Agent update schlägt fehl

EnLandHirs · October 28, 2024, 10:37am

Wie kann ich dies umgehen oder was ist falsch gelaufen?
Automatik update ist implementiert und funktioniert auf 99% aller Server einwandfrei.
Auf einzelnen Servern haben wir folgendes Problem:

Beim ersten Aufruf scheint alles richtig zu funktionieren
Rufen wir ein zweites Mal ab erhalten wir einen Fehler (3)

image945×275 99.2 KB

“C:\ProgramData\checkmk\agent\log\cmk-update-agent.log”

2024-10-28 11:18:41,872 [7928] DEBUG: Starting Checkmk Agent Updater v2.3.0p17
2024-10-28 11:18:41,874 [7928] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:18:41,876 [7928] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.cfg.
2024-10-28 11:18:41,877 [7928] DEBUG: Updating the certificate store "C:\ProgramData\checkmk\agent\config\cas\all_certs.pem"...
2024-10-28 11:18:41,884 [7928] INFO: Updated the certificate store "C:\ProgramData\checkmk\agent\config\cas\all_certs.pem" with 1 certificate(s)
2024-10-28 11:18:41,887 [7928] DEBUG: MSI deposit path is C:\ProgramData\checkmk\agent\update\check_mk_agent.msi
2024-10-28 11:18:41,887 [7928] DEBUG: aghash info path is C:\ProgramData\checkmk\agent\install\checkmk.dat
2024-10-28 11:18:41,888 [7928] INFO: Detected pending agent update. Checking state...
2024-10-28 11:18:41,891 [7928] WARNING: Agent not installed yet, but found no MSI file. Discarding pending agent hash.
2024-10-28 11:18:41,892 [7928] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:18:41,893 [7928] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:18:41,900 [7928] DEBUG: Saved deployment status to C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:18:41,909 [7928] DEBUG: Writing agent section to stdout:
<<<cmk_update_agent_status:sep(0)>>>
{"last_check": 1730110704.0295982, "last_update": 1727426788.0, "aghash": "9757f05eeec9f152", "pending_hash": null, "update_url": "https://myServer/mySite/check_mk", "trusted_certs": {"0": {"corrupt": false, "not_after": "2025-11-22T07:54:34+00:00", "signature_algorithm": "sha512", "common_name": "SignatureKey"}}, "error": "inconsistent pending update"}

2024-10-28 11:18:41,910 [7928] DEBUG: Sending new state data to Agent Bakery
2024-10-28 11:18:41,910 [7928] DEBUG: Fetching content (using requests): https://myServer/mySite/check_mk/deploy_agent.py
2024-10-28 11:18:42,030 [7928] DEBUG: Response from Agent Bakery:
{'result_code': 0, 'result': {'AgentAvailable': True, 'update_url': '', 'TargetHash': 'f99056841b57ccb6', 'Signatures': [{'certificate': '-----BEGIN CERTIFICATE-----\xyz'}]}, 'severity': 'success'}
2024-10-28 11:18:42,032 [7928] DEBUG: Done.
2024-10-28 11:19:59,282 [3348] DEBUG: Starting Checkmk Agent Updater v2.3.0p17
2024-10-28 11:19:59,284 [3348] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:19:59,284 [3348] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.cfg.
2024-10-28 11:19:59,285 [3348] DEBUG: Updating the certificate store "C:\ProgramData\checkmk\agent\config\cas\all_certs.pem"...
2024-10-28 11:19:59,293 [3348] INFO: Updated the certificate store "C:\ProgramData\checkmk\agent\config\cas\all_certs.pem" with 1 certificate(s)
2024-10-28 11:19:59,294 [3348] DEBUG: MSI deposit path is C:\ProgramData\checkmk\agent\update\check_mk_agent.msi
2024-10-28 11:19:59,294 [3348] DEBUG: aghash info path is C:\ProgramData\checkmk\agent\install\checkmk.dat
2024-10-28 11:19:59,295 [3348] INFO: Starting Update mode as plugin.
2024-10-28 11:19:59,295 [3348] INFO: Getting target agent configuration for host 'host' from deployment server
2024-10-28 11:19:59,296 [3348] DEBUG: Fetching content (using requests): https://myServer/mySite/check_mk/deploy_agent.py
2024-10-28 11:19:59,408 [3348] DEBUG: Response from Agent Bakery:
{'result_code': 0, 'result': {'AgentAvailable': True, 'update_url': '', 'TargetHash': 'f99056841b57ccb6', 'Signatures': [{'certificate': '-----BEGIN CERTIFICATE-----\xyz'}]}, 'severity': 'success'}
2024-10-28 11:19:59,410 [3348] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:19:59,411 [3348] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:19:59,416 [3348] DEBUG: Saved deployment status to C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:19:59,417 [3348] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:19:59,418 [3348] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:19:59,423 [3348] DEBUG: Saved deployment status to C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:19:59,424 [3348] INFO: Target state (from deployment server):
2024-10-28 11:19:59,424 [3348] INFO:   Agent available:     True
2024-10-28 11:19:59,424 [3348] INFO:   Signatures:          1
2024-10-28 11:19:59,424 [3348] INFO:   Target hash:         f99056841b57ccb6
2024-10-28 11:19:59,425 [3348] DEBUG: Fetching content (using requests): https://myServer/mySite/check_mk/deploy_agent.py
2024-10-28 11:20:00,916 [3348] DEBUG: Response from Agent Bakery:
{'result_code': 0, 'result': {'agent': '0M8R4KGxGu.../////+////'}, 'severity': 'success'}
2024-10-28 11:20:02,106 [3348] INFO: Downloaded agent has size 38057472 bytes.
2024-10-28 11:20:02,283 [3348] INFO: Signature check OK.
2024-10-28 11:20:02,284 [3348] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:20:02,284 [3348] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:20:02,291 [3348] DEBUG: Saved deployment status to C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:20:02,428 [3348] INFO: Transferred MSI package to the agent's installation dir.Awaiting upcoming automatic update performed by agent.
2024-10-28 11:20:02,432 [3348] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:20:02,432 [3348] DEBUG: Successfully read C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:20:02,451 [3348] DEBUG: Saved deployment status to C:\ProgramData\checkmk\agent\config\cmk-update-agent.state.
2024-10-28 11:20:02,452 [3348] DEBUG: Writing agent section to stdout:
<<<cmk_update_agent_status:sep(0)>>>
{"last_check": 1730110799.417771, "last_update": 1727426788.0, "aghash": "9757f05eeec9f152", "pending_hash": "f99056841b57ccb6", "update_url": "https://myServer/mySite/check_mk", "trusted_certs": {"0": {"corrupt": false, "not_after": "2025-11-22T07:54:34+00:00", "signature_algorithm": "sha512", "common_name": "SignatureKey"}}, "error": null}

2024-10-28 11:20:02,452 [3348] DEBUG: Sending new state data to Agent Bakery
2024-10-28 11:20:02,453 [3348] DEBUG: Fetching content (using requests): https://myServer/mySite/check_mk/deploy_agent.py
2024-10-28 11:20:02,564 [3348] DEBUG: Response from Agent Bakery:
{'result_code': 0, 'result': {'AgentAvailable': True, 'update_url': '', 'TargetHash': 'f99056841b57ccb6', 'Signatures': [{'certificate': '-----BEGIN CERTIFICATE-----\xyz'}]}, 'severity': 'success'}
2024-10-28 11:20:02,566 [3348] DEBUG: Done.

Versuche ich die Installation auf dem Server selber mit folgendem Command:

Start-Process msiexec -Wait -ArgumentList ‘/I C:\Windows\Temp\check-mk-agent-2.3.0p19.msi WIXUI_REMOVELEGACY=“1” WIXUI_CLEANINSTALL=“1” WIXUI_MIGRATELEGACY=“”’

Ende ich da, und ich kann das MSI angehe welches noch dort liegt oder dass welches ich gleich installieren wollte, immer mit demselben Resultat:

Irgendeine Idee wie wir dies beheben können?

aeckstein · October 28, 2024, 10:43am

Hi @EnLandHirs

vielleicht hilft dir der folgende KB Artikel :
https://checkmk.atlassian.net/wiki/spaces/KB/pages/9472763/Uninstall+of+Windows+agent+failed

r.sander · October 28, 2024, 10:50am

Klingt auch ein bißchen nach einem übereifrigen Antivirenprogramm.

andreas-doehler · October 28, 2024, 12:34pm

Genau das würde ich auch sagen. Hatte letzte Woche ein System wo auch auf 2-3 Maschinen der Virenscanner sich immer das MSI geschnappt und gelöscht hat. Aber halt nur auf 2-3 Maschinen von paar Hundert.

system · October 28, 2025, 12:34pm

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.