Log Server initial install

This support forum board is for support questions relating to Nagios Log Server, our solution for managing and monitoring critical log data.
NMFSTeam
Posts: 88
Joined: Thu Nov 12, 2015 9:01 am

Log Server initial install

Post by NMFSTeam »

We are using the manual install directions provided by Nagios to install the Log Server onto an Ubuntu 20.04 instance, and getting an error immediately.

Code: Select all

root@hqnaglogi1:/tmp/nagioslogserver# ls
CHANGELOG.txt  fullinstall  libinstall.sh  mibs             sourceguardian  upgrade
addnode        get-pip.py   licenses       nagioslogserver  subcomponents
root@hqnaglogi1:/tmp/nagioslogserver# ./fullinstall
-bash: ./fullinstall: Permission denied
root@hqnaglogi1:/tmp/nagioslogserver#
Any help you can provide would be most appreciated.

Thank you!
gsmith
Posts: 1253
Joined: Tue Mar 02, 2021 11:15 am

Re: Log Server initial install

Post by gsmith »

Hi

Your /tmp directory is probably mounted with the "noexec" option. Take a look at
/etc/fstab to verify this.

You can try:
mount -o remount, exec /tmp

Run ./fullinstall

Then change it back:
mount -o remount, noexec /tmp

Please let me know how you make out.

Thanks!
NMFSTeam
Posts: 88
Joined: Thu Nov 12, 2015 9:01 am

Re: Log Server initial install

Post by NMFSTeam »

Actually, the server was deployed with just one mount point, / .

Code: Select all

root@hqnaglogi1:~# cat /etc/fstab
LABEL=cloudimg-rootfs   /        ext4   defaults        0 1
LABEL=UEFI      /boot/efi       vfat    umask=0077      0 1
tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0
/dev/nagioslogserver/lvnagioslogserver /usr/local/nagioslogserver ext4 defaults 0 0
gsmith
Posts: 1253
Joined: Tue Mar 02, 2021 11:15 am

Re: Log Server initial install

Post by gsmith »

Hi


There's the culprit:
tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0

Please change it to:
tmpfs /dev/shm tmpfs defaults 0 0

Then bounce the server. Run the ./fullinstall. Then you can change /etc/fstab back
to:
tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0

Thanks
NMFSTeam
Posts: 88
Joined: Thu Nov 12, 2015 9:01 am

Re: Log Server initial install

Post by NMFSTeam »

Still no go.

Code: Select all

root@hqnaglogi1:/tmp/nagioslogserver# ./fullinstall
-bash: ./fullinstall: Permission denied
root@hqnaglogi1:/tmp/nagioslogserver# df -h
Filesystem                                     Size  Used Avail Use% Mounted on
/dev/root                                      243G  4.6G  238G   2% /
devtmpfs                                       3.9G     0  3.9G   0% /dev
tmpfs                                          3.9G     0  3.9G   0% /dev/shm
tmpfs                                          796M  1.1M  795M   1% /run
tmpfs                                          5.0M     0  5.0M   0% /run/lock
tmpfs                                          3.9G     0  3.9G   0% /sys/fs/cgroup
tmpfs                                          1.0G  450M  575M  44% /tmp
/dev/loop0                                     9.2M  9.2M     0 100% /snap/canonical-livepatch/126
/dev/loop1                                     100M  100M     0 100% /snap/core/11993
/dev/loop2                                      56M   56M     0 100% /snap/core18/2253
/dev/loop3                                      56M   56M     0 100% /snap/core18/2284
/dev/loop4                                      62M   62M     0 100% /snap/core20/1242
/dev/loop5                                      62M   62M     0 100% /snap/core20/1270
/dev/loop6                                     252M  252M     0 100% /snap/google-cloud-sdk/207
/dev/loop7                                     253M  253M     0 100% /snap/google-cloud-sdk/216
/dev/mapper/nagioslogserver-lvnagioslogserver 1007G   77M  956G   1% /usr/local/nagioslogserver
/dev/loop9                                      44M   44M     0 100% /snap/snapd/14549
/dev/loop8                                      44M   44M     0 100% /snap/snapd/14295
/dev/sda15                                     105M  5.2M  100M   5% /boot/efi
/dev/loop10                                     68M   68M     0 100% /snap/lxd/21835
tmpfs                                          796M     0  796M   0% /run/user/1415284939
root@hqnaglogi1:/tmp/nagioslogserver# cat /etc/fstab
LABEL=cloudimg-rootfs   /        ext4   defaults        0 1
LABEL=UEFI      /boot/efi       vfat    umask=0077      0 1
#tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0
tmpfs /dev/shm tmpfs defaults 0 0
/dev/nagioslogserver/lvnagioslogserver /usr/local/nagioslogserver ext4 defaults 0 0
root@hqnaglogi1:/tmp/nagioslogserver# ls -al
total 1400
drwxr-xr-x  7 root root     260 Dec  7 18:59 .
drwxrwxrwt 14 root root     300 Jan 24 18:48 ..
-rw-r--r--  1 root root   31828 Dec  7 18:58 CHANGELOG.txt
-rwxr-xr-x  1 root root      33 Dec  7 18:58 addnode
-rwxr-xr-x  1 root root   12251 Dec  7 18:58 fullinstall
-rwxr-xr-x  1 root root 1340902 Dec  7 18:58 get-pip.py
-rwxr-xr-x  1 root root   23855 Dec  7 18:58 libinstall.sh
drwxr-xr-x  2 root root     100 Dec  7 18:58 licenses
drwxr-xr-x  2 root root      80 Dec  7 18:58 mibs
drwxr-xr-x  3 root root     220 Dec  7 18:58 nagioslogserver
drwxr-xr-x  2 root root      80 Dec  7 18:59 sourceguardian
drwxr-xr-x  7 root root     140 Dec  7 18:58 subcomponents
-rwxr-xr-x  1 root root   13493 Dec  7 18:58 upgrade
gsmith
Posts: 1253
Joined: Tue Mar 02, 2021 11:15 am

Re: Log Server initial install

Post by gsmith »

Hi

Please send the output of these:

Code: Select all

ls -l /tmp

sestatus

Thanks
NMFSTeam
Posts: 88
Joined: Thu Nov 12, 2015 9:01 am

Re: Log Server initial install

Post by NMFSTeam »

Here you go:

Code: Select all

root@hqnaglogi1:/tmp# ls -l /tmp
total 219744
drwxr-xr-x 7 root                    root                          260 Dec  7 18:59 nagioslogserver
-rw-r----- 1 root                    root                    225015847 Dec  9 18:50 nagioslogserver-latest.tar.gz
drwx------ 3 root                    root                           60 Jan 24 18:41 snap.canonical-livepatch
drwx------ 3 root                    root                           60 Jan 24 18:41 snap.lxd
drwx------ 2 michael_blower_noaa_gov michael_blower_noaa_gov        60 Jan 24 20:50 ssh-KBAgPRSWFK
drwx------ 3 root                    root                           60 Jan 24 18:41 systemd-private-01a9356d4d3c402cbb5e6e1cd985f732-chrony.service-NpZJFf
drwx------ 3 root                    root                           60 Jan 24 18:41 systemd-private-01a9356d4d3c402cbb5e6e1cd985f732-systemd-logind.service-e1kBph
drwx------ 3 root                    root                           60 Jan 24 18:41 systemd-private-01a9356d4d3c402cbb5e6e1cd985f732-systemd-resolved.service-9Iwaej
root@hqnaglogi1:/tmp# sestatus

Command 'sestatus' not found, but can be installed with:

apt install policycoreutils

root@hqnaglogi1:/tmp#
gsmith
Posts: 1253
Joined: Tue Mar 02, 2021 11:15 am

Re: Log Server initial install

Post by gsmith »

Hi

That looks good!

Please send the output of:

ls -l /tmp/nagioslogserver

In /tmp/nagioslogserver please create a file called extest.sh with these contents:

Code: Select all

#!/bin/sh
echo 'testing 123 '
Then run the following:
chmod 755 extest.sh
./extest.sh


And let me know the result.

Thanks!
NMFSTeam
Posts: 88
Joined: Thu Nov 12, 2015 9:01 am

Re: Log Server initial install

Post by NMFSTeam »

No go, very odd.

Code: Select all

root@hqnaglogi1:/tmp# ls -l /tmp/nagioslogserver
total 1400
-rw-r--r-- 1 root root   31828 Dec  7 18:58 CHANGELOG.txt
-rwxr-xr-x 1 root root      33 Dec  7 18:58 addnode
-rwxr-xr-x 1 root root   12251 Dec  7 18:58 fullinstall
-rwxr-xr-x 1 root root 1340902 Dec  7 18:58 get-pip.py
-rwxr-xr-x 1 root root   23855 Dec  7 18:58 libinstall.sh
drwxr-xr-x 2 root root     100 Dec  7 18:58 licenses
drwxr-xr-x 2 root root      80 Dec  7 18:58 mibs
drwxr-xr-x 3 root root     220 Dec  7 18:58 nagioslogserver
drwxr-xr-x 2 root root      80 Dec  7 18:59 sourceguardian
drwxr-xr-x 7 root root     140 Dec  7 18:58 subcomponents
-rwxr-xr-x 1 root root   13493 Dec  7 18:58 upgrade
root@hqnaglogi1:/tmp# vi extest.sh
root@hqnaglogi1:/tmp# chmod 755 extest.sh 
root@hqnaglogi1:/tmp# ./extest.sh
-bash: ./extest.sh: Permission denied
root@hqnaglogi1:/tmp# cat extest.sh 
#!/bin/sh
echo 'testing 123 '

root@hqnaglogi1:/tmp#
gsmith
Posts: 1253
Joined: Tue Mar 02, 2021 11:15 am

Re: Log Server initial install

Post by gsmith »

Wow.

Is there any server automation (Puppet, Chef Ansible, etc) being used with this servers? If so
please run the following and send me the results:
mount | grep noexec

Please try this:
mktemp -d -tmpdir=/ (this will result in a file like /tmp.K6nLmbpk1n being created)
chmod 1777 /tmp.K6nLmbpk1n
cp -Rp /tmp/nagioslogserver /tmp.K6nLmbpk1n
cd /tmp.K6nLmbpk1n/nagioslogserver
./fullinstall

Let me know what happens

Thanks
Locked