acquire icon indicating copy to clipboard operation
acquire copied to clipboard

Bootbanks module fails with AttributeError

Open twiggler opened this issue 1 year ago • 0 comments

When I run acquire on ESXI I get:

[2024-11-12 14:56:06,669] [ERROR] Error while running module Bootbanks
Traceback (most recent call last):
  File "/opt/acquire-api/lib/python3.9/site-packages/acquire/acquire.py", line 939, in acquire_target
  File "/opt/acquire-api/lib/python3.9/site-packages/acquire/acquire.py", line 181, in run
  File "/opt/acquire-api/lib/python3.9/site-packages/acquire/acquire.py", line 690, in _run
AttributeError: 'RootFilesystemEntry' object has no attribute 'top'
[2024-11-12 14:56:06,669] [INFO ] 

I have a /bootbank entry which is symlinked to /vmfs/volumes/ce05e607-4f4bd1b5-8f8d-b2bfbc2c924e

/vmfs/volumes/ce05e607-4f4bd1b5-8f8d-b2bfbc2c924e appears to be a root file system entry:

[root@localhost:/vmfs/volumes/ce05e607-4f4bd1b5-8f8d-b2bfbc2c924e] df 
Filesystem       Bytes       Used   Available Use% Mounted on
VMFS-L     24427626496 8870952960 15556673536  36% /vmfs/volumes/OSDATA-672b6bed-49e3885b-4da5-525400de4472
vfat        1073577984  211714048   861863936  20% /vmfs/volumes/BOOTBANK1
vfat        1073577984      32768  1073545216   0% /vmfs/volumes/BOOTBANK2

And assuming that /vmfs/volumes/OSDATA-672b6bed-49e3885b-4da5-525400de4472 is represented by a RootFileSystemEntry, something probably broke at some point, my guess would be https://github.com/fox-it/dissect.target/issues/575

twiggler avatar Nov 12 '24 16:11 twiggler