MineMeld on Ubuntu 18.04

[MoeJomha]

Hi,

Is MineMeld supported on Ubuntu 18.04? There doesn't seem to be any documentation or mention of Ubuntu 18.04, we've ran into issues trying to set it up as we were trying to rely on the 16.04 guides but Ubuntu 18.04 has changed quite a bit from previous versions.

Are we going to have to drop to 16.04?

Any help would be appreciated.

Thanks

[crimichigan]

I'd be happy with the 16.04 guides, where did you find those? Everything I see says 14.04. I really don't want to set this up on trusty just to have to do it all over again in 6 months.

[fwmike]

I'm in complete agreement. Looking at building new instances and guidance and or clarity on OS support would be nice.

[borising]

Hi @MoeJomha, @fwmike and @crimichigan,
 
If you follow the guide to install Minemeld on 16.04 with the use of the ansible playbook, then you can easily install Minemeld on 18.04 LTS, as I have just done.
 
You can find the link here:
https://github.com/PaloAltoNetworks/minemeld-ansible

Best regards,

Bo

[Sistemas_SanLucar]

Hi,

I could install Minemeld in Ubuntu 18.04 but I had a problem

https://github.com/PaloAltoNetworks/minemeld-ansible/issues/35

and fixed it.

I have a question. I can't run the command

/usr/sbin/minemeld-auto-update

File minemled-auto-update does not exists. then If I want to update Minemeld, how does I make it?

Thank you

[borising]

Hi @Sistemas_SanLucar

I normally just run the playbook again.

Regards,

Bo Rising

[Sistemas_SanLucar]

Hi,

Forgive my ignorance on the subject. You mean to rerun the command:

ansible-playbook -K -i 127.0.0.1, local.yml

or I have to rerun some more additional command before.

Thank you

[hshawn]

Just tried to run the ubuntu 16 ansible playbook instructions to install on Ubuntu server 18... no joy. fails immediately with TASK [infrastructure : include_vars] *********************************************************************************

fatal: [127.0.0.1]: FAILED! => {"msg": "No file was found when using with_first_found. Use the 'skip: true' option to allow this tasl to be skipped if no files are found"}

to retry, use: --limit @/root/minemeld-ansible/local.retry

I suspect that this may be an issue even when I try on Ubuntu 16 since the previously working CentOS7 used to work but now also gives me some other errors and fails now but will try a few things and see what I can get. 

[borising]

Hi @hshawn, @Sistemas_SanLucar,

I am really sorry, I totally forgot to tell you, that you needed to create some files specific for the 18.04 release.

I found the following pull request from cemasirt, which does exactly this. So, if you just create the files from the following link, in their corresponding paths, then I am sure that it works for you.

https://github.com/PaloAltoNetworks/minemeld-ansible/pull/43

PS.: Remember to use the @ otherwise I am not sure that I get an email, that you have asked me or replied to my posts 🙂

[jlieberman]

Has anyone worked out a way to install minemeld in Ubuntu 18.04?

I was using https://live.paloaltonetworks.com/t5/minemeld-articles/manually-install-minemeld-on-ubuntu-16-04/ta-... to install Minemeld into Unbuntu 18.04.

When I get to Step 9 and run the following cmd to check that minemeld is installed and running I get the following

sudo: /opt/minemeld/engine/current/bin/supervisorctl: command not found

I cannot get past this.  

Any help would be greatly appreciated.