Missing Package: morpheus-vm-node-fips

[Holjo]

VM node agent fails install on FIPS enabled host.

Unable to locate package morpheus-vm-node-fips

How does one obtain or enable this package?

[Ranveer]

Hello Holjo,

The most common reason an Agent install fails is the provisioned Instance Or VME HOST cannot reach the VME Appliance via the Appliance
URL set in Administration > Settings over port 443.

When an Instance is provisioned from VME it must be able to reach the VME appliance via the Appliance
URL or the Agent will not be installed.

Please attempt to manually install :
Select "host" got Actions > Download Agent Script

Under downloads you will see agent script (open the script in notepad, & past on the Ubuntu host (start from curl)

Example of script:
#!/bin/bash
curl -k -s "https://vmemgr/api/server-script/agentInstall?apiKey=8fcb595b-3bd4-4054-9e24-54c963f43373" | bash

Copied above script  (Starting from curl -k ) & executing on my VMEHOST.

root@hpevmehost1:/var/log/corosync# curl -k -s "https://vmemgr/api/server-script/agentInstall?apiKey=8fcb595b-3bd4-4054-9e24-54c963f43373" | bash
/usr/bin/apt-get
/usr/bin/morpheus-node-ctl
ok: down: morphd: 0s, normally up
grep: ./environment: No such file or directory
NO_PROXY="hpevmemgr2.bgl1.global.tslabs.hpecorp.net"
checking for dpkq lock-frontend existence...
force removing lock /var/lib/dpkg/lock-frontend
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done

Best Regards

Ranveer

[Holjo]

Hello Ranveer,

Thank you for this.  However, the issue persists when running the script manually.  

# curl -k -s "https://<VME Appliance>/api/server-script/agentInstall?apiKey=2fcfb2a9-bb61-45b1-eedb3a605b89" | bash
/usr/bin/apt-get
grep: ./environment: No such file or directory
NO_PROXY="<VME Appliance>"
checking for dpkq lock-frontend existence...
force removing lock /var/lib/dpkg/lock-frontend
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
apt-transport-https is already the newest version (2.4.13).
The following package was automatically installed and is no longer required:
  linux-headers-5.15.0-138
Use 'apt autoremove' to remove it.
0 upgraded, 0 newly installed, 0 to remove and 19 not upgraded.
bash: line 140: /usr/bin/morpheus-node-ctl: No such file or directory
-----BEGIN PGP PUBLIC KEY BLOCK-----
~~~~~~~~~~
-----END PGP PUBLIC KEY BLOCK-----
Ign:1 https://<VME Appliance>/apt morpheus InRelease
Hit:2 https://<VME Appliance>/apt morpheus Release
Reading package lists... Done
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
E: Unable to locate package morpheus-vm-node-fips
bash: line 148: /usr/bin/morpheus-node-ctl: No such file or directory

Unless I am looking in the wrong place, the FIPS node package does not appear to be present on the VME Appliance.

# ls -l /var/opt/morpheus/package-repos/apt/dists/morpheus/main/binary-amd64
total 270344
-rw-r--r-- 1 root root  34439392 Apr 17 03:09 hpe-vm_1.0.5-1_amd64.deb
-rw-r--r-- 1 root root 121583786 Apr 17 03:09 morpheus-node_3.2.35-1_amd64.deb
-rw-r--r-- 1 root root 120791592 Apr 17 03:09 morpheus-vm-node_3.2.35-1_amd64.deb
-rw-rw-r-- 1 root root      2019 Apr  9 17:38 Packages
-rw-rw-r-- 1 root root       886 Apr  9 17:38 Packages.gz
-rw-rw-r-- 1 root root         0 Apr  9 17:37 Release

[Ranveer]

Hello Holjo,

Thanks for update. May i request below info:

1 .How  was FIPS enabled on the host?
2. Ubuntu OS version 
3. VME Version

Best Regards

Ranveer

[Holjo]

Hi Ranveer,

FIPS was enabled via Ubuntu Pro (pro enable fips)
Ubuntu 22.04
Install from - HPE_VM_Essentials_SW_image_8.0.5_1_S5Q83-11009.iso

Just noticed FIPS is not enabled on VME Appliance OS yet.  Perhaps this is a requirement?

Thank you.

[Ranveer]

Hi Holjo,

Thanks a lot for update.

Checked with VME Engineering as of now VME does not offer FIPS certified packages. In future they may enable same.

Best Regards
Ranveer