[Bro] ganeti cluster with bro cluster

[Pierre Gaulon]

Hi Dave,

First of all, thank you for your plugin, it is very useful! I am using
since a while.

Last time I used it I ran into an error and had to change the code to
see it.
In the last line of the plugin I appended the reason of the FAIL when it
fails:

self.message("{0} - Executing setcap: {1}".format(n.host, 'SUCCESS' if
success else 'FAIL ' + output[0]))

The reason was:
sorry, you must have a tty to run sudo

This is linked to the sudoers setting:
Defaults    requiretty

In order to fix it I couldn't find a workaround using the command given
to the plugin (using -tt for instance). I just commented the line using
visudo.
Any ideas to make both compatible are still welcome!

Hope it helps!
Best regards,
Pierre Gaulon.

On 13/2/17 21:43, Dave Crawford wrote:
> Hi Randy,
>
> I wrote a Bro plugin that takes care of the ’setcap’ tasks after each
> deploy. Just adjusts the paths to reflect your Bro instal. Let me know
> if you run into any issues with it.
>
> https://github.com/PingTrip/broctl-setcap
>
> -Dave
>  
>>
>> and i got the worker-0 node to be able to pcap its eth0 by
>>
>>    sudo setcap cap_net_raw,cap_net_admin=eip /usr/local/bro/bin/bro
>>
>> although i ran the same on worker-1 and worker-2, they fail with
>>
>>    worker-2 terminated immediately after starting; check output with
>> "diag"
>>    worker-1 terminated immediately after starting; check output with
>> "diag"
>>
>> and the logs say
>>
>>    fatal error: problem with interface eth0 (pcap_error: socket:
>> Operation not permitted (pcap_activate))
>
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170214/f5b7f900/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170214/f5b7f900/attachment.bin