topic Re: Minemeld on CentOS behind corporate proxy? in General Topics

Minemeld behind corporate proxy?

ArildSaether — Mon, 26 Jun 2017 11:07:41 GMT

Hi,

There doesn't seem to be anything official on how to set up Minemeld to use corporate proxies. When trying to contact external URLs from within minemeld, it does not respect the proxy settings in either /etc/profile or /etc/default. It tries to access the Internet directly, and fails miserably, of course.

How do I make Minemeld hit the proxies?

BTW, I am using CentOS for this installation, but I don't think that should matter much.

Re: Minemeld behind corporate proxy?

lmori — Tue, 27 Jun 2017 17:20:30 GMT

Hi @ArildSaether,

please see my answer to your previous thread, /etc/default/minemeld is honored (just remember the "export" command before the vars).

luigi

Re: Minemeld on CentOS behind corporate proxy?

ArildSaether — Thu, 29 Jun 2017 07:02:37 GMT

As far as I can figure out, this is related to Minemeld on CentOS 7 only. Works great on Ubuntu.

Would like to hear if anyone has been able to make it work with CentOS and proxies.

Re: Minemeld on CentOS behind corporate proxy?

lmori — Thu, 29 Jun 2017 08:24:59 GMT

Hi @ArildSaether,

CentOS 7 uses systemd, you can use a systemd override to supply environment variables to minemeld service. The following command creates an override for minemeld service and opens an editor where you can edit the override file:

$ sudo systemctl edit minemeld

Copy&paste the following content (change the proxy address first :-)):

[Service]
Environment="HTTP_PROXY=http://192.168.55.1:8080"
Environment="HTTPS_PROXY=http://192.168.55.1:8080"

And then:

$ sudo systemctl restart minemeld

Re: Minemeld on CentOS behind corporate proxy?

ArildSaether — Thu, 29 Jun 2017 09:42:19 GMT

Thank you.

That worked perfectly. But maybe that should be included in the documentation for CentOS7/RHEL7 and Minemeld? It's hard to see how to make it work with a proxy without that nugget of insight.

I also needed to change the sudoers file in order to install behind a proxy, adding:

Defaults  env_keep += "http_proxy"
Defaults  env_keep += "https_proxy"

in order for the environment variables to be kept when ansible does something with elevated privileges.

Re: Minemeld on CentOS behind corporate proxy?

lmori — Sun, 02 Jul 2017 08:24:03 GMT

Hi @ArildSaether,

yes, that's definitely a good point. We will add it to the docs.

Thanks!