Oracle Cloud Infrastructure Documentation

Troubleshooting Instance Security

Use troubleshooting information to identify and address common issues that can occur while working with Cloud Guard Instance Security.

Instance Security Agent not being installed on Ubuntu

The Instance Security agent is not getting installed and you have checked that your machine has access to the internet.

  1. Your machine is Ubuntu and the logs at /var/log/oracle-cloud-agent/plugins/oci-wlp/oci-wlp.log show an error like this 
    2023/05/09 17:01:27.858350 validate_sign.go:135: [ERROR] error verifying signature: error verifying: sudo: no tty present and no askpass program specified
 execErr: exit status 1
2023/05/09 17:01:27.858367 validate_sign.go:136: [ERROR] aborting installation

    Try running sudo apt update from the terminal.

    If you still see an error like this when updating, check your connection to the internet.

    sudo apt update
Err:1 http://iad-ad-1.clouds.archive.ubuntu.com/ubuntu bionic InRelease                                                          
  Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::1b). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::18). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2001:67c:1562::29). - connect (101: Network is unreachable) Could not connect to iad-ad-1.clouds.archive.ubuntu.com:80 (185.125.190.38), connection timed out Could not connect to iad-ad-1.clouds.archive.ubuntu.com:80 (91.189.91.122), connection timed out Could not connect to iad-ad-1.clouds.archive.ubuntu.com:80 (185.125.190.41), connection timed out
Err:2 http://iad-ad-1.clouds.archive.ubuntu.com/ubuntu bionic-updates InRelease                                                  
  Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::1b). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::18). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2001:67c:1562::29). - connect (101: Network is unreachable)
Err:3 http://iad-ad-1.clouds.archive.ubuntu.com/ubuntu bionic-backports InRelease                                                
  Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::1b). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::18). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2001:67c:1562::29). - connect (101: Network is unreachable)
Err:4 http://security.ubuntu.com/ubuntu bionic-security InRelease                                                                
  Cannot initiate the connection to security.ubuntu.com:80 (2001:67c:1562::18). - connect (101: Network is unreachable) Cannot initiate the connection to security.ubuntu.com:80 (2620:2d:4000:1::16). - connect (101: Network is unreachable) Cannot initiate the connection to security.ubuntu.com:80 (2620:2d:4000:1::19). - connect (101: Network is unreachable) Could not connect to security.ubuntu.com:80 (91.189.91.39), connection timed out Could not connect to security.ubuntu.com:80 (185.125.190.39), connection timed out Could not connect to security.ubuntu.com:80 (185.125.190.36), connection timed out
Reading package lists... Done                             
Building dependency tree      
Reading state information... Done
All packages are up to date.
W: Failed to fetch http://iad-ad-1.clouds.archive.ubuntu.com/ubuntu/dists/bionic/InRelease  Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::1b). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::18). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2001:67c:1562::29). - connect (101: Network is unreachable) Could not connect to iad-ad-1.clouds.archive.ubuntu.com:80 (185.125.190.38), connection timed out Could not connect to iad-ad-1.clouds.archive.ubuntu.com:80 (91.189.91.122), connection timed out Could not connect to iad-ad-1.clouds.archive.ubuntu.com:80 (185.125.190.41), connection timed out
W: Failed to fetch http://iad-ad-1.clouds.archive.ubuntu.com/ubuntu/dists/bionic-updates/InRelease  Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::1b). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::18). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2001:67c:1562::29). - connect (101: Network is unreachable)
W: Failed to fetch http://iad-ad-1.clouds.archive.ubuntu.com/ubuntu/dists/bionic-backports/InRelease  Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::1b). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2620:2d:4000:1::18). - connect (101: Network is unreachable) Cannot initiate the connection to iad-ad-1.clouds.archive.ubuntu.com:80 (2001:67c:1562::29). - connect (101: Network is unreachable)
W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/bionic-security/InRelease  Cannot initiate the connection to security.ubuntu.com:80 (2001:67c:1562::18). - connect (101: Network is unreachable) Cannot initiate the connection to security.ubuntu.com:80 (2620:2d:4000:1::16). - connect (101: Network is unreachable) Cannot initiate the connection to security.ubuntu.com:80 (2620:2d:4000:1::19). - connect (101: Network is unreachable) Could not connect to security.ubuntu.com:80 (91.189.91.39), connection timed out Could not connect to security.ubuntu.com:80 (185.125.190.39), connection timed out Could not connect to security.ubuntu.com:80 (185.125.190.36), connection timed out
W: Some index files failed to download. They have been ignored, or old ones used instead.
  2. Your machine is Windows and the agent log shows an error like this, it might be due to you having an osqueryi process running using the agent's osqueryd.exe binary, If so, stop the process and restart the agent. 
    
        2023-10-18T18:30:53.376Z	ERROR	There is error to limit osqueryd process cpu/mem usage	{"error": "Access is denied."}
        2023-10-18T18:30:53.377Z	ERROR	failed to restrict Osqueryd cpu/mem usage via job object	{"error": "Access is denied."}
        2023-10-18T18:30:53.378Z	ERROR	failed to run the WLP agent	{"error": "failed to restrict Windows Osqueryd cpu/mem usage via job object due to error Access is denied."}