plugins icon indicating copy to clipboard operation
plugins copied to clipboard

Wazuh service does not run together with Caddy

Open ArjenR opened this issue 4 months ago • 0 comments

Important notices Before you add a new report, we ask you kindly to acknowledge the following:

  • [X] I have read the contributing guide lines at https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md
  • [X] I have searched the existing issues, open and closed, and I'm convinced that mine is new.
  • [X] The title contains the plugin to which this issue belongs

Describe the bug Wazuh agent will not start completely due to wazuh-modulesd quitting after start with an "Illegal Instruction" Clean install of version 1.0 and later version 1.1 of the plugin

To Reproduce Steps to reproduce the behavior:

  1. Install Caddy plugin
  2. Configure and start Caddy service with a simple reverse proxy.
  3. Install Wazuh plugin
  4. Configure IP address of wazuh server.
  5. Service fails to start.
  6. Stop Caddy service
  7. Start Wazuh service
  8. Wazuh runs

Expected behavior Wazuh service should run.

Screenshots *** With caddy running ***

# /var/ossec/bin/wazuh-modulesd -fdd
2024/10/23 15:28:25 wazuh-modulesd[13670] debug_op.c:305 at os_logging_config(): DEBUG: (1228): Element 'log_format' without any option.
2024/10/23 15:28:25 wazuh-modulesd[13670] debug_op.c:116 at _log_function(): DEBUG: Logging module auto-initialized
2024/10/23 15:28:25 wazuh-modulesd[13670] main.c:77 at main(): DEBUG: Wazuh home directory: /var/ossec
2024/10/23 15:28:25 wazuh-modulesd[13670] main.c:87 at main(): INFO: Started (pid: 13670).
2024/10/23 15:28:25 wazuh-modulesd[13670] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB
2024/10/23 15:28:25 wazuh-modulesd[13670] main.c:95 at main(): DEBUG: Created new thread for the 'agent-upgrade' module.
2024/10/23 15:28:25 wazuh-modulesd[13670] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB
2024/10/23 15:28:25 wazuh-modulesd:agent-upgrade[13670] wm_agent_upgrade_agent.c:96 at wm_agent_upgrade_start_agent_module(): INFO: (8153): Module Agent Upgrade started.
2024/10/23 15:28:25 wazuh-modulesd[13670] main.c:95 at main(): DEBUG: Created new thread for the 'syscollector' module.
2024/10/23 15:28:25 wazuh-modulesd[13670] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB
2024/10/23 15:28:25 wazuh-modulesd[13670] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB
2024/10/23 15:28:25 wazuh-modulesd[13670] mq_op.c:52 at StartMQWithSpecificOwnerAndPerms(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts
2024/10/23 15:28:25 wazuh-modulesd[13670] main.c:95 at main(): DEBUG: Created new thread for the 'control' module.
2024/10/23 15:28:25 wazuh-modulesd[13670] mq_op.c:53 at StartMQWithSpecificOwnerAndPerms(): DEBUG: (unix_domain) Maximum send buffer set to: '65792'.
2024/10/23 15:28:25 wazuh-modulesd[13670] mq_op.c:52 at StartMQWithSpecificOwnerAndPerms(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts
2024/10/23 15:28:25 wazuh-modulesd[13670] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB
2024/10/23 15:28:25 wazuh-modulesd:control[13670] wm_control.c:132 at wm_control_main(): INFO: Starting control thread.
2024/10/23 15:28:25 wazuh-modulesd[13670] mq_op.c:53 at StartMQWithSpecificOwnerAndPerms(): DEBUG: (unix_domain) Maximum send buffer set to: '65792'.
2024/10/23 15:28:25 wazuh-modulesd[13670] wmcom.c:136 at wmcom_main(): DEBUG: Local requests thread ready
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] wm_syscollector.c:158 at wm_sys_main(): DEBUG: Starting Syscollector.
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] wm_syscollector.c:100 at wm_sys_log_config(): DEBUG: {"syscollector":{"disabled":"no","scan-on-start":"yes","interval":3600,"network":"yes","os":"yes","hardware":"yes","packages":"yes","ports":"yes","ports_all":"no","processes":"yes","sync_max_eps":10}}
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] logging_helper.c:31 at taggedLogFunction(): INFO: Module started.
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] logging_helper.c:31 at taggedLogFunction(): INFO: Starting evaluation.
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] logging_helper.c:40 at taggedLogFunction(): DEBUG: Starting hardware scan
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] logging_helper.c:40 at taggedLogFunction(): DEBUG: Ending hardware scan
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] logging_helper.c:40 at taggedLogFunction(): DEBUG: Starting os scan
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] logging_helper.c:40 at taggedLogFunction(): DEBUG: Ending os scan
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] logging_helper.c:40 at taggedLogFunction(): DEBUG: Starting network scan
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] logging_helper.c:40 at taggedLogFunction(): DEBUG: Ending network scan
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] logging_helper.c:40 at taggedLogFunction(): DEBUG: Starting packages scan
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] logging_helper.c:40 at taggedLogFunction(): DEBUG: Ending packages scan
2024/10/23 15:28:25 wazuh-modulesd:syscollector[13670] logging_helper.c:40 at taggedLogFunction(): DEBUG: Starting ports scan
Illegal instruction

*** With caddy stopped ***

# /var/ossec/bin/wazuh-modulesd -fdd
2024/10/23 15:36:14 wazuh-modulesd[62105] debug_op.c:305 at os_logging_config(): DEBUG: (1228): Element 'log_format' without any option.
2024/10/23 15:36:14 wazuh-modulesd[62105] debug_op.c:116 at _log_function(): DEBUG: Logging module auto-initialized
2024/10/23 15:36:14 wazuh-modulesd[62105] main.c:77 at main(): DEBUG: Wazuh home directory: /var/ossec
2024/10/23 15:36:14 wazuh-modulesd[62105] main.c:87 at main(): INFO: Started (pid: 62105).
2024/10/23 15:36:14 wazuh-modulesd[62105] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB
2024/10/23 15:36:14 wazuh-modulesd[62105] main.c:95 at main(): DEBUG: Created new thread for the 'agent-upgrade' module.
2024/10/23 15:36:14 wazuh-modulesd[62105] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB
2024/10/23 15:36:14 wazuh-modulesd:agent-upgrade[62105] wm_agent_upgrade_agent.c:96 at wm_agent_upgrade_start_agent_module(): INFO: (8153): Module Agent Upgrade started.
2024/10/23 15:36:14 wazuh-modulesd[62105] main.c:95 at main(): DEBUG: Created new thread for the 'syscollector' module.
2024/10/23 15:36:14 wazuh-modulesd[62105] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB
2024/10/23 15:36:14 wazuh-modulesd[62105] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB
2024/10/23 15:36:14 wazuh-modulesd[62105] main.c:95 at main(): DEBUG: Created new thread for the 'control' module.
2024/10/23 15:36:14 wazuh-modulesd[62105] mq_op.c:52 at StartMQWithSpecificOwnerAndPerms(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts
2024/10/23 15:36:14 wazuh-modulesd[62105] mq_op.c:52 at StartMQWithSpecificOwnerAndPerms(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts
2024/10/23 15:36:14 wazuh-modulesd:control[62105] wm_control.c:132 at wm_control_main(): INFO: Starting control thread.
2024/10/23 15:36:14 wazuh-modulesd[62105] mq_op.c:53 at StartMQWithSpecificOwnerAndPerms(): DEBUG: (unix_domain) Maximum send buffer set to: '65792'.
2024/10/23 15:36:14 wazuh-modulesd[62105] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB
2024/10/23 15:36:14 wazuh-modulesd[62105] mq_op.c:53 at StartMQWithSpecificOwnerAndPerms(): DEBUG: (unix_domain) Maximum send buffer set to: '65792'.
2024/10/23 15:36:14 wazuh-modulesd:syscollector[62105] wm_syscollector.c:158 at wm_sys_main(): DEBUG: Starting Syscollector.
2024/10/23 15:36:14 wazuh-modulesd[62105] wmcom.c:136 at wmcom_main(): DEBUG: Local requests thread ready
2024/10/23 15:36:14 wazuh-modulesd:syscollector[62105] wm_syscollector.c:100 at wm_sys_log_config(): DEBUG: {"syscollector":{"disabled":"no","scan-on-start":"yes","interval":3600,"network":"yes","os":"yes","hardware":"yes","packages":"yes","ports":"yes","ports_all":"no","processes":"yes","sync_max_eps":10}}
2024/10/23 15:36:14 wazuh-modulesd:syscollector[62105] logging_helper.c:31 at taggedLogFunction(): INFO: Module started.
2024/10/23 15:36:14 wazuh-modulesd:syscollector[62105] logging_helper.c:31 at taggedLogFunction(): INFO: Starting evaluation.
2024/10/23 15:36:14 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Starting hardware scan
2024/10/23 15:36:14 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Ending hardware scan
2024/10/23 15:36:14 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Starting os scan
2024/10/23 15:36:15 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Ending os scan
2024/10/23 15:36:15 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Starting network scan
2024/10/23 15:36:15 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Ending network scan
2024/10/23 15:36:15 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Starting packages scan
2024/10/23 15:36:15 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Ending packages scan
2024/10/23 15:36:15 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Starting ports scan
2024/10/23 15:36:15 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Ending ports scan
2024/10/23 15:36:15 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Starting processes scan
2024/10/23 15:36:15 wazuh-modulesd:syscollector[62105] logging_helper.c:40 at taggedLogFunction(): DEBUG: Ending processes scan
2024/10/23 15:36:15 wazuh-modulesd:syscollector[62105] logging_helper.c:31 at taggedLogFunction(): INFO: Evaluation finished.
2024/10/23 15:36:15 wazuh-modulesd:syscollector[62105] logging_helper.c:37 at taggedLogFunction(): DEBUG: Starting syscollector sync
2024/10/23 15:36:15 wazuh-modulesd[62105] wait_op.c:117 at os_wait_primitive(): DEBUG: Process locked due to agent is offline. Waiting for connection..

Relevant log files dmesg reports: pid 13670 (wazuh-modulesd), jid 0, uid 0: exited on signal 4 (no core dump - bad address)

Additional context Add any other context about the problem here.

Environment OPNsense 24.7.7-amd64 os-caddy (installed) 1.7.3 os-wazuh-agent (installed) 1.1

ArjenR avatar Oct 23 '24 15:10 ArjenR