@cryptotaxi247 / netdata-1 / commits / b1c96ce59

Add notes/known issues section to installation page (#9053)

* Add notes section to installer with OpenSSL * Add LibreSSL and Clang * Libre * Remove LibreSSL warning * Add sections about CFLAGS to install and claim * Update * Retrigger CI

Joel Hans committed Jun 4, 2020 at 07:09 UTC b1c96ce59d2eb7e46b35609b03715c9c15243aa6
2 files changed +53
claim/README.md
+14
@@ -189,6 +189,20 @@ might be having with the ACLK or claiming process.
189
190 Use these keys and the information below to troubleshoot the ACLK.
191
192 +#### Claiming on older distributions (Ubuntu 14.04, Debian 8, CentOS 6)
193 +
194 +If you're running an older Linux distribution or one that has reached EOL, such as Ubuntu 14.04 LTS, Debian 8, or CentOS
195 +6, your Agent may not be able to securely connect to Netdata Cloud due to an outdated version of OpenSSL. These old
196 +versions of OpenSSL cannot perform [hostname validation](https://wiki.openssl.org/index.php/Hostname_validation), which
197 +helps securely encrypt SSL connections.
198 +
199 +We recommend you reinstall Netdata with a [static build](/packaging/installer/methods/kickstart-64.md), which uses an
200 +up-to-date version of OpenSSL with hostname validation enabled.
201 +
202 +If you choose to continue using the outdated version of OpenSSL, your node will still connect to Netdata Cloud, albeit
203 +with hostname verification disabled. Without verification, your Netdata Cloud connection could be vulnerable to
204 +man-in-the-middle attacks.
205 +
206 #### cloud-enabled is false
207
208 If `cloud-enabled` is `false`, you probably ran the installer with `--disable-cloud` option.
packaging/installer/README.md
+39
@@ -165,3 +165,42 @@ the community helps fix any bugs that might have been introduced in previous rel
165 - Protect yourself from the rare instance when major bugs slip through our testing and negatively affect a Netdata
166 installation
167 - Retain more control over the Netdata version you use
168 +
169 +## Installation notes and known issues
170 +
171 +We are tracking a few issues related to installation and packaging.
172 +
173 +### Older distributions (Ubuntu 14.04, Debian 8, CentOS 6) and OpenSSL
174 +
175 +If you're running an older Linux distribution or one that has reached EOL, such as Ubuntu 14.04 LTS, Debian 8, or CentOS
176 +6, your Agent may not be able to securely connect to Netdata Cloud due to an outdated version of OpenSSL. These old
177 +versions of OpenSSL cannot perform [hostname validation](https://wiki.openssl.org/index.php/Hostname_validation), which
178 +helps securely encrypt SSL connections.
179 +
180 +We recommend you reinstall Netdata with a [static build](/packaging/installer/methods/kickstart-64.md), which uses an
181 +up-to-date version of OpenSSL with hostname validation enabled.
182 +
183 +If you choose to continue using the outdated version of OpenSSL, your node will still connect to Netdata Cloud, albeit
184 +with hostname verification disabled. Without verification, your Netdata Cloud connection could be vulnerable to
185 +man-in-the-middle attacks.
186 +
187 +### CentOS 6 and CentOS 8
188 +
189 +To install the Agent on certain CentOS and RHEL systems, you must enable non-default repositories, such as EPEL or
190 +PowerTools, to gather hard dependencies. See the [CentOS 6](/packaging/installer/methods/manual.md#centos-rehel-6-x) and
191 +[CentOS 8](/packaging/installer/methods/manual.md#centos-rehel-8-x) sections for more information.
192 +
193 +### Multiple versions of OpenSSL
194 +
195 +We've received reports from the community about issues with running the `kickstart.sh` script on systems that have both
196 +a distribution-installed version of OpenSSL and a manually-installed local version. The Agent's installer cannot handle
197 +both.
198 +
199 +We recommend you install Netdata with the [static binary](/packaging/installer/methods/kickstart-64.md) to avoid the
200 +issue altogether. Or, you can manually remove one version of OpenSSL to remove the conflict.
201 +
202 +### Clang compiler on Linux
203 +
204 +Our current build process has some issues when using certain configurations of the `clang` C compiler on Linux. See [the
205 +section on `nonrepresentable section on output`
206 +errors](/packaging/installer/methods/manual.md#nonrepresentable-section-on-output-errors) for a workaround.
\ No newline at end of file