securityonion-sostat: block bad docker packages Security-Onion-Soluti…

…ons/security-onion#1652

bin/soup

@@ -405,6 +405,18 @@ if [ $WAZUH == "yes" ]; then
 	fi
 fi
 
+# Emergency check for docker issue
+if dpkg -l |grep docker |grep -q "5:19.03.3~3-0~ubuntu-xenial"; then
+	echo
+	echo "Docker 19.03.3 detected! This version has issues:"
+	echo "https://blog.securityonion.net/2019/10/docker-package-issues-please-do-not.html"
+	echo
+	echo "We've blocked this version in /etc/apt/preferences.d/securityonion-docker-block."
+	echo
+	echo "We recommend removing the docker-ce and docker-ce-cli packages and re-installing:"
+	echo "sudo apt purge docker-ce docker-ce-cli && sudo apt install docker-ce docker-ce-cli"
+fi
+
 echo
 echo "If this is a distributed deployment, please update the remaining boxes in your deployment to ensure all boxes are running the same updates."
 

debian/changelog

@@ -1,3 +1,9 @@
+securityonion-sostat (20120722-0ubuntu0securityonion133) xenial; urgency=medium
+
+  * securityonion-sostat: block bad docker packages Security-Onion-Solutions/security-onion#1652 
+
+ -- Doug Burks <[email protected]>  Tue, 15 Oct 2019 13:00:10 -0400
+
 securityonion-sostat (20120722-0ubuntu0securityonion132) xenial; urgency=medium
 
   * securityonion-sostat: block bad docker packages Security-Onion-Solutions/security-onion#1652 

debian/patches/securityonion-sostat:-block-bad-docker-packages-Security-Onion-Solutionssecurity-onion#1652-soup

@@ -0,0 +1,46 @@
+Description: <short summary of the patch>
+ TODO: Put a short summary on the line above and replace this paragraph
+ with a longer explanation of this change. Complete the meta-information
+ with other relevant fields (see below for details). To make it easier, the
+ information below has been extracted from the changelog. Adjust it or drop
+ it.
+ .
+ securityonion-sostat (20120722-0ubuntu0securityonion133) xenial; urgency=medium
+ .
+   * securityonion-sostat: block bad docker packages Security-Onion-Solutions/security-onion#1652
+Author: Doug Burks <[email protected]>
+
+---
+The information above should follow the Patch Tagging Guidelines, please
+checkout http://dep.debian.net/deps/dep3/ to learn about the format. Here
+are templates for supplementary fields that you might want to add:
+
+Origin: <vendor|upstream|other>, <url of original patch>
+Bug: <url in upstream bugtracker>
+Bug-Debian: https://bugs.debian.org/<bugnumber>
+Bug-Ubuntu: https://launchpad.net/bugs/<bugnumber>
+Forwarded: <no|not-needed|url proving that it has been forwarded>
+Reviewed-By: <name and email of someone who approved the patch>
+Last-Update: <YYYY-MM-DD>
+
+--- securityonion-sostat-20120722.orig/bin/soup
++++ securityonion-sostat-20120722/bin/soup
+@@ -405,6 +405,18 @@ if [ $WAZUH == "yes" ]; then
+ 	fi
+ fi
+
++# Emergency check for docker issue
++if dpkg -l |grep docker |grep -q "5:19.03.3~3-0~ubuntu-xenial"; then
++	echo
++	echo "Docker 19.03.3 detected! This version has issues:"
++	echo "https://blog.securityonion.net/2019/10/docker-package-issues-please-do-not.html"
++	echo
++	echo "We've blocked this version in /etc/apt/preferences.d/securityonion-docker-block."
++	echo
++	echo "We recommend removing the docker-ce and docker-ce-cli packages and re-installing:"
++	echo "sudo apt purge docker-ce docker-ce-cli && sudo apt install docker-ce docker-ce-cli"
++fi
++
+ echo
+ echo "If this is a distributed deployment, please update the remaining boxes in your deployment to ensure all boxes are running the same updates."
+

debian/patches/series

@@ -124,3 +124,4 @@ fix-spacing
 sostat:-support-elastic-auth-#1562
 securityonion-sostat:-update-Elastic-verbiage-for-when-components-are-not-running-Security-Onion-Solutionssecurity-onion#1633
 securityonion-sostat:-block-bad-docker-packages-#1652
+securityonion-sostat:-block-bad-docker-packages-Security-Onion-Solutionssecurity-onion#1652-soup

debian/postinst

@@ -41,9 +41,12 @@ case "$1" in
 
 	# Emergency check for docker issue
 	if dpkg -l |grep docker |grep -q "5:19.03.3~3-0~ubuntu-xenial"; then
+		echo
 		echo "Docker 19.03.3 detected! This version has issues:"
 		echo "https://blog.securityonion.net/2019/10/docker-package-issues-please-do-not.html"
 		echo
+		echo "We've blocked this version in /etc/apt/preferences.d/securityonion-docker-block."
+		echo
 		echo "We recommend removing the docker-ce and docker-ce-cli packages and re-installing:"
 		echo "sudo apt purge docker-ce docker-ce-cli && sudo apt install docker-ce docker-ce-cli"
 	fi