CrowdSec•5w ago

Upgrade to 1.7.0

I just tried to upgrade from 1.6.11 to 1.7.0 but the update always fails on either main nor lapi connected machines. Main machine:

Sep 03 10:07:50 vps crowdsec[1090085]: FATAL crowdsec init: while loading acquisition config: missing labels in /etc/crowdsec/acquis.yaml (position 3)
Sep 03 10:07:50 vps systemd[1]: crowdsec.service: Control process exited, code=exited, status=1/FAILURE

Sep 03 10:07:50 vps crowdsec[1090085]: FATAL crowdsec init: while loading acquisition config: missing labels in /etc/crowdsec/acquis.yaml (position 3)
Sep 03 10:07:50 vps systemd[1]: crowdsec.service: Control process exited, code=exited, status=1/FAILURE

acquis.yaml:

filenames:
  - /var/log/auth.log
  - /var/log/secure
labels:
  type: syslog
source: file
---
filenames:
  - /var/log/messages
  - /var/log/syslog
  - /var/log/kern.log
labels:
  type: syslog
source: file
---
filenames:
  - /home/user/traefik/logs/*.log
labels:
  type: traefik
source: file

filenames:
  - /var/log/auth.log
  - /var/log/secure
labels:
  type: syslog
source: file
---
filenames:
  - /var/log/messages
  - /var/log/syslog
  - /var/log/kern.log
labels:
  type: syslog
source: file
---
filenames:
  - /home/user/traefik/logs/*.log
labels:
  type: traefik
source: file

Similar on another machine:

Sep 03 09:58:17 Authentik crowdsec[7032]: FATAL crowdsec init: while initializing LAPIClient: authenticate watcher (1001-authentik): API error: missing: invalid character '\x1f' looking for beginning of value
Sep 03 09:58:17 Authentik systemd[1]: crowdsec.service: Main process exited, code=exited, status=1/FAILURE

Sep 03 09:58:17 Authentik crowdsec[7032]: FATAL crowdsec init: while initializing LAPIClient: authenticate watcher (1001-authentik): API error: missing: invalid character '\x1f' looking for beginning of value
Sep 03 09:58:17 Authentik systemd[1]: crowdsec.service: Main process exited, code=exited, status=1/FAILURE

Is there something I have to change to for added collections like traefik? Did anyone else had similar problems? Thanks in advance for any help and have a nice day.

9 Replies

CrowdSec•5w ago

Important Information

Thank you for getting in touch with your support request. To expedite a swift resolution, could you kindly provide the following information? Rest assured, we will respond promptly, and we greatly appreciate your patience. While you wait, please check the links below to see if this issue has been previously addressed. If you have managed to resolve it, please use run the command /resolve or press the green resolve button below.

Log Files

If you possess any log files that you believe could be beneficial, please include them at this time. By default, CrowdSec logs to /var/log/, where you will discover a corresponding log file for each component.

Guide Followed (CrowdSec Official)

If you have diligently followed one of our guides and hit a roadblock, please share the guide with us. This will help us assess if any adjustments are necessary to assist you further.

Screenshots

Please forward any screenshots depicting errors you encounter. Your visuals will provide us with a clear view of the issues you are facing.

bui•5w ago

Hello ! At first glance, your acquis seems legitimate let me have a closer look

se7entynineOP•5w ago

Thanks for the quick reply. I tried the update on another different machine with a similar acquis.yaml and it didnt throw any error messages:

#Generated acquisition file - wizard.sh (service: ssh) / files : /var/log/auth.log
filenames:
  - /var/log/auth.log
labels:
  type: syslog
---
#Generated acquisition file - wizard.sh (service: linux) / files : /var/log/syslog /var/log/kern.log
filenames:
  - /var/log/syslog
  - /var/log/kern.log
labels:
  type: syslog
---
source: docker
container_name:
 - immich_server
labels:
  type: immich

#Generated acquisition file - wizard.sh (service: ssh) / files : /var/log/auth.log
filenames:
  - /var/log/auth.log
labels:
  type: syslog
---
#Generated acquisition file - wizard.sh (service: linux) / files : /var/log/syslog /var/log/kern.log
filenames:
  - /var/log/syslog
  - /var/log/kern.log
labels:
  type: syslog
---
source: docker
container_name:
 - immich_server
labels:
  type: immich

Maybe it's related to the manual added collection without docker integration ?

bui•5w ago

I didn't get an error when trying to spin up crowdsec with the acquis you mentioned earlier maybe you have some formating mistake that didn't make it in the paste ?

se7entynineOP•5w ago

I just copy-pasted the content of the acquis file :/

bui•5w ago

can you cat -eT the file to see if some non printables are messing up ?

se7entynineOP•5w ago

I downgraded to 1.6.11 again, rebooted and tried the update again and it went through

bui•5w ago

wut solar flares ? 😄

se7entynineOP•5w ago

Same process on the second machine and it also worked lol no clue what happened but i'm glad it worked out 😄

Gaming

Programming

Upgrade to 1.7.0

Did you find this page helpful?