WazuhDocker部署意外行为

Question

echo "[Service]" >> /etc/systemd/system/docker.service.d/proxy.conf 
echo "Environment=\"HTTP_PROXY=http://a:b@ip:port\"" >> /etc/systemd/system/docker.service.d/proxy.conf 
echo "Environment=\"HTTPS_PROXY=a:b@ip:port\"" >> /etc/systemd/system/docker.service.d/proxy.conf 
echo "Environment=\"NO_PROXY=localhost,127.0.0.1,::1\"" >> /etc/systemd/system/docker.service.d/proxy.conf 

指望的行为（基于在香草Ubuntu20 VM中的部署）

这些命令的输出应为

% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 26847  100 26847    0     0   229k      0 --:--:-- --:--:-- --:--:--  227k
Cert tool exists in Packages bucket
07/12/2022 07:45:30 INFO: Admin certificates created.
07/12/2022 07:45:30 INFO: Wazuh indexer certificates created.
07/12/2022 07:45:30 INFO: Wazuh server certificates created.
07/12/2022 07:45:30 INFO: Wazuh dashboard certificates created.
Moving created certificates to destination directory
changing certificate permissions
Setting UID indexer and dashboard
Setting UID for wazuh manager and worker

实现行为

docker-compose -f generate-indexer-certs.yml run --rm generator
Creating network "single-node_default" with the default driver
Pulling generator (wazuh/wazuh-certs-generator:0.0.1)...
0.0.1: Pulling from wazuh/wazuh-certs-generator
d7bfe07ed847: Pull complete
a6023cfa8265: Pull complete
6135753eefe9: Pull complete
9aaf0dae5d3f: Pull complete
Digest: sha256:6fc929d58d01b789d4a19c5da476c78cc267c0af07d1b22227ccae49acb084dc
Status: Downloaded newer image for wazuh/wazuh-certs-generator:0.0.1
Cert tool does not exist in any bucket
ERROR: certificates were not created

是否有人请建议可能导致此错误？

生成indexer-certss创建的容器。该脚本试图从

https：//packages.wazuh.com/4.3/wazuh-certs-tool.sh

下载工具。当此下载失败时，打印了错误“ CERT工具不存在”。您的容器很可能没有功能网络。您需要解决这个问题。
    

我终于弄清楚了。尽管我配置了Docker使用代理，但我还需要在

Answer 1

中添加一个环境变量以指向代理

services:
  generator:
    image: wazuh/wazuh-certs-generator:0.0.1
    hostname: wazuh-certs-generator
    volumes:
      - ./config/wazuh_indexer_ssl_certs/:/certificates/
      - ./config/certs.yml:/config/certs.yml
    environment:
      - HTTP_PROXY=<Proxy address>

Answer 2

Edit主机文件（ping packages.wazuh.com）

13.35.202.86 packages.wazuh.com

Mount /etc /hosts

# Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2)
version: '3'

services:
  generator:
    image: wazuh/wazuh-certs-generator:0.0.2
    hostname: wazuh-certs-generator
    volumes:
      - /etc/hosts:/etc/hosts
      - ./config/wazuh_indexer_ssl_certs/:/certificates/
      - ./config/certs.yml:/config/certs.yml

Answer 3