[Bug] FireHOLBlocklists No such file or directory

[asucrews]

Describe the bug
A clear and concise description of what the bug is.

after configure path to blocklist and running a analysis on ip. i get the blow error

{
"errorMessage": "Traceback (most recent call last):\n File "FireHOLBlocklists/firehol_blocklists.py", line 146, in \n FireholBlocklistsAnalyzer().run()\n File "FireHOLBlocklists/firehol_blocklists.py", line 30, in init\n os.mkdir(self.path, 0o0700)\nFileNotFoundError: [Errno 2] No such file or directory: '/etc/firehol/ipsets/'\n",
"input": null,
"success": false
}

To Reproduce
Steps to reproduce the behavior:

1. set path for firehol blocklist
2. create new analysis

Expected behavior
A clear and concise description of what you expected to happen.

Matches on firehol blacklist

Complementary information
If applicable, add screenshots and any additional information that might help explain your problem.

{
"errorMessage": "Traceback (most recent call last):\n File "FireHOLBlocklists/firehol_blocklists.py", line 146, in \n FireholBlocklistsAnalyzer().run()\n File "FireHOLBlocklists/firehol_blocklists.py", line 30, in init\n os.mkdir(self.path, 0o0700)\nFileNotFoundError: [Errno 2] No such file or directory: '/etc/firehol/ipsets/'\n",
"input": null,
"success": false
}

Work environment

• Client OS: windows
• Server OS: ubuntu 18.04
• Browse type and version:
• Cortex version: 3.0.1-2
• Cortex Analyzer/Responder name: FireHOLBlocklists_2_0
• Cortex Analyzer/Responder version: lastest

Possible solutions
If applicable, indicate possible solutions to the problem.

Not sure if there way to import folder in docker container or docker need pull the blocklist in to it

Additional context
Add any other context about the problem here.

[garanews]

You can pull inside the docker or you can pull outside and then mount a volume to tell cortex where are the files.

[garanews]

Hi @asucrews, was you able to run this Analyzer?

[asucrews]

Sorry, i am noob to docker. so i am unsure how to implement the suggested changes.

[garanews]

Hi @asucrews , do you have in your docker-compose.yml some volume regarding cortex image such as the config file or cortex-analyzers folder?

So for example I just did:

cd /opt
git clone https://github.com/firehol/blocklist-ipsets

then edit the docker-compose in this way:

in order to map the folder outside the container.
Then rebuild the container with
docker-compose up

and sed the path in firehol analyzer:

And finally execute the analyzer, you see first attempt without correct setting and second attempt working:

Let me know if something is not clear or need further help.

[garanews]

@asucrews does it work?

[asucrews]

This could work, but i installed cortex via deb package and the Analyzer are docker method and i don't have the docker-compose to mess with.

[garanews]

You can create the volume also with docker, have a look here: http://dockerlabs.collabnix.com/beginners/volume/creating-volume-mount-from-dockercli.html

[garanews]

Going to close it, feel free to reopen if have other issues.