docs.securityonion.net/en/2.3/firewall.html
https://docs.securityonion.net/en/2.3/proxy.html
https://docs.securityonion.net/en/2.3/airgap.html

[kikirizzi]

Thank you for the answer. I've tried to reconfigure the firewall but after other some failures, I have decided to bypass the firewall completely.
I have assigned a public IP address to the box during network setup but the installation failed the same way.
It is not a home connectivity

I've asked the provider if they apply some filters but they told me that no filters are used.

Is it possible to download an older ISO to test it?

[dougburks]

Per my previous response, have you tried an airgap installation?
https://docs.securityonion.net/en/2.3/airgap.html

[kikirizzi]

Yes, Airgap installation brings me to the identical result. From: Doug Burks ***@***.***> Sent: Tuesday, June 6, 2023 7:39 PM To: Security-Onion-Solutions/securityonion ***@***.***> Cc: Tiziano Zanotti ***@***.***>; Author ***@***.***> Subject: Re: [Security-Onion-Solutions/securityonion] 2.3.250 version: installation stuck at 95% for a long time then it completes with errors (Discussion #10461) Questa email arriva da un mittente insolito. Assicurati che sia qualcuno di cui ti fidi. Per my previous response, have you tried an airgap installation? https://docs.securityonion.net/en/2.3/airgap.html<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fdocs.securityonion.net%2Fen%2F2.3%2Fairgap.html&e=001588fa&h=dbc438ab&f=y&p=y> — Reply to this email directly, view it on GitHub<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgithub.com%2FSecurity-Onion-Solutions%2Fsecurityonion%2Fdiscussions%2F10461%23discussioncomment-6103413&e=001588fa&h=d612ab77&f=y&p=y>, or unsubscribe<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FBAGHTNLVTGKXQLWRQOY45YLXJ5TL7ANCNFSM6AAAAAAY4SI2HI&e=001588fa&h=0e549079&f=y&p=y>. You are receiving this because you authored the thread.Message ID: ***@***.******@***.***>>

…

-- Questo messaggio e' stato analizzato con EASY ESVA ed e' risultato non infetto. Clicca qui per segnalarlo come spam.<https://easyesva.webeasytech.com/action/4QbHlh3PwhzF2M4/submit-as-bad> Clicca qui per metterlo in blocklist<https://easyesva.webeasytech.com/action/4QbHlh3PwhzF2M4/blocklist>

[dougburks]

And just to double-check...did you choose the Airgap option here?

Are you able to share the sosetup.log from the airgap installation?

[kikirizzi]

Hi Today I’ve tried another installation on VMware. Attached you can find screenshoots and also log files. I don’t know why this is happening, I’ve tried ISO, USB, DVD installation but I have always the same result. Thank you for you patience Tiziano [PS Innovation Srl] Ing. Tiziano Zanotti | Senior IT System Engineer T: +39 030 64 90 141<tel:+390306490141> | M: +39 348 65 05 929<tel:+393486505929> E: ***@***.******@***.***> | W: https://www.psinnovation.it<https://www.psinnovation.it/> Address: Via Camillo Brozzoni, 9 - 25125 Brescia Avviso di riservatezza: Il contenuto di questa e-mail e degli allegati può avere natura confidenziale ad uso esclusivo del destinatario effettivo. Se avete ricevuto questo messaggio per errore, Vi preghiamo di informarci restituendo l'e-mail all'indirizzo ***@***.******@***.***> e di procedere alla eliminazione dello stesso. Ogni utilizzo improprio è contrario ai principi del GDPR 679/2016. Grazie per la collaborazione. Privacy notice: The content of this e-mail and attachments may be of a confidential nature for the exclusive use of the actual recipient. If you have received this message by mistake, please inform us by returning the e-mail to ***@***.******@***.***> and deleting it. Any improper use is contrary to the principles of GDPR 679/2016. Thanks for your collaboration From: Doug Burks ***@***.***> Sent: Friday, June 9, 2023 1:02 PM To: Security-Onion-Solutions/securityonion ***@***.***> Cc: Tiziano Zanotti ***@***.***>; Author ***@***.***> Subject: Re: [Security-Onion-Solutions/securityonion] 2.3.250 version: installation stuck at 95% for a long time then it completes with errors (Discussion #10461) And just to double-check...did you choose the Airgap option here? [image]<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fuser-images.githubusercontent.com%2F1659467%2F244674378-162ebc9e-8cee-4290-a745-a1562cd3723b.png&e=001588fa&h=d44035d4&f=y&p=y> Are you able to share the sosetup.log from the airgap installation? — Reply to this email directly, view it on GitHub<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgithub.com%2FSecurity-Onion-Solutions%2Fsecurityonion%2Fdiscussions%2F10461%23discussioncomment-6131873&e=001588fa&h=169f847e&f=y&p=y>, or unsubscribe<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FBAGHTNIE5VZZQ6PMY7DNRLDXKL7AZANCNFSM6AAAAAAY4SI2HI&e=001588fa&h=3b5dce20&f=y&p=y>. You are receiving this because you authored the thread.Message ID: ***@***.******@***.***>>

…

-- Questo messaggio e' stato analizzato con EASY ESVA ed e' risultato non infetto. Clicca qui per segnalarlo come spam.<https://easyesva.webeasytech.com/action/4QcynV1L65z7t9V/submit-as-bad> Clicca qui per metterlo in blocklist<https://easyesva.webeasytech.com/action/4QcynV1L65z7t9V/blocklist>

[dougburks]

I don't see any screenshots or log files.

[kikirizzi]

Hello Doug This morning I’ve downloaded the latest release 2.3.260 and started a new installation. Everything worked like a charm and now I’m up and running. Thank you for your support Tiziano [PS Innovation Srl] Ing. Tiziano Zanotti | Senior IT System Engineer T: +39 030 64 90 141<tel:+390306490141> | M: +39 348 65 05 929<tel:+393486505929> E: ***@***.******@***.***> | W: https://www.psinnovation.it<https://www.psinnovation.it/> Address: Via Camillo Brozzoni, 9 - 25125 Brescia Avviso di riservatezza: Il contenuto di questa e-mail e degli allegati può avere natura confidenziale ad uso esclusivo del destinatario effettivo. Se avete ricevuto questo messaggio per errore, Vi preghiamo di informarci restituendo l'e-mail all'indirizzo ***@***.******@***.***> e di procedere alla eliminazione dello stesso. Ogni utilizzo improprio è contrario ai principi del GDPR 679/2016. Grazie per la collaborazione. Privacy notice: The content of this e-mail and attachments may be of a confidential nature for the exclusive use of the actual recipient. If you have received this message by mistake, please inform us by returning the e-mail to ***@***.******@***.***> and deleting it. Any improper use is contrary to the principles of GDPR 679/2016. Thanks for your collaboration From: Doug Burks ***@***.***> Sent: Tuesday, June 13, 2023 1:04 PM To: Security-Onion-Solutions/securityonion ***@***.***> Cc: Tiziano Zanotti ***@***.***>; Author ***@***.***> Subject: Re: [Security-Onion-Solutions/securityonion] 2.3.250 version: installation stuck at 95% for a long time then it completes with errors (Discussion #10461) I don't see any screenshots or log files. — Reply to this email directly, view it on GitHub<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgithub.com%2FSecurity-Onion-Solutions%2Fsecurityonion%2Fdiscussions%2F10461%23discussioncomment-6162343&e=001588fa&h=3ae492fa&f=y&p=y>, or unsubscribe<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FBAGHTNKSL6STKIIXPZFB6FLXLBCJZANCNFSM6AAAAAAY4SI2HI&e=001588fa&h=c8817ffe&f=y&p=y>. You are receiving this because you authored the thread.Message ID: ***@***.******@***.***>>

…

-- Questo messaggio e' stato analizzato con EASY ESVA ed e' risultato non infetto. Clicca qui per segnalarlo come spam.<https://easyesva.webeasytech.com/action/4QgQfQ2hPvzF6Wd/submit-as-bad> Clicca qui per metterlo in blocklist<https://easyesva.webeasytech.com/action/4QgQfQ2hPvzF6Wd/blocklist>