Shend Saliaga
08/12/2024, 5:04 PM024/08/12 16:15:26 FAIL 20230315104937_EnsureUniformCollation.go
DB version: MySQL 5.7.44
Name kolide
Collation utf8mb4_unicode_ci
Character set utf8mb4
Managed to restore from a backup and run the following statements, based of the following thread: https://osquery.slack.com/archives/C01DXJL16D8/p1681413560533379?thread_ts=1681410730.438379&cid=C01DXJL16D8
ALTER TABLE software CONVERT TO CHARACTER SET utf8mb4;
ALTER TABLE host_users CONVERT TO CHARACTER SET utf8mb4;
ALTER TABLE operating_systems CONVERT TO CHARACTER SET utf8mb4;
however the migrations still hang on 2024/08/12 16:58:23 [2023-03-15] Ensure Uniform Collation
Looking to see if there are any pointers on what else to look at?Shend Saliaga
08/12/2024, 5:25 PM2024/08/12 17:09:18 FAIL 20230315104937_EnsureUniformCollation.go (fixing host_users table: iterating rows: Error 9 (HY000): Unexpected EOF found when reading file '/mysql/tmp/MY84IoFf' (Errcode: 175 - File to short; Expected more data in file)), quitting migration
Kathy Satterlee
08/12/2024, 5:44 PMShend Saliaga
08/12/2024, 5:46 PMShend Saliaga
08/12/2024, 5:46 PMShend Saliaga
08/12/2024, 5:54 PMCREATE TABLE
`host_users` ( `host_id` int(10) unsigned NOT NULL,
`uid` int(10) unsigned NOT NULL,
`username` varchar(255) COLLATE utf8mb4_unicode_ci NOT NULL,
`groupname` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`created_at` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
`removed_at` timestamp NULL DEFAULT NULL,
`user_type` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`shell` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT '',
PRIMARY KEY
(`host_id`,
`uid`,
`username`),
UNIQUE KEY `idx_uid_username` (`host_id`,
`uid`,
`username`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci
Allowing for the migrations to completeKathy Satterlee
08/12/2024, 6:03 PMShend Saliaga
08/12/2024, 6:04 PMShend Saliaga
08/12/2024, 6:49 PM"level=error ts=2024-08-12T18:48:06.861129962Z component=http method=POST uri=/api/v1/osquery/distributed/write took=11.648247862s ip_addr=REDACTED x_for_ip_addr="REDACTED" ingestion-err="ingesting query users: update host users: insert users: Error 1390 (HY000): Prepared statement contains too many placeholders" err="error in query ingestion""
Shend Saliaga
08/12/2024, 7:15 PMmsg="querying name and team ID from result" err="unknown format:
messages
level=debug ts=2024-08-12T19:02:00.312927482Z msg="querying name and team ID from result" err="unknown format: \"pack/Access Mechanisms/Known Hosts\""
From the look of the message it seems like packs arent really supported or at least causing some sort of issuesKathy Satterlee
08/12/2024, 8:27 PMKathy Satterlee
08/12/2024, 8:28 PMShend Saliaga
08/12/2024, 8:28 PMZay Hanlon
08/13/2024, 6:22 PMShend Saliaga
08/13/2024, 6:24 PMKathy Satterlee
08/13/2024, 7:06 PMShend Saliaga
08/13/2024, 7:07 PMKathy Satterlee
08/13/2024, 7:19 PMShend Saliaga
08/13/2024, 7:22 PMKathy Satterlee
08/13/2024, 7:57 PM