Cannot install Expedition - Rabbitmq fails

[S.Bradley]

HI all,

I can see there have been a number of issues with rabbtimq/erlang as part of the installation, but I have hit one I can't see a solution for.

The rabbitmq install is failing like this: 

The following packages have unmet dependencies:
rabbitmq-server : Depends: erlang-base (>= 1:25.0) but it is not going to be installed or
erlang-base-hipe (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-crypto (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-eldap (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-inets (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-mnesia (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-os-mon (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-parsetools (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-public-key (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-runtime-tools (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-ssl (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-syntax-tools (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-tools (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
Depends: erlang-xmerl (>= 1:25.0) but it is not going to be installed or
esl-erlang (>= 1:25.0) but it is not installable
E: Unable to correct problems, you have held broken packages.

I've tired the solution at https://live.paloaltonetworks.com/t5/expedition-articles/how-to-address-cve-2022-37026-vulnerability... but get the same error.

Further down the installation I am also getting

pygobject 3.36.0 requires pycairo>=1.11.1, which is not installed.
launchpadlib 1.10.13 requires testresources, which is not installed.

during the 

Installing latest Expedition package

phase, but I don't know if that is related.  I can fix those errors by pre-installing

sudo bash sudo apt install python3-gi-cairo 
sudo apt install python3-testresources

before I run the initSetup script, but I don't know if that will break anything else.

I hope someone can help!

Thanks

Simon Bradley

[dpuigdomenec]

Hi @S.Bradley 

Thanks for reaching out. I think the issue at your side is that the VM can not get the defined debian repositiory.

To confirm above please execute below commands to install the required packages:

sudo wget -O- https://packages.erlang-solutions.com/ubuntu/erlang_solutions.asc | sudo apt-key add -

sudo echo "deb https://packages.erlang-solutions.com/ubuntu focal contrib" | sudo tee /etc/apt/sources.list.d/erlang-solution.list

sudo curl -s https://packagecloud.io/install/repositories/rabbitmq/rabbitmq-server/script.deb.sh | sudo bash

And after them execute the command:

sudo apt update

On the output you should see a hit to the following repository stating you can get packages from it. 

Hit:XX https://packagecloud.io/rabbitmq/rabbitmq-server/ubuntu focal InRelease

Note: If that is not your case, make sure your VM has direct connection access to the Internet and there is not any proxy/firewall changing the SSL certificates.

For better troubleshooting please contact us using the email address fwmigrate@paloaltonetworks.com

Hope this helps,

David

[S.Bradley]

Hi David,

I've explicitly given this host direct internet access, to no firewall or proxy issues

Your commands work, but that is not the repo that the script adds - I'm seeing:

Err:12 https://www.rabbitmq.com/debian testing/main amd64 Packages
404 Not Found [IP: 104.20.69.112 443]
Ign:13 https://www.rabbitmq.com/debian testing/main all Packages

...

Reading package lists... Done
E: Failed to fetch https://www.rabbitmq.com/debian/dists/testing/main/binary-amd64/Packages 404 Not Found [IP: 104.20.69.112 443]
E: Some index files failed to download. They have been ignored, or old ones used instead.

after running the init script.  I'm fairly sure either rabbitmq or erlang repos have changed, and the script not updated.

I'll follow this up by email when I get the chance.

Thanks

[dpuigdomenec]

Hi @S.Bradley 

Thanks for your response.

The rabbitmq repository is installed but not used.

The script is using the previous shared repository as well as the article: https://live.paloaltonetworks.com/t5/expedition-articles/how-to-address-cve-2022-37026-vulnerability... Where the required version to install is 3.11.4-1.

QQ: After installing the repo what is the result of executing this command?

apt-get install rabbitmq-server=3.11.4-1

Thanks in advance!

David

[S.Bradley]

It still fails to find the erlang packages:

sudo apt-get install rabbitmq-server=3.11.4-1
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
erlang-asn1 erlang-base erlang-crypto erlang-eldap erlang-inets erlang-mnesia erlang-os-mon erlang-parsetools erlang-public-key erlang-runtime-tools erlang-snmp erlang-ssl
erlang-syntax-tools erlang-tools erlang-xmerl libsctp1
Suggested packages:
erlang erlang-manpages erlang-doc lksctp-tools
The following NEW packages will be installed:
erlang-asn1 erlang-base erlang-crypto erlang-eldap erlang-inets erlang-mnesia erlang-os-mon erlang-parsetools erlang-public-key erlang-runtime-tools erlang-snmp erlang-ssl
erlang-syntax-tools erlang-tools erlang-xmerl libsctp1 rabbitmq-server
0 upgraded, 17 newly installed, 0 to remove and 9 not upgraded.
Need to get 9,022 kB/36.5 MB of archives.
After this operation, 69.9 MB of additional disk space will be used.
Do you want to continue? [Y/n]
Hit:1 https://packages.erlang-solutions.com/ubuntu focal/contrib amd64 erlang-syntax-tools amd64 1:25.0.4-1
Hit:2 https://packages.erlang-solutions.com/ubuntu focal/contrib amd64 erlang-asn1 amd64 1:25.0.4-1
Hit:3 https://packages.erlang-solutions.com/ubuntu focal/contrib amd64 erlang-crypto amd64 1:25.0.4-1
Hit:4 https://packages.erlang-solutions.com/ubuntu focal/contrib amd64 erlang-ssl amd64 1:25.0.4-1
Hit:5 https://packages.erlang-solutions.com/ubuntu focal/contrib amd64 erlang-eldap amd64 1:25.0.4-1
Hit:6 https://packages.erlang-solutions.com/ubuntu focal/contrib amd64 erlang-mnesia amd64 1:25.0.4-1
Hit:7 https://packages.erlang-solutions.com/ubuntu focal/contrib amd64 erlang-inets amd64 1:25.0.4-1
Hit:8 https://packages.erlang-solutions.com/ubuntu focal/contrib amd64 erlang-snmp amd64 1:25.0.4-1
Hit:9 https://packages.erlang-solutions.com/ubuntu focal/contrib amd64 erlang-parsetools amd64 1:25.0.4-1
Hit:10 https://packages.erlang-solutions.com/ubuntu focal/contrib amd64 erlang-tools amd64 1:25.0.4-1
Hit:11 https://packages.erlang-solutions.com/ubuntu focal/contrib amd64 erlang-xmerl amd64 1:25.0.4-1
E: Failed to fetch https://packages.erlang-solutions.com/ubuntu/pool/erlang-syntax-tools_25.0.4-1~ubuntu~focal_amd64.deb rename failed, No such file or directory (/var/cache/apt/archives/partial/erlang-syntax-tools_1%3a25.0.4-1_amd64.deb -> /var/cache/apt/archives/erlang-syntax-tools_1%3a25.0.4-1_amd64.deb).
E: Failed to fetch https://packages.erlang-solutions.com/ubuntu/pool/erlang-asn1_25.0.4-1~ubuntu~focal_amd64.deb rename failed, No such file or directory (/var/cache/apt/archives/partial/erlang-asn1_1%3a25.0.4-1_amd64.deb -> /var/cache/apt/archives/erlang-asn1_1%3a25.0.4-1_amd64.deb).
E: Failed to fetch https://packages.erlang-solutions.com/ubuntu/pool/erlang-crypto_25.0.4-1~ubuntu~focal_amd64.deb rename failed, No such file or directory (/var/cache/apt/archives/partial/erlang-crypto_1%3a25.0.4-1_amd64.deb -> /var/cache/apt/archives/erlang-crypto_1%3a25.0.4-1_amd64.deb).
E: Failed to fetch https://packages.erlang-solutions.com/ubuntu/pool/erlang-ssl_25.0.4-1~ubuntu~focal_amd64.deb rename failed, No such file or directory (/var/cache/apt/archives/partial/erlang-ssl_1%3a25.0.4-1_amd64.deb -> /var/cache/apt/archives/erlang-ssl_1%3a25.0.4-1_amd64.deb).
E: Failed to fetch https://packages.erlang-solutions.com/ubuntu/pool/erlang-eldap_25.0.4-1~ubuntu~focal_amd64.deb rename failed, No such file or directory (/var/cache/apt/archives/partial/erlang-eldap_1%3a25.0.4-1_amd64.deb -> /var/cache/apt/archives/erlang-eldap_1%3a25.0.4-1_amd64.deb).
E: Failed to fetch https://packages.erlang-solutions.com/ubuntu/pool/erlang-mnesia_25.0.4-1~ubuntu~focal_amd64.deb rename failed, No such file or directory (/var/cache/apt/archives/partial/erlang-mnesia_1%3a25.0.4-1_amd64.deb -> /var/cache/apt/archives/erlang-mnesia_1%3a25.0.4-1_amd64.deb).
E: Failed to fetch https://packages.erlang-solutions.com/ubuntu/pool/erlang-inets_25.0.4-1~ubuntu~focal_amd64.deb rename failed, No such file or directory (/var/cache/apt/archives/partial/erlang-inets_1%3a25.0.4-1_amd64.deb -> /var/cache/apt/archives/erlang-inets_1%3a25.0.4-1_amd64.deb).
E: Failed to fetch https://packages.erlang-solutions.com/ubuntu/pool/erlang-snmp_25.0.4-1~ubuntu~focal_amd64.deb rename failed, No such file or directory (/var/cache/apt/archives/partial/erlang-snmp_1%3a25.0.4-1_amd64.deb -> /var/cache/apt/archives/erlang-snmp_1%3a25.0.4-1_amd64.deb).
E: Failed to fetch https://packages.erlang-solutions.com/ubuntu/pool/erlang-parsetools_25.0.4-1~ubuntu~focal_amd64.deb rename failed, No such file or directory (/var/cache/apt/archives/partial/erlang-parsetools_1%3a25.0.4-1_amd64.deb -> /var/cache/apt/archives/erlang-parsetools_1%3a25.0.4-1_amd64.deb).
E: Failed to fetch https://packages.erlang-solutions.com/ubuntu/pool/erlang-tools_25.0.4-1~ubuntu~focal_amd64.deb rename failed, No such file or directory (/var/cache/apt/archives/partial/erlang-tools_1%3a25.0.4-1_amd64.deb -> /var/cache/apt/archives/erlang-tools_1%3a25.0.4-1_amd64.deb).
E: Failed to fetch https://packages.erlang-solutions.com/ubuntu/pool/erlang-xmerl_25.0.4-1~ubuntu~focal_amd64.deb rename failed, No such file or directory (/var/cache/apt/archives/partial/erlang-xmerl_1%3a25.0.4-1_amd64.deb -> /var/cache/apt/archives/erlang-xmerl_1%3a25.0.4-1_amd64.deb).
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

I have confirmed that we are not blocking any sites, everything is accessible. 

[dpuigdomenec]

Hi @S.Bradley 

Thanks for the response.

I'm getting the same error at my side.

Looking for the solution.

I will keep you posted.

Thanks!

David

[dpuigdomenec · Accepted solution]

Hi @S.Bradley 

The root cause of the issue is that the used repository to get erlang > 25+ packages is not longer accessible.

Instead I found another one available.

I will be updating the installer script but in the meantime you should be good to execute above commands to reinstall the repositories and get the proper rabbitmq-server version.

Commands to execute:

// we need to execute above commands as root

sudo su root

// remove any potential version installed

apt-get remove rabbitmq-server && apt-get purge rabbitmq-server

apt-get remove erlang && apt-get purge erlang

// disable the legacy repository for erlang > 25+ packages
echo "#deb https://packages.erlang-solutions.com/ubuntu focal contrib" | sudo tee /etc/apt/sources.list.d/erlang-solution.list

// disable the legacy rabbitmq-server

echo "#deb [trusted=yes] http://www.rabbitmq.com/debian/ testing main" | sudo tee /etc/apt/sources.list.d/rabbitmq.list

// update the apt list

apt update

// add the new repository storing erlang > 25+ packages
add-apt-repository -y ppa:rabbitmq/rabbitmq-erlang-25

// update the apt list

apt update

// add the rabbitmq repository just in case the installer script did not add it
curl -s https://packagecloud.io/install/repositories/rabbitmq/rabbitmq-server/script.deb.sh | sudo bash

// update the apt list
apt update

// fix any broken dependency on the apt install package

sudo apt --fix-broken install

// install the 
apt-get install rabbitmq-server=3.11.4-1

Please let me know if this work at your end.

Best regards,

David

[S.Bradley]

Hi David,

Yes that worked - I ran your fix, removed the 2 expedition packages and re-ran the init script.  Everything seems to have installed, and there are no errors showing in the application - all the internal checks are now green.

Thanks for your help

Simon