Docker Installation - Administrator Guide - 6.9 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.9
Creation date
2022-09-29
Last date published
2024-12-05
End_of_Life
EoL
Category
Administrator Guide
Abstract

Install Docker on Enterprise Linux platforms and troubleshoot installation.

Docker is required to run Python/Powershell scripts and integrations in a controlled environment.

Cortex XSOAR supports the latest Docker Engine release from Docker and the corresponding supported Linux distributions which include their own Docker Engine package. In addition, older versions of Docker Engine released within the last 12 months are supported unless there is a known compatibility issue with a specific Docker Engine version. In case of a compatibility issue, Cortex XSOAR will publish an advisory notifying customers to upgrade their Docker Engine version.

You can use a version that is not supported. However, when encountering an issue that requires Customer Support involvement, you may be asked to upgrade to a supported version before assistance can be provided.

Docker Installation Instructions

Mirantis Container Runtime (formerly Docker Engine - Enterprise)

Docker Enterprise has been acquired by Mirantis and is now referred to as Mirantis Container Runtime. If you wish to use the Mirantis Container Runtime follow the deployment guide for your operating system distribution.

Post Installation Troubleshooting

Demisto user

If you installed Cortex XSOAR before installing Docker, verify the demisto operating system user is part of the docker operating system group. Run id demisto to verify. For example:

id demisto
uid=997(demisto) gid=997(demisto) groups=997(demisto),998(docker)

If needed, add the demisto user to the operating system group:

sudo groupadd docker
sudo usermod -aG docker demisto

Cortex XSOAR advanced configuration settings

Remove the following system configuration settings from Cortex XSOAR. If you are using an engine, remove these keys from the engine configuration file.

python.executable
python.executable.no.docker

User permissions

To verify that the Cortex XSOAR operating system user (demisto) has necessary permissions and can run Docker containers, run the following command from the OS command line.

sudo -u demisto docker run --rm -it demisto/python:1.3-alpine python --version

If everything is configured properly the following output is displayed: Python 2.7.14.