Posts made by udi.moshe_0021

@Jonathan-Engstrom Hi,

unfortunately, i didn't had the time to try and fix it and we kind of left it like it is.
it troubles me that you have the same problem in the latest version too.

@steviecoaster ,
regarding the internet references in the script, i want to straight things up. i have right clicked on the link and pressed on "save as..." and it downloaded the whole html page. i entered into the link and downloaded the script itself. i will run the script and see if it helps.

10x

@steviecoaster ,
thank you for your time. i have downloaded the script and checked it and it has a lot of references to the internet and it will be difficult for me to run it as is.
i am using windows and as stated in the previous threads, i have tried any combination except for using thumbprint and no luck what so ever even when i used unencrypted key so i am trying to understand what are the permission issues you see.

another update...
i have noticed that the configuration is changed in the config file but it did not change in the configuration section in the admin console ui.
college of mine combined private key (without password) and public key under the name and path of the old successful file and it worked with the new certificate when trying to configure the same files uncombined, it failed as mentioned in the previous post.

hope this will give you some direction to solve this problem.
thanks,
udi

Hi,

i can confirm that we have upgraded to 2nd latest version and it still does not work.
i haven't tried the script because i can see that the config file is updating according to my configuration but still does not work.
i have tried binding to another port and configure the certificate to use pem and tried with and without password for the private key in pem format. problem not solved.

i will upload the error we get.
thanks,
udi

hi @steviecoaster ,

i will try this powershell and let you know.
will add the output as well.

thanks,
udi

Hi @rhessinger ,

to answer your questions:

1. i use the default configuration and binding. i bind it to port.
2. no reverse proxy. i configured proget to get out using proxy but to get into proget there is no proxy.
3. i use local computer account configured as administrator.

i ran the command you suggested. upon configuring proget to use pfx, there is no error displayed other than "... path to object not found". upon trying to configure it to use windows cert store i got error of "task cancelation...". if you need the full error i will provide it on sunday next week.

thanks,
udi

@rhessinger ,
thank you. i am familiar with all the certificate process and i have done this hundreds of times.
i do have a private key and did export correctly to pfx.
mo matter which way i choose, pfx or cert store, i get the same error.
i am using internal web server.
ssl was working until the certificate expired.
is there a debug mode ? logs that are more accurate ? is it related to the DB maybe ?

thanks,
udi

hi,
i am using the free version v2024.24
i have created ssl certificate using my company pki and it is imported without problems to the server.
i have tried both "certificate file" and "microsoft certificate store" and they both does not work.
the error i get is "failed to load certificate for https connections. the system cannot find the path specified".

what could be the problem ? how do i need to configure the cert req. params ?
i have tried configuring "common name" with fqdn and without. i have added san with both options too.

10x

Hi @rhessinger ,
i have followed your configuration and i have managed to download the docker.
to tell you the truth, i do not know what has changed because the only thing that i have changed is the checkbox next to "library/..." and i have played with this prior to opening this case.

thank you very much.

Hi @rhessinger ,
tried it right now and nothing on the diagnostics page.
can you post the pull command you ran ?

10x,
Udi

Hi All,

i am using proget free almost latest version and i am trying to download this docker:
docker.osgeo.org/geoserver:2.27.x
but i get manifest error.
i have tried with the /library and with out, but still getting the error.
when pulling from a virtual machine that does not use proget, it works.
what i have noticed is that the docker is resding on nexusOSS and i was wondering if it fits the proget free version limitations.

10x,
Udi

@atripp ,
Guess you are right. thank you.

@atripp ,
thank you very much. can't you utilize a mechanism based on folders ?
i have a script that does just that.

Regards,

Hi Team,

one of the things i like in proget is the drop folder and bulk upload but this feature is not applicable to all the package feeds and it would be awesome to have it.
currently, i am lacking this feature in rpm and deb packages.

Great Work.

@atripp hi,

i already searched the internet and found nothing helpful. this is why i turned to you .
as said, i will start over and try to give you the output.

thanks,
udi

@atripp hi,

will take some time. just to be clear, i had one installation that worked but i wasn't the 1 who installed it i do not know what he did before.
i am starting a from scratch and again, the only permitted network connection to the outside is through the proget server. dns, ntp all is through the local network.
can you simulate my configuration at your network ?
maybe i must allow an initial connection to ubuntu for downloading gpg keys or something like that.

thanks,
udi

@atripp hi,
do you want me to start from the beginning ?
just to let you know that i have upgraded proget to the latest version.

Hi @atripp ,

@ time of writing this post i used the 1 version before the last stable release and today i have noticed that another release was published so i will upgrade to it.

i have followed the given instructions before posting this and i have to say that the same version of ubuntu desktop worked. after reinstalling and connecting the OS only to proget, i can't seem to update the apt and i am always stuck at "InRelease".

thank you very much

Hello,

i have installed ubuntu desktop 24.04.1 on a virtual machine with no internet connection.
dns is allowed and i have configured the apt source to go to the proget server.
proget is connected to the internet and offer http and https and is working.
when i run apt update i get errors about InRelease and it does not update. i have tried importing the feed's gpg key but i am getting an error the proget's generated gpg key is an unsupported filetype and that i do not have the public key.
i have configured the source list of the proget to use the http with [trusted=yes] and i can't still update apt i do not see the package i want. searching proget for the package and i can see it is there and should be compatible to this version of ubuntu. btw, my connector is configured to archive.ubuntu.com

help is appreciated.

Hi @atripp ,
found this config. i remember seeing it and left it checked because the description recommended it for registries like microsoft and for some reason i didn't pay attention to this until i figured out that i need to add "library" prefix.
thank you very much for all the help.

Hi @atripp ,
i have managed to successfully pull an image to proget.
the syntax i used is like: "podman pull xxx:8625/docker/library/ubuntu"
and this i discovered from the podman's response. when i tried looking up the additional "library" in the client setup of the feed or the documentation, i didn't find any thing related to that.
i have tried replacing "library" with something else like "udi" and it didn't work.
i then, tried to download fluent/fluent-id with the syntax "podman pull xxx:8625/docker/library/fluent/fluent-id" and it didn't work. i then deleted the "library" part and it worked.

is this how it is suppose to work ?
images without a prefix will need the "library" prefix ?

thanks

Hi @atripp ,
i have successfully updated to the latest version 2024.19 and get the same error.
i have created a lab in another computer connected directly to the internet (no proxy because i thought that maybe it is blocking something that i can't see) and got the same result. in the lab i used oracle linux 9.4 with podman instead of docker. upon pulling an image directly from docker, the image and the manifest are downloaded correctly.
just to make sure it is possible, i can configure a docker feed and pair up to it docker connectors and it should pull images as proxy like other feeds such as npm, is it ?

thanks

@atripp thank you very much.
will try the update.

thanks

Hello,

i am using proget free v2023.
i have created a container feed and attached him to docker hub connectors according to the urls in docker documentation. the connectors are healthy.
the feed allows anonymous pulling and i have con figured the feed in docker as insecure registry.
when i try pulling an image i always get manifest unknown error with\without doing docker login.
i use a proxy to connect to the internet and i do not see any problem there. other feeds like npm works fine.

10x

Hi @atripp ,

thank you for the info and clarification.

Hello Team,
i have installed the free version and i have created a pypi feed with connector to pypi.org via proget standard configuration.
when i am trying to download a package through proget's pypi proxy i get timeout because the file is being scanned in my internet proxy's icap server.
is there a way to increase any timeout in proget to help me deal with this ? i do not want to disable the AV scanning.

Thank you,
Udi

Hi @atripp ,

thank you very much.

Hello @atripp ,

thank you very much for your answer.
i went through the licensing module for proget free in the documentation and i was under the impression that i can do this configuration, this is why i posted this. what was i missing ?
regarding the vulnerability db, i was able to perform download to the test server i have and it was successful and i want to copy that db to the airgapped server, is it possible ? from the tests i made, i saw vulnerabilities in reference to packages that i have downloaded and it is enough for me for now. i saves me the task of going to the internet and find this info myself.

Hi Alana,

thank you very much. will do.

Hi All,

would appreciate some pro's and com's for each web server.

Thanks,
Udi

hi,
i want to use the free edition in the following configuration:

1. dmz - will connect to internet for external repositories and vulnerability checks and oss and vulnerability db download.
2. lan - will connect to dmz
3. airgapped - will import everything from lan
   what i need to know is:
4. will the lan instance be able to download from the dmz instance (not directly from internet) all the db off the vulnerabilities and scan results ?
5. how can i transfer all the vulnerability db and oss index information to the airgapped server ?
6. if i want to retain all the vulnerability information on packages including scans and oss index and sonatype checks, what is the correct configuration ? should i create a self hosted feed which connect to a feed with a connector to npmjs.org for ex. ?
   Regards,
   Udi