Actions
Bug #16953
closederror when using openscap technique
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
Description
on a centos7, i ran the technique with parameters
profile: xccdf_org.ssgproject.content_profile_standard
scap_file: ssg-centos7-ds.xml
the output of the agent is
E| compliant Inventory inventory Next inventory scheduled between 00:00 and 06:00 E| compliant plugin_openscap_policies Schedule Simple openscap Scheduling openscap was correct E| compliant plugin_openscap_policies OpenSCAP packages packages Set the iterator openscap.packages value to scap-security-guide,openscap-scanner was correct E| compliant plugin_openscap_policies Package present scap-security-gui| Presence of package scap-security-guide in any version was correct E| compliant plugin_openscap_policies Package present openscap-scanner Presence of package openscap-scanner in any version was correct E| error plugin_openscap_policies send report to server report.html File /var/rudder/tmp/openscap_policies.html does not exist could not be repaired 2020-03-23T22:46:41+00:00 rudder info: Executing 'no timeout' ... '/opt/rudder/bin/rudder-sign /var/rudder/tmp/openscap_policies.html 1.1' 2020-03-23T22:46:41+00:00 error: Finished command related to promiser '/opt/rudder/bin/rudder-sign' -- an error occurred, returned 2 2020-03-23T22:46:41+00:00 notice: Q: "...udder-sign /var": ERROR: Cannot sign: The file /var/rudder/tmp/openscap_policies.html doesn't exist 2020-03-23T22:46:41+00:00 rudder info: Last 1 quoted lines were generated by promiser '/opt/rudder/bin/rudder-sign /var/rudder/tmp/openscap_policies.html 1.1' 2020-03-23T22:46:41+00:00 rudder info: Completed execution of '/opt/rudder/bin/rudder-sign /var/rudder/tmp/openscap_policies.html 1.1' 2020-03-23T22:46:41+00:00 error: Method 'sharedfile_to_node' failed in some repairs 2020-03-23T22:46:41+00:00 error: Method 'plugin_openscap_policies' failed in some repairs E| n/a plugin_openscap_policies OpenSCAP packages packages Skipping method 'Variable iterator' with key parameter 'packages' since condition 'debian_10' is not reached was not applicable E| n/a plugin_openscap_policies OpenSCAP packages packages Skipping method 'Variable iterator' with key parameter 'packages' since condition 'debian_9' is not reached was not applicable E| n/a plugin_openscap_policies OpenSCAP packages packages Skipping method 'Variable iterator' with key parameter 'packages' since condition 'ubuntu_18' is not reached was not applicable E| n/a plugin_openscap_policies OpenSCAP packages packages Skipping method 'Variable iterator' with key parameter 'packages' since condition 'SUSE.(!sles_10)' is not reached was not applicable E| n/a plugin_openscap_policies run scan Openscap oscap xccdf eval | Skipping method 'Command execution result' with key parameter 'oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_standard --report /var/rudder/tmp/openscap_report.html ssg-centos7-ds.xml' since condition 'any.(schedule_simple_openscap_repaired)' is not reached was not applicable 2020-03-23T22:46:41+00:00 error: Method 'run_2fe56045_8fd8_44c2_b815_68c10d729dc8' failed in some repairs E| n/a Common Monitoring No Rudder monitoring information to share with the server
since schedule is not met, file doesn't exist, so it cannot send it to the serveur, hence the error
Updated by Nicolas CHARLES over 4 years ago
even when file is there it fails
2020-03-Add nodev Option to /dev/shmap xccdf eva": Title 2020-03-xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev 2020-03-pass2:53:29+00:00 Q: "...oscap xccdf eva": Result 2020-03-23T22:53:29+00:00 rudder info: Last 156 quoted lines were generated by promiser 'oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_standard --report /var/rudder/tmp/openscap_report.html /usr/share/xml/scap/ssg/content/ssg-centos7-ds.xml' 2020-03-23T22:53:29+00:00 rudder info: Completed execution of 'oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_standard --report /var/rudder/tmp/openscap_report.html /usr/share/xml/scap/ssg/content/ssg-centos7-ds.xml' E| compliant plugin_openscap_policies run scan Openscap oscap xccdf eval | Execute the command oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_standard --report /var/rudder/tmp/openscap_report.html /usr/share/xml/scap/ssg/content/ssg-centos7-ds.xml was correct E| error plugin_openscap_policies send report to server report.html File /var/rudder/tmp/openscap_policies.html does not exist could not be repaired 2020-03-23T22:53:29+00:00 rudder info: Executing 'no timeout' ... '/opt/rudder/bin/rudder-sign /var/rudder/tmp/openscap_policies.html 1.1' 2020-03-23T22:53:29+00:00 error: Finished command related to promiser '/opt/rudder/bin/rudder-sign' -- an error occurred, returned 2 2020-03-23T22:53:29+00:00 notice: Q: "...udder-sign /var": ERROR: Cannot sign: The file /var/rudder/tmp/openscap_policies.html doesn't exist 2020-03-23T22:53:29+00:00 rudder info: Last 1 quoted lines were generated by promiser '/opt/rudder/bin/rudder-sign /var/rudder/tmp/openscap_policies.html 1.1' 2020-03-23T22:53:29+00:00 rudder info: Completed execution of '/opt/rudder/bin/rudder-sign /var/rudder/tmp/openscap_policies.html 1.1' 2020-03-23T22:53:29+00:00 error: Method 'sharedfile_to_node' failed in some repairs 2020-03-23T22:53:29+00:00 error: Method 'plugin_openscap_policies' failed in some repairs ls /var/rudder/tmp/openscap_report.html /var/rudder/tmp/openscap_report.html
Updated by Nicolas CHARLES over 4 years ago
it's because sharefile_to_node doesn't guard the filesexist by a class condition
Updated by Nicolas CHARLES over 4 years ago
- Related to Bug #16955: sharedfile_to_node cannot send file generated during the run added
Updated by Nicolas CHARLES over 4 years ago
it's also because the file name is not correct
Updated by Nicolas CHARLES over 4 years ago
- Status changed from New to In progress
- Assignee set to Nicolas CHARLES
Updated by Nicolas CHARLES over 4 years ago
- Assignee changed from Nicolas CHARLES to Alexis Mousset
- Pull Request set to https://github.com/Normation/rudder-plugins/pull/255
Updated by Nicolas CHARLES over 4 years ago
- Status changed from In progress to Pending technical review
Updated by Nicolas CHARLES over 4 years ago
- Status changed from Pending technical review to Pending release
Applied in changeset rudder:rudder-plugins|c8559d0d74c525e60ce4381458ba36033613d19c.
Updated by Vincent MEMBRÉ over 4 years ago
- Target version changed from 6.0-1.0 to 6.1-1.0
Updated by Vincent MEMBRÉ over 4 years ago
- Status changed from Pending release to Released
Actions