Issue with Salt-Master

[L-H-1995]

Version

2.4.3

Installation Method

Security Onion ISO image

Description

configuration

Installation Type

Standalone

Location

on-prem with Internet access

Hardware Specs

Does not meet minimum requirements

CPU

4

RAM

8

Storage for /

300

Storage for /nsm

200

Network Traffic Collection

other (please provide detail below)

Network Traffic Speeds

1Gbps to 10Gbps

Status

No, one or more services are failed (please provide detail below)

Salt Status

Yes, there are salt failures (please provide detail below)

Logs

Yes, there are additional clues in /opt/so/log/ (please provide detail below)

Detail

Hi,
I am very new to Cybersecurity and SecurityOnion. I tried setting up a standalone version of Securityonion but i always geht the same error. I already tried open all mentioned ports in the documentation using sudo firewall-cmd -add-port=xxxx/tcp --permanent.

This is my console log:

=======================================================================================================
Install    8 Packages
Upgrade  213 Packages
Remove     3 Packages

Total size: 913 M
Total download size: 95 M
Downloading Packages:
Error opening /nsm/repo/chromium-119.0.6045.159-2.el9.x86_64.rpm: No such file or directory
Package "chromium-119.0.6045.159-2.el9.x86_64" from local repository "securityonion" has incorrect checksum
Error opening /nsm/repo/chromium-common-119.0.6045.159-2.el9.x86_64.rpm: No such file or directory
Package "chromium-common-119.0.6045.159-2.el9.x86_64" from local repository "securityonion" has incorrect checksum
Error: Some packages from local repository have incorrect checksum
2023-12-05T14:33:53Z | INFO | Removing repo files added by oracle-repos package update
2023-12-05T14:33:53Z | INFO | Executing command: rm -f /etc/yum.repos.d/oracle-linux-ol9.repo
2023-12-05T14:33:53Z | INFO | Executing command: rm -f /etc/yum.repos.d/uek-ol9.repo
2023-12-05T14:33:53Z | INFO | Executing command: rm -f /etc/yum.repos.d/virt-ol9.repo
2023-12-05T14:33:53Z | INFO | Installing Salt
2023-12-05T14:33:53Z | INFO | Executing command: dnf -y install salt-3006.3 salt-master-3006.3 salt-minion-3006.3
Last metadata expiration check: 0:00:23 ago on Tue 05 Dec 2023 02:33:30 PM UTC.
Package salt-3006.3-0.x86_64 is already installed.
Package salt-minion-3006.3-0.x86_64 is already installed.
Dependencies resolved.
================================================================================
 Package            Architecture  Version            Repository            Size
================================================================================
Installing:
 salt-master        x86_64        3006.3-0           securityonion        3.4 M

Transaction Summary
================================================================================
Install  1 Package

Total size: 3.4 M
Installed size: 3.3 M
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1 
  Running scriptlet: salt-master-3006.3-0.x86_64                            1/1 
find: ‘/var/cache/salt’: No such file or directory
error: %prein(salt-master-3006.3-0.x86_64) scriptlet failed, exit status 1

Error in PREIN scriptlet in rpm package salt-master
  Verifying        : salt-master-3006.3-0.x86_64                            1/1Error: Transaction failed
 

Failed:
  salt-master-3006.3-0.x86_64                                                   

2023-12-05T14:33:55Z | INFO | Executing command: mkdir -p /etc/salt/minion.d
2023-12-05T14:33:55Z | INFO | Executing command: salt-pip install docker --no-index --only-binary=:all: --find-links files/salt_module_deps/docker/
Looking in links: files/salt_module_deps/docker/
Requirement already satisfied: docker in /opt/saltstack/salt/extras-3.10 (5.0.2)
Requirement already satisfied: requests!=2.18.0,>=2.14.2 in /opt/saltstack/salt/lib/python3.10/site-packages (from docker) (2.31.0)
Requirement already satisfied: websocket-client>=0.32.0 in /opt/saltstack/salt/extras-3.10 (from docker) (1.5.1)
Requirement already satisfied: idna<4,>=2.5 in /opt/saltstack/salt/lib/python3.10/site-packages (from requests!=2.18.0,>=2.14.2->docker) (2.8)
Requirement already satisfied: certifi>=2017.4.17 in /opt/saltstack/salt/lib/python3.10/site-packages (from requests!=2.18.0,>=2.14.2->docker) (2023.7.22)
Requirement already satisfied: charset-normalizer<4,>=2 in /opt/saltstack/salt/lib/python3.10/site-packages (from requests!=2.18.0,>=2.14.2->docker) (3.2.0)
Requirement already satisfied: urllib3<3,>=1.21.1 in /opt/saltstack/salt/lib/python3.10/site-packages (from requests!=2.18.0,>=2.14.2->docker) (1.26.6)
WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv
2023-12-05T14:33:57Z | INFO | Executing command: salt-pip install pymysql --no-index --only-binary=:all: --find-links files/salt_module_deps/pymysql/
Looking in links: files/salt_module_deps/pymysql/
Requirement already satisfied: pymysql in /opt/saltstack/salt/extras-3.10 (1.0.3)
WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv
2023-12-05T14:33:58Z | INFO | Executing command: cp /root/SecurityOnion/files/salt/master/master /etc/salt/master
2023-12-05T14:33:58Z | INFO | Copying pillar and salt files in /root/installtmp to /opt/so/saltstack/local
2023-12-05T14:33:58Z | INFO | Executing command: cp -Rv /root/installtmp/pillar/ /opt/so/saltstack/local/
2023-12-05T14:33:58Z | INFO | Executing command: systemctl daemon-reload
2023-12-05T14:33:58Z | INFO | Executing command: systemctl enable salt-master
Failed to enable unit: Unit file salt-master.service does not exist.
2023-12-05T14:33:58Z | INFO | Executing command: systemctl restart salt-master
Failed to restart salt-master.service: Unit salt-master.service not found.
2023-12-05T14:33:58Z | INFO | Configuring minion type as standalone
2023-12-05T14:33:58Z | INFO | Running: salt-call state.apply salt.mine_functions --local --file-root=../salt/ -l info pillar='{host: {mainint: ens32}}'
[INFO    ] Loading fresh modules for state activity
[INFO    ] Fetching file from saltenv 'base', ** done ** 'salt/mine_functions.sls'
[INFO    ] Running state [/etc/salt/minion.d/mine_functions.conf] at time 14:34:00.798000
[INFO    ] Executing state file.managed for [/etc/salt/minion.d/mine_functions.conf]
[INFO    ] Fetching file from saltenv 'base', ** done ** 'salt/etc/minion.d/mine_functions.conf.jinja'
[INFO    ] File changed:
New file
[INFO    ] Completed state [/etc/salt/minion.d/mine_functions.conf] at time 14:34:00.891530 (duration_in_ms=93.53)
local:
----------
          ID: mine_functions
    Function: file.managed
        Name: /etc/salt/minion.d/mine_functions.conf
      Result: True
     Comment: File /etc/salt/minion.d/mine_functions.conf updated
     Started: 14:34:00.798000
    Duration: 93.53 ms
     Changes:   
              ----------
              diff:
                  New file
              mode:
                  0644

Summary for local
------------
Succeeded: 1 (changed=1)
Failed:    0
------------
Total states run:     1
Total run time:  93.530 ms
2023-12-05T14:34:01Z | INFO | Not an appliance
2023-12-05T14:34:01Z | INFO | Executing command: salt-key -yd seconion_standalone
./so-functions: line 40: salt-key: command not found
2023-12-05T14:34:03Z | INFO | Executing command: salt-call state.show_top
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
2023-12-05T14:34:42Z | INFO | Executing command: salt-key -ya seconion_standalone
./so-functions: line 40: salt-key: command not found
2023-12-05T14:34:42Z | INFO | Executing command: salt-call saltutil.sync_all
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
2023-12-05T14:35:18Z | INFO | Executing command: salt-call state.apply common.packages
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
2023-12-05T14:35:55Z | INFO | Executing command: salt-call state.apply common
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
2023-12-05T14:36:31Z | INFO | Executing command: salt-call state.apply salt.master
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
Checking if we can access the salt master and that it is ready at: Dec 05 14:37:07
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
Can't access salt master or it is not ready at: Dec 05 14:37:44
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
Can't access salt master or it is not ready at: Dec 05 14:38:20
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
Can't access salt master or it is not ready at: Dec 05 14:38:57
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
Can't access salt master or it is not ready at: Dec 05 14:39:33
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
Can't access salt master or it is not ready at: Dec 05 14:40:10
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
Can't access salt master or it is not ready at: Dec 05 14:40:46
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
Can't access salt master or it is not ready at: Dec 05 14:41:22
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
Can't access salt master or it is not ready at: Dec 05 14:41:59
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
Can't access salt master or it is not ready at: Dec 05 14:42:35
Unable to sign_in to master: Attempt to authenticate with the salt master failed with timeout error
Can't access salt master or it is not ready at: Dec 05 14:43:12
Gave up trying to access salt-master
ERROR: Can't access salt master or it is not ready
Exiting.

Guidelines

• I have read the above statement and can confirm my post is relevant to Security Onion 2.4.

[dougburks]

You specify above that your system does not meet minimum requirements. If it doesn't meet minimum requirements, then you're going to get lots of errors and it's not going to work. Please make sure you follow the hardware requirements:
https://docs.securityonion.net/en/2.4/hardware.html