Updating MineMeld

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
L7 Applicator
No ratings

By default the MineMeld loader installs in the VM a scheduled job inside the VM to automatically check and install the latest version of the MineMeld packages. The scheduled auto update job runs once per day.

 

To force a an update just run the minemeld-auto-update utility:

$ /usr/sbin/minemeld-auto-update

 

To disable the auto update job check the article Disabling MineMeld auto update.

 

Rate this article:
Comments
L2 Linker

Hi Luigi,

 

Trying to auto update but its telling me that i require Superuser priveledges.

 

Larry

L1 Bithead

Please add sudo before the command :

 

$ sudo /usr/sbin/minemeld-auto-update

 

L3 Networker

I got "[invalid image]" ? See below

 

 

minemeld@minemeld:~$ sudo /usr/sbin/minemeld-auto-update
[sudo] password for minemeld: 
2016-12-05 11:00:51,381 INFO:0.9.7 Current status:
2016-12-05 11:00:51,381 INFO:0.9.7 minemeld-engine: current: 0.9.30 latest: 0.9.30
2016-12-05 11:00:51,381 INFO:0.9.7 minemeld-webui: current: 0.9.30 latest: 0.9.30
2016-12-05 11:00:51,381 INFO:0.9.7 minemeld-prototypes: current: 0.9.30 latest: 0.9.30
2016-12-05 11:00:51,568 DEBUG:0.9.7 curl output: 
2016-12-05 11:00:51,612 DEBUG:0.9.7 curl output: 
2016-12-05 11:00:51,612 DEBUG:0.9.7 gpgv: /usr/bin/gpgv --ignore-time-conflict --keyring /etc/apt/trusted.gpg /tmp/mmaupackagesgpgfGU_ps /tmp/mmaupackagesVCmHPn
2016-12-05 11:00:51,625 INFO:0.9.7 gpgv output: gpgv: Signature made Fri 02 Dec 2016 09:54:48 AM EST using RSA key ID 7B630999
gpgv: Good signature from "Palo Alto Networks, MineMeld Team <minemeld@paloaltonetworks.com>"
gpgv: aka "[invalid image]"
2016-12-05 11:00:51,628 INFO:0.9.7 No package to deploy, exit

 

L7 Applicator

@niuk you are already at the latest MM version (currently 0.9.30). Invalid image is a message from GPG not being to visualize the image embedded in MM gpg signature key, nothing to be worry about. The imporant thing is that gpgv is able to verify the manifest signature.

L0 Member

Hi Luigi,

 

My updates were working but they broke about a month ago.  I am getting an error with the update script or apt (see below).  Have tried clearing the apt-cache and a few other things.  Have confirmed access to the update locations is working through my proxy.  Any suggestions?

 

Minemeld update error.PNG

 

Thanks

Chad

L3 Networker

 Hi Luigi,

 

my Version is on 0.9.16 and the update say it is the latest. How could i update to 0.9.32?

 

Thanks,

Frank

L7 Applicator

Hi @FJU-ITCS,

0.9.18 introduced a new update mechanism. To upgrade to the latest release follow instructions in the 0.9.18 RNs: https://live.paloaltonetworks.com/t5/MineMeld-Discussions/What-s-new-in-MineMeld-0-9-18/m-p/98409/hi...

L2 Linker

Forgive me if I'm being ignorant but I've searched the forum and couldn't find anything on it.

 

I've installed minemeld on Ubuntu LTS 16 using minemeld-ansible (development version instead of the stable). But for some reason, I could not find the auto update command below:

 

/usr/sbin/minemeld-auto-update

  How do I update MineMeld development branch? Should I re-run the minemeld-ansible again to update?

 

P/s: I'm still new to minemeld..

L1 Bithead

Hi,

 

Can anyone assist what is the issue?

 

2018-05-15 12_14_01-10.100.4.12 - PuTTY.png

L0 Member

which IP(s) is used for updating MineMeld? Thx.

L3 Networker

Can not upgrade to 0.9.50

 

/opt/minemeld/log# sudo /usr/sbin/minemeld-auto-update
2018-10-17 12:04:28,873 INFO:0.9.11 Current status:
2018-10-17 12:04:28,873 INFO:0.9.11 minemeld-engine: current: 0.9.44 latest: 0.9.44
2018-10-17 12:04:28,874 INFO:0.9.11 minemeld-webui: current: 0.9.44 latest: 0.9.44
2018-10-17 12:04:28,874 INFO:0.9.11 minemeld-prototypes: current: 0.9.44 latest: 0.9.44
2018-10-17 12:04:29,023 DEBUG:0.9.11 curl output:
2018-10-17 12:04:29,113 DEBUG:0.9.11 curl output:
2018-10-17 12:04:29,113 DEBUG:0.9.11 gpgv: /usr/bin/gpgv --ignore-time-conflict --keyring /etc/apt/trusted.gpg --keyring /etc/apt/trusted.gpg.d/minemeld.gpg /tmp/mmaupackagesgpgUlquCA /tmp/mmaupackagesLFlVWK
2018-10-17 12:04:29,123 INFO:0.9.11 gpgv output: gpgv: Signature made Fri 27 Jul 2018 09:20:38 PM ICT using RSA key ID 7B630999
gpgv: Good signature from "Palo Alto Networks, MineMeld Team <minemeld@paloaltonetworks.com>"
gpgv: aka "[invalid image]"

2018-10-17 12:04:29,136 INFO:0.9.11 Marking minemeld-engine 0.9.50.post1 for deployment
2018-10-17 12:04:29,136 INFO:0.9.11 Marking minemeld-webui 0.9.50 for deployment
2018-10-17 12:04:29,137 INFO:0.9.11 Marking minemeld-prototypes 0.9.50 for deployment
2018-10-17 12:04:29,137 INFO:0.9.11 Space available on /opt/minemeld device: 8287468KB
2018-10-17 12:04:29,137 INFO:0.9.11 Downloading package minemeld-engine version 0.9.50.post1 from http://minemeld-updates.panw.io/stage2/0_9/minemeld-core-0.9.50.post1-linux-x86_64.tar.gz
2018-10-17 12:04:29,928 DEBUG:0.9.11 curl output:
2018-10-17 12:04:29,928 INFO:0.9.11 Package minemeld-engine version 0.9.50.post1 downloaded in /tmp/minemeld-engineJ6W1bg
2018-10-17 12:04:30,828 INFO:0.9.11 New extensions frigidaire created
Setting up virtualenv
New python executable in /opt/minemeld/engine/0.9.50.post1/bin/python
Installing setuptools, pip, wheel...
Complete output from command /opt/minemeld/engine/0.9.50.post1/bin/python - setuptools pip wheel:
Looking in links: /tmp/minemeld-engine0AUDIZ/data
Collecting setuptools
/tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:369: SNIMissingWarning: An HTTPS request has been made, but the SNI (Server Name Indication) extension to TLS is not available on this platform. This may cause the server to present an incorrect TLS certificate, which can cause validation failures. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
/tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
/tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl
/tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl
/tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl
/tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl
/tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl
/tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
Could not install packages due to an EnvironmentError: HTTPSConnectionPool(host='files.pythonhosted.org', port=443): Max retries exceeded with url: /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl (Caused by ProtocolError('Connection aborted.', error(104, 'Connection reset by peer')))

----------------------------------------
...Installing setuptools, pip, wheel...done.
Traceback (most recent call last):
File "/tmp/minemeld-engine0AUDIZ/data/virtualenv.py", line 2343, in <module>
main()
File "/tmp/minemeld-engine0AUDIZ/data/virtualenv.py", line 712, in main
symlink=options.symlink)
File "/tmp/minemeld-engine0AUDIZ/data/virtualenv.py", line 947, in create_environment
download=download,
File "/tmp/minemeld-engine0AUDIZ/data/virtualenv.py", line 904, in install_wheel
call_subprocess(cmd, show_stdout=False, extra_env=env, stdin=SCRIPT)
File "/tmp/minemeld-engine0AUDIZ/data/virtualenv.py", line 796, in call_subprocess
% (cmd_desc, proc.returncode))
OSError: Command /opt/minemeld/engine/0.9.50.post1/bin/python - setuptools pip wheel failed with error code 1
2018-10-17 12:04:40,946 ERROR:0.9.11 Exception deploying version 0.9.50.post1 of package minemeld-engine
Traceback (most recent call last):
File "/usr/sbin/minemeld-auto-update", line 534, in deploy_package
targetdir
File "/usr/sbin/minemeld-auto-update", line 207, in engine_deployer
raise RuntimeError('Error deploying package %s' % pname)
RuntimeError: Error deploying package minemeld-engine
2018-10-17 12:04:41,004 INFO:0.9.11 Downloading package minemeld-webui version 0.9.50 from http://minemeld-updates.panw.io/stage2/0_9/minemeld-webui-0.9.50.tar.gz
2018-10-17 12:04:41,382 DEBUG:0.9.11 curl output:
2018-10-17 12:04:41,383 INFO:0.9.11 Package minemeld-webui version 0.9.50 downloaded in /tmp/minemeld-webuiIlwkyb
2018-10-17 12:04:41,590 INFO:0.9.11 Successfully deployed package minemeld-webui version 0.9.50
2018-10-17 12:04:41,602 INFO:0.9.11 Downloading package minemeld-prototypes version 0.9.50 from http://minemeld-updates.panw.io/stage2/0_9/minemeld-prototypes-0.9.50.tar.gz
2018-10-17 12:04:41,707 DEBUG:0.9.11 curl output:
2018-10-17 12:04:41,707 INFO:0.9.11 Package minemeld-prototypes version 0.9.50 downloaded in /tmp/minemeld-prototypesqqkiYG
2018-10-17 12:04:41,800 INFO:0.9.11 Successfully deployed package minemeld-prototypes version 0.9.50
2018-10-17 12:04:41,967 CRITICAL:0.9.11 One of the packages had errors, abort
2018-10-17 12:04:41,968 INFO:0.9.11 Removing stale version 0.9.50.post1 of package minemeld-engine
2018-10-17 12:04:42,200 INFO:0.9.11 Removing stale version 0.9.50 of package minemeld-webui
2018-10-17 12:04:42,330 INFO:0.9.11 Removing stale version 0.9.50 of package minemeld-prototypes

  • 37641 Views
  • 11 comments
  • 0 Likes
Register or Sign-in
Contributors
Labels
Article Dashboard
Version history
Last Updated:
‎02-04-2016 05:39 AM
Updated by: