Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Back-off restarting failed container init-enterprise-server-keystore

Katarzyna | Last updated: Oct 24, 2023 08:53AM UTC

Hello, I'm trying to install Burp using Helm chart. Everything seems good, but my pods are giving me this message: Back-off restarting failed container init-enterprise-server-keystore in pod burp-deployment-enterprise-server and I do not know what should I check? What can be the cause of this message?

Katarzyna | Last updated: Oct 24, 2023 09:16AM UTC

When I checked the logs, I see: kubectl logs -f -p burp-deployment-enterprise-server-7f6f5bf868-m47gj -c init-enterprise-server-keystore Generating 2,048 bit RSA key pair and self-signed certificate (SHA256withRSA) with a validity of 3,650 days for: OU=Enterprise, O=PortSwigger, L=Knutsford, ST=Cheshire, C=UK [Storing /home/burpsuite/keystores/es.keystore] keytool error: java.io.FileNotFoundException: /home/burpsuite/keystores/es.keystore (No such file or directory) java.io.FileNotFoundException: /home/burpsuite/keystores/es.keystore (No such file or directory) at java.base/java.io.FileOutputStream.open0(Native Method) at java.base/java.io.FileOutputStream.open(Unknown Source) at java.base/java.io.FileOutputStream.<init>(Unknown Source) at java.base/java.io.FileOutputStream.<init>(Unknown Source) at java.base/sun.security.tools.keytool.Main.doCommands(Unknown Source) at java.base/sun.security.tools.keytool.Main.run(Unknown Source) at java.base/sun.security.tools.keytool.Main.main(Unknown Source)

Katarzyna | Last updated: Oct 24, 2023 11:56AM UTC

In my values.yaml file I set useHttps: false

Katarzyna | Last updated: Oct 24, 2023 12:30PM UTC

I did sudo find / -name "es.keystore" and found it here: /var/lib/BurpSuiteEnterpriseEdition/data/keystores/es.keystore so I changed path in burp_helm/templates/enterprise-server/config-map.yml and I will see if it will help or not

Katarzyna | Last updated: Oct 24, 2023 12:38PM UTC

OK I have the same error, so it seems changing the path did not work.

Katarzyna | Last updated: Oct 24, 2023 12:58PM UTC

Maybe this will help? kubectl logs burp-deployment-enterprise-server-7f6f5bf868-8pwkf -c init-burp-download mkdir: cannot create directory '/tmp/keystores': Permission denied Burp download path not set or same as installation path

Thomas, PortSwigger Agent | Last updated: Oct 24, 2023 01:28PM UTC

Thank you for the information. Is the persistent volume claim in the same namespace as the Burp Suite Enterprise Edition application, and did you modify the PVC name in the values.yaml file with the helm chart? Please run the following command and provide me with the output. kubectl -n <namespace> describe persistentvolume kubectl -n <namespace> describe persistentvolumeclaims kubectl -n <namespace> describe pods <enterprise-server-pod> kubectl -n <namespace> describe pods <web-server-pod> Then, please exec into your enterprise server pod, navigate to /home/burpsuite/ and /home/burpsuite/keystores/ and provide me with the file permissions. This can be done using the following commands. kubectl -n <namespace> exec <enterprise-server-pod> -it -- /bin/bash ls -la /home/burpsuite/ ls -la /home/burpsuite/keystores/ Please email the full outputs to support@portswigger.net

Katarzyna | Last updated: Oct 25, 2023 07:30AM UTC

Hello, I have send the logs to the provided e-mail, subject is the same as the subject of this thread. When I tried kubectl -n <namespace> exec <enterprise-server-pod> -it -- /bin/bash I got: kubectl -n default exec burp-deployment-enterprise-server-55b7b9d7d8-f5vxh -it -- /bin/bash Defaulted container "enterprise-server" out of: enterprise-server, init-burp-download (init), init-enterprise-server-keystore (init) error: unable to upgrade connection: container not found ("enterprise-server")

Katarzyna | Last updated: Oct 25, 2023 07:35AM UTC

I also see this: kubectl logs burp-deployment-enterprise-server-55b7b9d7d8-f5vxh Defaulted container "enterprise-server" out of: enterprise-server, init-burp-download (init), init-enterprise-server-keystore (init) 2023-10-25 07:30:25 INFO b.common.config.CommandLineOptions - Selected default file 'enterprise-server.config' [main] 2023-10-25 07:30:25 INFO bsee.common.BuildConstants - Product version: 2023.9.1-14530 [main] 2023-10-25 07:30:25 INFO bsee.server.StartEnterpriseServer - Enterprise Server version 2023.9.1-14530 [main] 2023-10-25 07:30:25 INFO bsee.server.StartEnterpriseServer - Using Java version 17.0.8 [main] 2023-10-25 07:30:25 INFO b.common.config.SystemEnvironment - Installation environment: KUBERNETES [main] Exception in thread "main" java.lang.IllegalStateException: Missing environment variable(s): [BSEE_ADMIN_REPOSITORY_URL, BSEE_AGENT_REPOSITORY_URL, BSEE_AGENT_REPOSITORY_USERNAME] at net.portswigger.enterprise.server.config.k.R(Unknown Source) at net.portswigger.enterprise.server.StartEnterpriseServer.l(Unknown Source) at net.portswigger.enterprise.server.StartEnterpriseServer.R(Unknown Source) at net.portswigger.enterprise.server.StartEnterpriseServer.main(Unknown Source) Maybe because I had empty jdbc path in my values.yaml, I will try again with the jdbc and paste the results.

Katarzyna | Last updated: Oct 25, 2023 07:50AM UTC

OK it seems I solved the problem by myself, now I have a new one, with DB :D This thread can be closed. If you need, my files with successful deployment: burp-storage.yaml apiVersion: storage.k8s.io/v1 kind: StorageClass metadata: name: local-storage provisioner: kubernetes.io/no-provisioner volumeBindingMode: WaitForFirstConsumer reclaimPolicy: Retain burp-pv.yaml apiVersion: v1 kind: PersistentVolume metadata: name: bsee-pv namespace: default labels: app.kubernetes.io/name: bsee-pv app.kubernetes.io/component: persistence spec: capacity: storage: 5Gi volumeMode: Filesystem accessModes: - ReadWriteMany persistentVolumeReclaimPolicy: Retain storageClassName: local-storage hostPath: path: /tmp burp-pvc.yaml: apiVersion: v1 kind: PersistentVolumeClaim metadata: name: bsee-pvc namespace: default spec: storageClassName: local-storage accessModes: - ReadWriteMany volumeMode: Filesystem resources: requests: storage: 5Gi

Thomas, PortSwigger Agent | Last updated: Oct 25, 2023 01:49PM UTC