Trouble Install Enterprise Plugin

[netpacket]

Hi I am trying to install the enterprise plugin on graylog docker image. I followed the instructions from documentation that showed how to mount a volume of the plugin. However, I am not seeing the plugin installed.

Setup

• Graylog 3.0.0
• Graylog Docker image 3.0
• Ubuntu 16.04
• Elastic search / image 5.6
• MongoDB image 3

Steps

1. created a plugin directory
2. download the plugin
3. edited the docker-compose file:
4. restarted docker-compose

Docker-compose file

version: ‘2’
services:
mongo:
image: “mongo:3”
volumes:
- mongo_data:/data/db
elasticsearch:
image: “docker.elastic.co/elasticsearch/elasticsearch:5.6.10”
volumes:
- es_data:/usr/share/elasticsearch/data
ports:
- 9200:9200
environment:
- http.host=0.0.0.0
- xpack.security.enabled=false
- ES_JAVA_OPTS=-Xms4096m -Xmx4096m
ulimits:
memlock:
soft: -1
hard: -1
mem_limit: 4g
graylog:
image: graylog/graylog:3.0
volumes:
- graylog_journal:/usr/share/graylog/data/journal
- . /graylog/plugin/graylog-plugin-auth-sso-3.0.0.jar:/usr/share/graylog/plugin/graylog-plugin-auth-sso-3.0.0.jar
environment:
GRAYLOG_PASSWORD_SECRET: pwd
GRAYLOG_ROOT_PASSWORD_SHA2: pwd
GRAYLOG_HTTP_EXTERNAL_URI: http://ip:port/
links:
- mongo
- elasticsearch
depends_on:
- mongo
- elasticsearch
ports:
- 9000:9000
- 12201:12201/udp
- 514:514
- 1514:1514
- 514:514/udp
- 12201:12201

[jan (Jan Doberstein)]

where did you include the enterprise plugin?

[netpacket]

Hey @jan,

My bad. I mounted the plugin under the volume in graylogs.

I put the plugin in the /root/graylog/plugin/ directory and mounted it to the /usr/share/ directory.

Docker Compose file

graylog:
image: graylog/graylog:3.0
volumes:
- graylog_journal:/usr/share/graylog/data/journal
- /root/graylog/plugin/graylog-plugin-auth-sso-3.0.0.jar:/usr/share/graylog/plugin/graylog-plugin-auth-sso-3.0.0.jar

- /root/graylog/plugin/graylog-plugin-enterprise-3.0.2.jar:/usr/share/graylog/plugin/graylog-plugin-enterprise-3.0.2.jar

[jan (Jan Doberstein)]

is that folder and file readable by “world” as Graylog runs as user.

[netpacket]

@jan yes, they both have the access to folder and volume.

[netpacket]

Would the version of plugin make a differences? I have graylog 3.0 and plugin 3.0.2.

[jan (Jan Doberstein)]

the docker image is 3.0.2 - if you got that recently …

If the Graylog user is able to read the plugin I can’t imagine why that shouldn’t be activated. Does the Docker Container shows the SSO Plugin as loaded during startup?

[netpacket]

Yes, it does show up during startup. I finally saw this:

error

graylog_1 | 2019-07-03 20:59:46,884 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded plugin: AWS plugins 3.0.0-alpha.1 [org.graylog.aws.plugin.AWSPlugin]
graylog_1 | 2019-07-03 20:59:46,887 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded plugin: Single Sign-On (SSO) Authentication Provider 3.0.0 [org.graylog.plugins.auth.sso.SsoAuthPlugin]
graylog_1 | 2019-07-03 20:59:46,888 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded plugin: Collector 3.0.0-alpha.1 [org.graylog.plugins.collector.CollectorPlugin]
graylog_1 | 2019-07-03 20:59:46,890 ERROR: org.graylog2.bootstrap.CmdLineTool - Plugin “Graylog Enterprise” requires version 3.0.2 - not loading!

analysis

the only difference is the version. The mounting of the plugin is the same. I am trying to wrap my head around this issue because there’s no java warnings or errors around it.

[jan (Jan Doberstein)]

the startup should reveal the Graylog version too …

so you know what exact version your container is, just fetching again should give you the 3.0.2 image.

[netpacket]

@jan Would there be a plugin graylog image 3.0.0. ?

[jan (Jan Doberstein)]

I did not get the question …

[netpacket]

@jan, is there archived versions of the enterprise plugin? I would rather download enterprise plugin 3.0.0 rather than upgrading the docker image. Sorry for the bad question.

[netpacket]

Looks like upgrading the graylog image to 3.0.2 resolved the issue. This ticket can be closed.