[BUG] ERROR in install script at TASK [wazuh : Fix Wazuh RBAC]

[peteroruba]

Describe the bug

install.sh fails.

TASK [wazuh : Fix Wazuh RBAC] ************************************************************************
fatal: [localhost]: FAILED! => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true}

To Reproduce

Run install.sh on a freshly installed system.

Server:

• OS: Ubuntu 24.04
• Software Versions:
  • Podman 5.8.0

               total        used        free      shared  buff/cache   available
Mem:           32028       18512       11133           1        2926       13515
Swap:           4095           0        4095

Filesystem      Size  Used Avail Use% Mounted on
tmpfs           3.2G  1.3M  3.2G   1% /run
efivarfs        256K   32K  225K  13% /sys/firmware/efi/efivars
/dev/nvme0n1p2   48G   27G   19G  59% /

Linux logging 6.8.0-101-generic #101-Ubuntu SMP PREEMPT_DYNAMIC Fri Feb  6 20:07:40 UTC 2026 aarch64 aarch64 aarch64 GNU/Linux

No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 24.04.4 LTS
Release:	24.04
Codename:	noble

podman ps --format "{{.Names}} {{.Status}}"
lme-elasticsearch Up 9 minutes (healthy)
lme-elastalert2 Up 8 minutes
lme-kibana Up 8 minutes (healthy)

Expected behavior

Completion of install process

[peteroruba]

The above mentioned issue has occured inside a VM on VMWare Fusion on macOS. Running Ubuntu on bare metal did not lead to this bug. System resources are give or take similar (4 CPU cores / 32 GB RAM / 84GB Swap).

[cbaxley]

Please run this to clean up the machine.

sudo scripts/wipe_lme.sh

and then run this to save the output to a file for us. Upload the file.

./install.sh -d 2>&1 | tee output.log

With the debugging on, you might be able to see what is happening to fix it. Otherwise I can look at the output in the output.log file.

[cbaxley]

The above mentioned issue has occured inside a VM on VMWare Fusion on macOS. Running Ubuntu on bare metal did not lead to this bug. System resources are give or take similar (4 CPU cores / 32 GB RAM / 84GB Swap).

I have had some problems on virtual machines on Mac because of how the ctasks in that kernel work. This was my workaround.

If running Linux on a hypervisor or virtual machine, you may need to modify the GRUB configuration in your VM (only if you have problems):

1. Add the following to the GRUB_CMDLINE_LINUX line in /etc/default/grub:

GRUB_CMDLINE_LINUX="systemd.unified_cgroup_hierarchy=0 cgroup_enable=memory swapaccount=1"

2. Update GRUB and reboot:

sudo update-grub
sudo reboot

[peteroruba]

output-with-grub-change.log
output.log

@cbaxley thank you for looking into this matter. I am attaching two output files - one right after wiping and with no change to my system and one after applying the suggested changes to the Grub configuration.