Deploying Minemeld Using Vagrant and Virtualbox

[nbilal]

Hello All,

Based on @lmori's great guide for doing a manual install of Minemeld on Ubuntu 14.04, I have taken his configurations and wrapped them in a Vagrantfile for easy foolproof deployment of Minemeld. It's a simple 3 step process:

1. Install latest version of Virtualbox for your OS (Download)
2. Install latest version of Vagrant for your OS (Download)
3. From the command line of your OS, make a new project folder and prepare it for your new Vagrant box:

4. mkdir Minemeld
   cd Minemeld
   vagrant init

5. You will find a new file called "Vagrantfile" in the directory. Open it in you favorite text editor and replace the contents with the code below:

   Vagrant.configure(2) do |config|
     config.vm.define "minemeld" do |minemeld|
       minemeld.vm.box = "ubuntu/trusty64"
       minemeld.vm.hostname = "minemeld"
       minemeld.vm.network "forwarded_port", guest: 443, host: 8443
   
       minemeld.vm.provider "virtualbox" do |vb|
         # Display the VirtualBox GUI when booting the machine
         vb.gui = false
         # Customize the amount of memory on the VM:
         vb.memory = "4096"
         # Customize the number of vCPUs on the VM:
         vb.cpus = "2"
       end
   
       minemeld.vm.provision "shell", inline: <<-SHELL
         sudo sh -c "wget -qO - https://minemeld-updates.panw.io/gpg.key | sudo apt-key add - "
         sudo add-apt-repository -y "deb http://minemeld-updates.panw.io/ubuntu trusty-minemeld main"
         sudo apt-get update
         sudo apt-get install -y minemeld rsyslog-minemeld rsyslog-mmnormalize
       SHELL
     end
   end

6. Launch your new VM! This will take some time as it must download the ubuntu image used to build this machine:

   vagrant up minemeld

7. You may then connect into your new Minemeld CLI:

   vagrant ssh minemeld

8. You can also access the web UI by going to https://localhost:8443

NOTE: From within the Minemeld folder on the host system, you can stop the Minemeld VM by running 

vagrant halt minemeld

and completely remove the VM by running

vagrant destroy minemeld

The big advantage with Vagrant is that it eliminates a lot of the room for error and variation of environments that leads to installation issues for many users. I hope this helps more folks to try out Minemeld and begin developing use cases for it.

[James_Nesta]

Hi, I wanted to try out Minemeld, but the Ubuntu install instructions did not work out of the box for me, so I'm reverting to using this Vagrant installation guide instead.

Everything completes without errors. However, upon logging in for the first time with admin / minemeld, I get the following error (attached).

Any tips?

[lmori]

We just fixed a conflict in the installation mechanism, could you try installing using Ansible?

https://github.com/PaloAltoNetworks/minemeld-ansible

Or wait until early next week when we will release the fix in GA.