Installer errors on Ubuntu 22.04 about openappsec

[wwolkers]

looks to be the same error as #42

[orianelou]

Hi @wwolkers,

Regrettably, it seems that your NGINX version isn't among the officially supported distributions listed here. Rest assured, we'll consider this for inclusion in our next release.

For a more immediate solution, we suggest either deploying open-appsec using Docker to bypass these compatibility concerns or building the attachment, and getting the agent using the --download option of the install script (instead of --auto )

If you have any further questions or need assistance with either approach, please don't hesitate to ask.

Best,
Oriane

[wwolkers]

hi @orianelou ,

even if I run a newer version (supported) of nginx I still get the same errors

sudo ./open-appsec-install --auto
open-appsec for NGINX and Kong Installer v1.2245.1
For release notes and known limitations check:
https://docs.openappsec.io/release-notes
Searching local NGINX…
NGINX version found: 1.24.0-1-jammy
Downloading open-appsec NGINX attachment... stored in '/tmp/open-appsec'
Unsupported NGINX version, for supported platforms, OS and NGINX versions please see docs.openappsec.io
Downloading open-appsec agent... stored in '/tmp/open-appsec'
Unsupported OS, for supported platforms, OS and NGINX versions please see docs.openappsec.io

if I check the script, the error about an unsupported Nginx or OS only show because the download failed with a 403 access denied:

++ curl -s -w '%{http_code}' https://downloads.openappsec.io/packages/nginx-attachment/aarch64/ubuntu/jammy/ngx%5fmodule%5f1%2e24%2e0%2d1%2djammy.tar.gz --output /tmp/open-appsec/ngx_module_1.24.0-1-jammy.tar.gz

• nginx_curl=403
• '[' 403 '!=' 200 ']'
• [[ jammy =~ ^[0-9]+([.][0-9]+)?$ ]]
  ++ curl -s -w '%{http_code}' https://downloads.openappsec.io/packages/nginx-attachment/aarch64/ubuntu/jammy/ngx%5fmodule%5f1%2e24%2e0%2d1%2djammy.tar.gz --output /tmp/open-appsec/ngx_module_1.24.0-1-jammy.tar.gz
• nginx_curl=403
• '[' 403 '!=' 200 ']'
• echo 'Unsupported NGINX version, for supported platforms, OS and NGINX versions please see docs.openappsec.io'
  Unsupported NGINX version, for supported platforms, OS and NGINX versions please see docs.openappsec.io
• CURL_FAILIURE=true

Same goes for the OS:

• echo 'Downloading open-appsec agent... stored in '''/tmp/open-appsec''''
  Downloading open-appsec agent... stored in '/tmp/open-appsec'
  ++ curl -s -w '%{http_code}' https://downloads.openappsec.io/packages/agent/aarch64/ubuntu/jammy/openappsec-jammy.tar.gz --output /tmp/open-appsec/openappsec.tar.gz
• agent_packages_curl=403
• '[' 403 '!=' 200 ']'
• [[ jammy =~ ^[0-9]+([.][0-9]+)?$ ]]
  ++ curl -s -w '%{http_code}' https://downloads.openappsec.io/packages/agent/aarch64/ubuntu/jammy/openappsec-jammy.tar.gz --output /tmp/open-appsec/openappsec.tar.gz
• agent_packages_curl=403
• '[' 403 '!=' 200 ']'
• echo 'Unsupported OS, for supported platforms, OS and NGINX versions please see docs.openappsec.io'
  Unsupported OS, for supported platforms, OS and NGINX versions please see docs.openappsec.io
• CURL_FAILIURE=true
• '[' true = true ']'

[orianelou]

Hi @wwolkers,

Could you please let us know which CPU architecture are you using?

Thanks,

Oriane

[wwolkers]

Hi @orianelou ,

This is a VM running on an oracle cloud instance.

Ampere A1 Compute instances (Arm processor)

ubuntu@vm-server:~$ lscpu
Architecture: aarch64
CPU op-mode(s): 32-bit, 64-bit
Byte Order: Little Endian
CPU(s): 4
On-line CPU(s) list: 0-3
Vendor ID: ARM
Model name: Neoverse-N1
Model: 1
Thread(s) per core: 1
Core(s) per cluster: 4
Socket(s): -
Cluster(s): 1
Stepping: r3p1
BogoMIPS: 50.00
Flags: fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm lrcpc dcpop asimddp ssbs
NUMA:
NUMA node(s): 1
NUMA node0 CPU(s): 0-3
Vulnerabilities:
Itlb multihit: Not affected
L1tf: Not affected
Mds: Not affected
Meltdown: Not affected
Mmio stale data: Not affected
Retbleed: Not affected
Spec store bypass: Mitigation; Speculative Store Bypass disabled via prctl
Spectre v1: Mitigation; __user pointer sanitization
Spectre v2: Mitigation; CSV2, BHB
Srbds: Not affected
Tsx async abort: Not affected

[orianelou]

Hi,

I'm sorry to inform you that ARM isn't currently supported. You can keep tabs on our efforts to add ARM support through this open issue: #19.

Thank you for your understanding.

Best regards,

Oriane