docker-misp icon indicating copy to clipboard operation
docker-misp copied to clipboard

MISP Docker-Compose via Portainer

Open PandaLyfe opened this issue 4 years ago • 6 comments

I'm currently using ubuntu 20.04 with docker/docker-compose installed and I'm managing other applications using Portainer. I'm trying to install MISP with Portainer and so far everything appears to be working except for one service. ("coolacid/misp-docker:core-latest")

I attempted to install MISP by pulling the .yml file via git repository within Portainer and added the variables found in the .env file. After that, I just started the stack.

Again all services are running except for one and I can't seem to figure out why it is not working.

Any help is appreciated and let me know if additional information is needed.

MISP_Service_Error

PandaLyfe avatar Jan 01 '21 20:01 PandaLyfe

Is there any logs from when the image is started?

coolacid avatar Jan 11 '21 15:01 coolacid

I've downloaded all of the logs for every service except for "MISP-misp" because there were no logs available.

MISP_db_logs.txt MISP_mail_logs.txt MISP_misp_modules_logs.txt MISP_redis_logs.txt

Thanks again for the help and let me know if you need any further information.

PandaLyfe avatar Jan 12 '21 16:01 PandaLyfe

Yeah, it would need to be the logs from the MISP core container. If it's not even launching the container, I don't know where the problem would be. The only suggestions would be to ensure the some configurations from the docker-compose.yml file exist. Otherwise, it's a problem with Portainer.

coolacid avatar Jan 12 '21 16:01 coolacid

Fair enough. Here's some additional information and I hope it helps.

I attempted to get logs from the MISP_misp service again and it's now showing the following:

"Error grabbing logs: rpc error: code = Unknown desc = warning: incomplete log stream. some logs could not be retrieved for the following reasons: node 0l0582tvt78dd7n92hcpyr9cs is not available."

Additionally, in Portainer, I clicked on "containers" and located one for MISP_misp. I downloaded the logs and attached it below.

MISP_mispl_logs .txt

I have OpenCTI running in Portainer, so I think it's running properly.

Again, thanks for the help and I hope this helps.

PandaLyfe avatar Jan 12 '21 18:01 PandaLyfe

I have the same issue. I also have OpenCTI running. Not sure if its any help but i also see this:

ID 0k6fky8riyakggc24jodt46sr
State rejected
State Message preparing
Error message invalid mount config for type "bind": bind source path does not exist: /data/compose/3/server-configs
Image coolacid/misp-docker:core-latest
Slot 1
Created 2021-01-16 22:09:04

azzarin avatar Jan 16 '21 21:01 azzarin

So I see what you mean. I have SSH access to my Portainer stack server. So I went ahead and created that directory that it stated was missing via the inspect ! button on the dashboard.

sudo mkdir -d /data/compose/2 && cd /data/compose/2

For me it was compose/2, I see some of you stating compose/3. Double check your errors

Then I created each file, stopping and starting the stack to get a new error each time. Later I discovered I should have created new DIRECTORIES!

sudo mkdir files logs server-configs ssl

That fixed the issue!

image

GIJosh2687 avatar Jul 20 '22 15:07 GIJosh2687