Issue Running soup with Minimal Docker Containers on Security Onion

[SliuzasLukas]

Hi everyone,

I'm running Security Onion with a minimal set of Docker containers because I'm forwarding logs to a separate Elasticsearch instance. However, when I attempt to run soup, I encounter the following error:

csharp
Copy code
Starting crond service at 07:47:38.538922
Successfully started crond.
Starting salt-master service at 07:47:38.568496

Successfully started salt-master.
Starting salt-minion service at 07:47:39.666973

Successfully started salt-minion.
Enabling highstate.

[INFO    ] Creating module dir '/var/cache/salt/minion/extmods/grains'

[INFO    ] Syncing grains for environment 'base'

[INFO    ] Loading cache from salt://_grains, for base

[INFO    ] Caching directory '_grains/' for environment 'base'

local:

----------

msg:

Info: highstate state enabled.

res:

True
Soup failed with error 7: Unhandled error

Unhandled error occurred, please check /root/soup.log for details.

Current running Docker containers:

Container	Status	Details
so-dockerregistry	running	Up 8 minutes
so-idstools	running	Up 10 days
so-influxdb	running	Up 10 days (healthy)
so-kratos	running	Up 10 days
so-nginx	running	Up 10 days (healthy)
so-sensoroni	running	Up 10 days
so-soc	running	Up 10 days

My question: Which additional Docker containers do I need to have running to successfully execute soup and update Security Onion in this minimal setup?

I've checked the /root/soup.log but didn't find clear indications of what's missing or causing the error. Any guidance or recommendations would be greatly appreciated!

Thanks in advance for your help!

[cm-ops]

Sounds like you have modified SO considerably. That would cause soup to fail.

[SliuzasLukas]

Currently only modification I have done is disabled dockers - set status to false