SIFT Install using Cast if failing on both Ubuntu 20.04 and 22.04 LTS base installs.

[CGraham-CriticalStart]

I have tried a local VM as well as an AWS Ec2 instance. I have tried running apt update && upgrade, as well as not running them to ensure we aren't drifting too far from the original install. None of these options work. I've ensure my instances are AMDx64 and the newest cast release is the same. When I try the install, it ends with this:

Results.yaml file is empty, and the saltstack.log file includes the following:

dfir@ip-172-31-19-37:$ sudo cat /var/cache/cast/installer/logs/results.yaml
[sudo] password for dfir:
dfir@ip-172-31-19-37:$ sudo cat /var/cache/cast/installer/logs/results.yaml
dfir@ip-172-31-19-37:~$ sudo cat /var/cache/cast/installer/logs/saltstack.log

[INFO ] Loading fresh modules for state activity

[ERROR ] An un-handled exception was caught by Salt's global exception handler:

ValueError: need more than 1 value to unpack
Traceback (most recent call last):
File "/var/cache/cast/installer/saltstack/salt/salt-call", line 11, in
sys.exit(salt_call())
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/scripts.py", line 444, in salt_call
client.run()
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/cli/call.py", line 50, in run
caller.run()
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/cli/caller.py", line 95, in run
ret = self.call()
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/cli/caller.py", line 200, in call
ret["return"] = self.minion.executors[fname](
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 159, in call
ret = self.loader.run(run_func, *args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1245, in run
return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1260, in _run_as
ret = _func_or_method(*args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/executors/direct_call.py", line 10, in execute
return func(*args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 159, in call
ret = self.loader.run(run_func, *args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1245, in run
return self._last_context.run(self._run_as, func_or_method, *args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1260, in run_as
ret = func_or_method(*args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/modules/state.py", line 834, in apply
return sls(mods, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/modules/state.py", line 1467, in sls
high, errors = st.render_highstate({opts["saltenv"]: mods})
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/state.py", line 4678, in render_highstate
state, errors = self.render_state(
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/state.py", line 4464, in render_state
nstate, err = self.render_state(
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/state.py", line 4464, in render_state
nstate, err = self.render_state(
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/state.py", line 4473, in render_state
state.update(nstate)
ValueError: need more than 1 value to unpack
Traceback (most recent call last):
File "/var/cache/cast/installer/saltstack/salt/salt-call", line 11, in
sys.exit(salt_call())
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/scripts.py", line 444, in salt_call
client.run()
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/cli/call.py", line 50, in run
caller.run()
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/cli/caller.py", line 95, in run
ret = self.call()
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/cli/caller.py", line 200, in call
ret["return"] = self.minion.executors[fname](
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 159, in call
ret = self.loader.run(run_func, *args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1245, in run
return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1260, in _run_as
ret = _func_or_method(*args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/executors/direct_call.py", line 10, in execute
return func(*args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 159, in call
ret = self.loader.run(run_func, *args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1245, in run
return self._last_context.run(self._run_as, func_or_method, *args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1260, in run_as
ret = func_or_method(*args, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/modules/state.py", line 834, in apply
return sls(mods, **kwargs)
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/modules/state.py", line 1467, in sls
high, errors = st.render_highstate({opts["saltenv"]: mods})
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/state.py", line 4678, in render_highstate
state, errors = self.render_state(
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/state.py", line 4464, in render_state
nstate, err = self.render_state(
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/state.py", line 4464, in render_state
nstate, err = self.render_state(
File "/var/cache/cast/installer/saltstack/salt/lib/python3.10/site-packages/salt/state.py", line 4473, in render_state
state.update(nstate)
ValueError: need more than 1 value to unpack

What else can I provide to help troubleshoot this issue?

[ekristen]

There's a new RC candidate out of the tool that fixes a few things but there's a bug where it pulls the latest RC of the configs. You can do cast install sift@version to do a specific version. Hopefully will get a new version out soon that fixes these bugs.

[digitalsleuth]

Hi @CGraham-CriticalStart , You can try running the following, if you haven't already, on the AMI as long as it's Ubuntu 22
sudo cast install sift@v2024.11.14
Ubuntu 20 is no longer supported, and Ubuntu 24 support is around the corner.