topic Re: Deploying Minemeld in AWS using cloud-init in General Topics

Deploying Minemeld in AWS using cloud-init

jnewsome — Fri, 13 Apr 2018 21:26:58 GMT

Team, I'm attempting to delpoy a MM instance into AWS and running into issues which appears to stem from rabbitmq. I have a firewall and other Unbuntu instances deployed so I know my network settings are good. When I deploy the MM instance I can validate that all network services are operational but the install comes to a scretching halt when rabbitmq fails to load. I'm using MM cloud-init version 0.9.8-04. Below is the output from the AWS console system log.

Any ideas?

Re: Deploying Minemeld in AWS using cloud-init

lmori — Mon, 16 Apr 2018 13:18:38 GMT

Hi @jnewsome,

please, could you try this version (please extract the b64 from the zip, live doesn't allow text files :-))?

luigi

Re: Deploying Minemeld in AWS using cloud-init

jnewsome — Mon, 16 Apr 2018 16:32:50 GMT

Hi Luigi,

The install is still failing. It's still an issue with Rabbitmq-server. I'm using a Unbutu 14.0.4 LTS (HVM) Instance in AWS. My VPC and EC node is in N. Virginia. My security rule is wide open so there should be nothing blocking any outbound or inbound process. I have attached the AWS system log.

Thanks for your help!

-John Newsome

Re: Deploying Minemeld in AWS using cloud-init

lmori — Tue, 17 Apr 2018 13:52:54 GMT

Hi @jnewsome,

I tried it and it works for me, but there is an issue that is preventing the installation of MM:

https://github.com/PaloAltoNetworks/minemeld-core/issues/270

The fix has been merged but the package haven't been released yet.

Re: Deploying Minemeld in AWS using cloud-init

jnewsome — Tue, 17 Apr 2018 14:07:02 GMT

Thanks Luigi,

Any differences between your environment and mine? I'm flexible in mirroring your setup until the new release on PIP 10.0.

Thanks!

-John Newsome

Re: Deploying Minemeld in AWS using cloud-init

lmori — Tue, 17 Apr 2018 14:14:01 GMT

Not really. My suggestion to fix this quickly:

- spin up an instance of Ubuntu 14.04 (trustry) using the AMI suggested here: https://cloud-images.ubuntu.com/locator/ec2/

- use these instructions to install MineMeld: https://live.paloaltonetworks.com/t5/MineMeld-Articles/Running-MineMeld-on-Ubuntu-Server-14-04/ta-p/98454

luigi

Re: Deploying Minemeld in AWS using cloud-init

jnewsome — Tue, 17 Apr 2018 15:24:26 GMT

Hi Luigi,

Which Ubuntu 14.04 Trusty image are you running? Below is my image...

ubuntu/images/hvm-ssd/ubuntu-trusty-14.04-amd64-server-20180404 (ami-d8359ca5)

I'm following the manual install process exactly and it works consistently when spinning up Ubuntu on VMWare but in AWS, I continue to get the following error...

minemeld-engine FATAL Exited too quickly (process log may have details)

minemeld-supervisord-listener RUNNING pid 4720, uptime 0:05:10

minemeld-traced RUNNING pid 4722, uptime 0:05:10

minemeld-web FATAL Exited too quickly (process log may have details)

Thanks!

-John Newsome

Re: Deploying Minemeld in AWS using cloud-init

lmori — Wed, 18 Apr 2018 09:17:17 GMT

Hi @jnewsome,

this is a different type of problem, please see the following thread: https://github.com/PaloAltoNetworks/minemeld-core/issues/270

We will release a fixed versions soon.

luigi

Re: Deploying Minemeld in AWS using cloud-init

jnewsome — Wed, 18 Apr 2018 16:50:35 GMT

Thanks Luigi!

-John Newsome