Installation failure vSphere 6.5 and 6.7

[lerou114]

I am currently attempting to deploy a POC/Test instance 2.3.10 in VMWare after multiple attempts on our VMware infrastructure I am having multiple failures. I am able to install successfully on a workstation with Virtualbox.

I have attempted the failed on installs on VMWare 6.5 & 6.7
VM:
6 Cores
16 GB RAM
240 GB Storage

Version 2.3.10
Security onion ISO and Network installation Ubuntu and CentOS
Intall types tried: Standalone and Manager/Search Node

Install had a problem. Please see /root/sosetup.log for details.
so-status so-mysql missing.

local:
Data failed to compile:

The function "state.highstate" is runnning as PID 17976 and was started at 2020, Dec 04 15:38:20.829566 with jid 

20201204153820829566

I have pulled these snippets from the so.setup.log file I have removed the ip preceeding dial tcp.

[INFO ] Executing command 'yum check-update 2>&1 | grep "Error: rpmdb open failed"' in directory '/root'

[+] Set the address config key to "https://localhost:8080" in the "default" context
[+] Set the tls-skip-verify config key to "true" in the "default" context
[+] Set the url-prefix config key to "/fleet" in the "default" context
No username supplied, using email as username
error setting up Fleet: POST /api/v1/setup: Post "https://localhost:8080/fleet/api/v1/setup": dial tcp :8080: connect: connection timed out
Please log in with: fleetctl login
Please log in with: fleetctl login
Enabling Fleet...
[ERROR ] Command '['docker', 'exec', 'so-fleet', 'fleetctl', 'get', 'enroll-secret', 'default']' failed with return code: 1
[ERROR ] stdout: Please log in with: fleetctl login
[ERROR ] retcode: 1
[ERROR ] Command 'docker exec so-fleet fleetctl get enroll-secret default' failed with return code: 1
[ERROR ] output: Please log in with: fleetctl login
[CRITICAL] Rendering SLS 'base:fleet.event_enable-fleet' failed: mapping values are not allowed in this context
Generating osquery install packages - this will take some time...
Installing launcher via salt...
so-nginx

Total run time: 234.088 s
Errors detected during setup; skipping post-setup steps to allow for analysis of failures.

[defensivedepth]

Can you post the full sosetup.log somewhere?

[lerou114]

So I am not well as well versed as I should be in using docker. On my install I do not have the default fleet secret. Is there a way to generate the enroll_secret that is missing?

[defensivedepth]

What output do you get when you run the following on the Manager?

salt-call pillar.get secrets:fleet_enroll-secret

[lerou114]

local:
None

[defensivedepth]

In all of the sosetups that you have posted ( including the most recent one), it appears that Fleet failed to install because it is resolving https://localhost:8080/fleet/api/v1/setup": to something other than 127.0.0.1 (Couldn't confirm that until you posted the most recent sosetup)..... which is really odd.

Can you run the following on the manager and post the output?

sudo docker exec so-fleet cat /etc/hosts

[lerou114]

127.0.0.1 localhost
::1 localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
172.17.0.19 so-fleet

[defensivedepth]

We were able to pin down the problem to the fact that when the Fleet container was resolving localhost to something other than 127.0.0.1.

This was fixed with swapping localhost for 127.0.0.1 - this fix will be release in 2.3.20.

#2346