Upgrading process is not working properly about wazuh-docker

[havidarou]

I have limited the information used as persistent data for Wazuh by modifying data_dirs.env to:

i=0
DATA_DIRS[((i++))]="etc"
DATA_DIRS[((i++))]="logs"
DATA_DIRS[((i++))]="queue/syscheck"
DATA_DIRS[((i++))]="queue/rootcheck"
DATA_DIRS[((i++))]="api/configuration"
export DATA_DIRS

The change can be seen in https://github.com/wazuh/wazuh-docker/tree/3.6.1_6.4.2_upgrade

This is a temporal fix for Wazuh 3.6.1_6.4.2. We should think of a different way to approach this problem by thoroughly checking what information should be persistent in every one of Wazuh versions.

[SitoRBJ]

Hello team,

We have updated the list of files to keep in the volume for successful updates.

i=0
DATA_DIRS[((i++))]="api/configuration"
DATA_DIRS[((i++))]="etc/client.keys"
DATA_DIRS[((i++))]="etc/decoders"
DATA_DIRS[((i++))]="etc/lists"
DATA_DIRS[((i++))]="etc/local_internal_options.conf"
DATA_DIRS[((i++))]="etc/localtime"
DATA_DIRS[((i++))]="etc/ossec.conf"
DATA_DIRS[((i++))]="etc/ossec-init.conf"
DATA_DIRS[((i++))]="etc/rootcheck"
DATA_DIRS[((i++))]="etc/rules"
DATA_DIRS[((i++))]="etc/shared"
DATA_DIRS[((i++))]="etc/sslmanager.cert"
DATA_DIRS[((i++))]="etc/sslmanager.key"
DATA_DIRS[((i++))]="logs"
DATA_DIRS[((i++))]="queue/syscheck"
DATA_DIRS[((i++))]="queue/rootcheck"
DATA_DIRS[((i++))]="queue/agent-groups"
DATA_DIRS[((i++))]="queue/agent-info"
DATA_DIRS[((i++))]="queue/agents-timestamp"
DATA_DIRS[((i++))]="queue/agentless"
DATA_DIRS[((i++))]="queue/cluster"
DATA_DIRS[((i++))]="queue/rids"
DATA_DIRS[((i++))]="queue/fts"
DATA_DIRS[((i++))]="api/configuration"
export DATA_DIRS

Wazuh manager service is successfully started, but the API service is not running.

WazuhAPI 2018-10-26 15:32:07 : Internal Error: uncaughtException
WazuhAPI 2018-10-26 15:32:07 : TypeError: Cannot read property 'uid' of undefined

By manually changing the following inputs to UID and GID values we have directly managed to start the service:

// get ossec uid and gid
fs.stat(path_log + '/api', function(err, stats) {
    ossec_uid = stats['uid'];
    ossec_gid = stats['gid'];
});

From: https://github.com/wazuh/wazuh-api/blob/master/helpers/logger.js#L25

The next step is to solve this problem.

Regards,

Alfonso

[SitoRBJ]

Hello team,

This error is solved in PR #65, where we have reduced the number of files exported to the external volume of /var/ossec in order to reduce possible conflicts in the updates through Docker.

We proceed to close the issue.

Regards,

Alfonso