topic Re: Cisco AMP - Docker install in Endpoint Security

Cisco AMP - Docker install

Kombi — Tue, 15 Dec 2020 04:51:36 GMT

I am having issues loading AMP for endpoint onto a Centos 7 Docker container. See below - Is there a special switch I need?

[root@fun /]# rpm -i /root/amp_fun_rhel-centos-7.rpm
warning: /root/amp_Pfun_rhel-centos-7.rpm: Header V4 RSA/SHA1 Signature, key ID f2fd178f: NOKEY
Installing to install prefix /opt
Verifying archive integrity... 100% All good.
Uncompressing ampconnector installer 100%
installer.sh: line 71: /sbin/service: No such file or directory

-----------------

Connector Version: 1.13.2.731

---------------

# yum info kernel -q
Available Packages
Name : kernel
Arch : x86_64
Version : 3.10.0
Release : 1160.6.1.el7
Size : 50 M
Repo : updates/7/x86_64
Failed to reload configuration

Re: Cisco AMP - Docker install

Net-Runner — Wed, 16 Dec 2020 16:58:36 GMT

Cisco,

I am unable to do the standard deployment to any Docker containers.

My Organization is looking at expanding AMP into the cloud on AWS and Azure.

It looks like AMP isn't supporting cloud yet?

Re: Cisco AMP - Docker install

Kombi — Wed, 23 Dec 2020 17:41:06 GMT

Has anyone successfully used AMP with a Centos Linux dockers in AWS?

What are folks using if not AMP on there Dockers in AWS?

Re: Cisco AMP - Docker install

josh.shaloo — Wed, 06 Jan 2021 17:56:34 GMT

I am having the same problem. It seems that the rpm is attempting to run /sbin/service. By design from RedHat, RHEL7 (and CentOS7) does not allow access to systemctl (systemd) inside Docker containers. Is there an alternative command that can be used to start the amp agent?