Nagios Support Forum

Sadly this did not work. It did however try http.

[root@IGSAOAEWUS049 nagioslogserver]# ./fullinstall
Your system $PATH does not include /sbin and /usr/sbin. This is usually the result of installing GNOME rather than creating a clean system.
Adding /sbin and /usr/sbin to $PATH.

Nagios Log Server Installation
==============================
DATE: Fri Aug 19 07:05:45 EDT 2016

DISTRO INFO:
CentOS
7.2.1511
x86_64

Running 'setup_local_syslog'...
setup_local_syslog step already completed - skipping
Running 'prereqs'...
Loaded plugins: fastestmirror
^[[28~Determining fastest mirrors
* base: mirrors.sonic.net
* extras: mirrors.sonic.net
* updates: mirror.clarkson.edu
Package byacc-1.9.20130304-3.el7.x86_64 already installed and latest version
Package cairo-devel-1.14.2-1.el7.x86_64 already installed and latest version
Package gcc-4.8.5-4.el7.x86_64 already installed and latest version
Package glib2-devel-2.42.2-5.el7.x86_64 already installed and latest version
Package glibc-2.17-106.el7_2.8.x86_64 already installed and latest version
Package 1:java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el7_2.x86_64 already installed and latest version
Package libxml2-devel-2.9.1-6.el7_2.3.x86_64 already installed and latest version
Package 1:make-3.82-21.el7.x86_64 already installed and latest version
Package 1:net-snmp-5.7.2-24.el7_2.1.x86_64 already installed and latest version
Package 1:net-snmp-utils-5.7.2-24.el7_2.1.x86_64 already installed and latest version
Package ntp-4.2.6p5-22.el7.centos.2.x86_64 already installed and latest version
Package 1:openssl-1.0.1e-51.el7_2.5.x86_64 already installed and latest version
Package patch-2.7.1-8.el7.x86_64 already installed and latest version
Package pango-devel-1.36.8-2.el7.x86_64 already installed and latest version
Package perl-ExtUtils-MakeMaker-6.68-3.el7.noarch already installed and latest version
Package pyOpenSSL-0.13.1-3.el7.x86_64 already installed and latest version
Package sendmail-8.14.7-4.el7.x86_64 already installed and latest version
Package sudo-1.8.6p7-17.el7_2.x86_64 already installed and latest version
Package sysstat-10.1.5-7.el7.x86_64 already installed and latest version
Package unzip-6.0-15.el7.x86_64 already installed and latest version
Package zip-3.0-10.el7.x86_64 already installed and latest version
Package net-tools-2.0-0.17.20131004git.el7.x86_64 already installed and latest version
Resolving Dependencies
--> Running transaction check
---> Package php.x86_64 0:5.4.16-36.1.el7_2.1 will be updated
---> Package php.x86_64 0:5.4.16-36.3.el7_2 will be an update
--> Processing Dependency: php-common(x86-64) = 5.4.16-36.3.el7_2 for package: php-5.4.16-36.3.el7_2.x86_64
---> Package php-cli.x86_64 0:5.4.16-36.1.el7_2.1 will be updated
---> Package php-cli.x86_64 0:5.4.16-36.3.el7_2 will be an update
---> Package php-ldap.x86_64 0:5.4.16-36.1.el7_2.1 will be updated
---> Package php-ldap.x86_64 0:5.4.16-36.3.el7_2 will be an update
--> Running transaction check
---> Package php-common.x86_64 0:5.4.16-36.1.el7_2.1 will be updated
---> Package php-common.x86_64 0:5.4.16-36.3.el7_2 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
Package Arch Version Repository Size
================================================================================
Updating:
php x86_64 5.4.16-36.3.el7_2 updates 1.4 M
php-cli x86_64 5.4.16-36.3.el7_2 updates 2.7 M
php-ldap x86_64 5.4.16-36.3.el7_2 updates 51 k
Updating for dependencies:
php-common x86_64 5.4.16-36.3.el7_2 updates 563 k

Transaction Summary
================================================================================
Upgrade 3 Packages (+1 Dependent package)

Total download size: 4.7 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
--------------------------------------------------------------------------------
Total 758 kB/s | 4.7 MB 00:06
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : php-common-5.4.16-36.3.el7_2.x86_64 1/8
Updating : php-cli-5.4.16-36.3.el7_2.x86_64 2/8
Updating : php-5.4.16-36.3.el7_2.x86_64 3/8
Updating : php-ldap-5.4.16-36.3.el7_2.x86_64 4/8
Cleanup : php-5.4.16-36.1.el7_2.1.x86_64 5/8
Cleanup : php-cli-5.4.16-36.1.el7_2.1.x86_64 6/8
Cleanup : php-ldap-5.4.16-36.1.el7_2.1.x86_64 7/8
Cleanup : php-common-5.4.16-36.1.el7_2.1.x86_64 8/8
Verifying : php-ldap-5.4.16-36.3.el7_2.x86_64 1/8
Verifying : php-common-5.4.16-36.3.el7_2.x86_64 2/8
Verifying : php-5.4.16-36.3.el7_2.x86_64 3/8
Verifying : php-cli-5.4.16-36.3.el7_2.x86_64 4/8
Verifying : php-cli-5.4.16-36.1.el7_2.1.x86_64 5/8
Verifying : php-5.4.16-36.1.el7_2.1.x86_64 6/8
Verifying : php-common-5.4.16-36.1.el7_2.1.x86_64 7/8
Verifying : php-ldap-5.4.16-36.1.el7_2.1.x86_64 8/8

Updated:
php.x86_64 0:5.4.16-36.3.el7_2 php-cli.x86_64 0:5.4.16-36.3.el7_2
php-ldap.x86_64 0:5.4.16-36.3.el7_2

Dependency Updated:
php-common.x86_64 0:5.4.16-36.3.el7_2

Complete!
19 Aug 07:06:37 ntpdate[20954]: step time server 129.250.35.250 offset 7.113760 sec
Downloading/unpacking pip
Cannot fetch index base URL http://pypi.python.org/simple/
http://pypi.python.org/simple/pip/ uses an insecure transport scheme (http). Consider using https if pypi.python.org has it available
Could not find any downloads that satisfy the requirement pip
Cleaning up...
No distributions at all found for pip
Storing debug log for failure in /root/.pip/pip.log

===================
INSTALLATION ERROR!
===================
Installation step failed - exiting.
Check for error messages in the install log (install.log).

If you require assistance in resolving the issue, please include install.log
in your communications with Nagios Enterprises technical support.

The step that failed was: 'prereqs'
[root@IGSAOAEWUS049 nagioslogserver]# ~

Here is the .pip log. I looks like pip is requiring https. Is there anyway to manually download and install this?

get-pip.py run on Fri Aug 19 07:06:39 2016
Downloading/unpacking pip
Getting page http://pypi.python.org/simple/pip/
Could not fetch URL http://pypi.python.org/simple/pip/: connection error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765)
Will skip URL http://pypi.python.org/simple/pip/ when looking for download links for pip
Getting page http://pypi.python.org/simple/
Could not fetch URL http://pypi.python.org/simple/: connection error: HTTPSConnectionPool(host='pypi.python.org', port=443): Max retries exceeded with url: /simple/ (Caused by <class 'httplib.CannotSendRequest'>: )
Will skip URL when looking for download links for pip
Cannot fetch index base URL http://pypi.python.org/simple/
URLs to search for versions for pip:
* http://pypi.python.org/simple/pip/
http://pypi.python.org/simple/pip/ uses an insecure transport scheme (http). Consider using https if pypi.python.org has it available
Getting page http://pypi.python.org/simple/pip/
Could not fetch URL http://pypi.python.org/simple/pip/: connection error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765)
Will skip URL when looking for download links for pip
Could not find any downloads that satisfy the requirement pip
Cleaning up...
Removing temporary dir /tmp/pip_build_root...
No distributions at all found for pip
Exception information:
Traceback (most recent call last):
File "/tmp/tmpCFhuKf/pip.zip/pip/basecommand.py", line 122, in main
status = self.run(options, args)
File "/tmp/tmpCFhuKf/pip.zip/pip/commands/install.py", line 278, in run
requirement_set.prepare_files(finder, force_root_egg_info=self.bundle, bundle=self.bundle)
File "/tmp/tmpCFhuKf/pip.zip/pip/req.py", line 1177, in prepare_files
url = finder.find_requirement(req_to_install, upgrade=self.upgrade)
File "/tmp/tmpCFhuKf/pip.zip/pip/index.py", line 277, in find_requirement
raise DistributionNotFound('No distributions at all found for %s' % req)
DistributionNotFound: No distributions at all found for pip

kunkler99 wrote:Is there anyway to manually download and install this?

You could try manually downloading and installing all the required python packages, but there's a good chance you will run into this problem again with future versions of elasticsearch.

Do you know if there is an internal CA used within your organization that generally exists on production servers? Might be worth asking around. It might need to be installed on this server, or you can try to pass the CA to the pip install script directly:

Hey guys so you were right I did have a CA that needed to be installed. I installed like this

yum -y install ca-certificates
update-ca-trust force-enable
wget http://**********.gov/images/DOIRootCA.crt -N -P /etc/pki/ca-trust/source/anchors/
update-ca-trust extract

(the *** is the site name)

it but I am still unable to install pip. I can however get it to download and install with the python get-pip.py --cert /etc/pki/ca-trust/source/anchors/DOIRootCA.crt.

python get-pip.py --cert /etc/pki/ca-trust/source/anchors/DOIRootCA.crt
Downloading/unpacking pip
http://pypi.python.org/simple/pip/ uses an insecure transport scheme (http). Consider using https if pypi.python.org has it available
Downloading pip-8.1.2-py2.py3-none-any.whl (1.2MB): 1.2MB downloaded
Downloading/unpacking setuptools
http://pypi.python.org/simple/setuptools/ uses an insecure transport scheme (http). Consider using https if pypi.python.org has it available
Downloading setuptools-26.1.1-py2.py3-none-any.whl (464kB): 464kB downloaded
Installing collected packages: pip, setuptools
Successfully installed pip setuptools


When I rerun the ./fullinstall it still fails. Is there a way to run the ./fullinstall with the DOI cert?

I think we're getting close!

In the fullinstall script, please modify line 43 which is - Change it to - Then, try running it once again. Was it successful?

UGH it still fails! Here is the log file below. If I run

[root@IGSAOAEWUS049 nagioslogserver]# python get-pip.py --cert /etc/pki/ca-trust/source/anchors/DOIRootCA.crt
Requirement already up-to-date: pip in /usr/lib/python2.7/site-packages
Cleaning up...

Log File

Nagios Log Server Installation
==============================
DATE: Thu Sep 1 06:34:22 EDT 2016

DISTRO INFO:
CentOS
7.2.1511
x86_64

Running 'setup_local_syslog'...
Redirecting to /bin/systemctl restart rsyslog.service
setup_local_syslog step completed OK
Running 'prereqs'...
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.usinternet.com
* extras: centos.vwtonline.net
* updates: mirrors.usinternet.com
Package byacc-1.9.20130304-3.el7.x86_64 already installed and latest version
Package cairo-devel-1.14.2-1.el7.x86_64 already installed and latest version
Package gcc-4.8.5-4.el7.x86_64 already installed and latest version
Package glib2-devel-2.42.2-5.el7.x86_64 already installed and latest version
Package glibc-2.17-106.el7_2.8.x86_64 already installed and latest version
Package 1:java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el7_2.x86_64 already installed and latest version
Package libxml2-devel-2.9.1-6.el7_2.3.x86_64 already installed and latest version
Package 1:make-3.82-21.el7.x86_64 already installed and latest version
Package 1:net-snmp-5.7.2-24.el7_2.1.x86_64 already installed and latest version
Package 1:net-snmp-utils-5.7.2-24.el7_2.1.x86_64 already installed and latest version
Package ntp-4.2.6p5-22.el7.centos.2.x86_64 already installed and latest version
Package 1:openssl-1.0.1e-51.el7_2.5.x86_64 already installed and latest version
Package patch-2.7.1-8.el7.x86_64 already installed and latest version
Package pango-devel-1.36.8-2.el7.x86_64 already installed and latest version
Package perl-ExtUtils-MakeMaker-6.68-3.el7.noarch already installed and latest version
Package php-5.4.16-36.3.el7_2.x86_64 already installed and latest version
Package php-cli-5.4.16-36.3.el7_2.x86_64 already installed and latest version
Package pyOpenSSL-0.13.1-3.el7.x86_64 already installed and latest version
Package sendmail-8.14.7-4.el7.x86_64 already installed and latest version
Package sudo-1.8.6p7-17.el7_2.x86_64 already installed and latest version
Package sysstat-10.1.5-7.el7.x86_64 already installed and latest version
Package unzip-6.0-15.el7.x86_64 already installed and latest version
Package zip-3.0-10.el7.x86_64 already installed and latest version
Package net-tools-2.0-0.17.20131004git.el7.x86_64 already installed and latest version
Package php-ldap-5.4.16-36.3.el7_2.x86_64 already installed and latest version
Nothing to do
1 Sep 06:34:32 ntpdate[41420]: adjust time server 74.117.214.2 offset -0.001200 sec
Requirement already up-to-date: pip in /usr/lib/python2.7/site-packages
Cleaning up...
Collecting argparse
Could not fetch URL https://pypi.python.org/simple/argparse/: There was a problem confirming the ssl certificate: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765) - skipping
Could not find a version that satisfies the requirement argparse (from versions: )
No matching distribution found for argparse

===================
INSTALLATION ERROR!
===================
Installation step failed - exiting.
Check for error messages in the install log (install.log).

If you require assistance in resolving the issue, please include install.log
in your communications with Nagios Enterprises technical support.

The step that failed was: 'prereqs'

I figured it out!! I was failing on the next part of the ./fullinstall # install ES Curator, argparse and jsonselect here is what I did to make it work

# install pip
python get-pip.py --cert /etc/pki/ca-trust/source/anchors/DOIRootCA.crt

# install ES Curator, argparse and jsonselect
pip install argparse jsonselect elasticsearch-curator==3.5.1 --cert /etc/pki/ca-trust/source/anchors/DOIRootCA.crt

Thank you so much for all your help!

Awesome news! Is it alright if we lock this thread and mark the issue as resolved?

Yep!