update-alternatives: using /usr/share/zoneinfo/UTC to provide /etc/localtime (localtime) in auto mode
2026-06-11 16:00:40,047 WARN For [program:nginx], redirect_stderr=true but stderr_logfile has also been set to a filename, the filename has been ignored
2026-06-11 16:00:40,047 WARN For [program:php-fpm], redirect_stderr=true but stderr_logfile has also been set to a filename, the filename has been ignored
2026-06-11 16:00:40,047 WARN For [program:rsyslog], redirect_stderr=true but stderr_logfile has also been set to a filename, the filename has been ignored
2026-06-11 16:00:40,047 INFO Included extra file "/etc/supervisor/conf.d/10-supervisor.conf" during parsing
2026-06-11 16:00:40,047 INFO Included extra file "/etc/supervisor/conf.d/40-stunnel.conf" during parsing
2026-06-11 16:00:40,048 INFO Included extra file "/etc/supervisor/conf.d/50-workers.conf" during parsing
2026-06-11 16:00:40,048 INFO Set uid to user 0 succeeded
2026-06-11 16:00:40,052 INFO RPC interface 'supervisor' initialized
2026-06-11 16:00:40,086 INFO RPC interface 'supervisor' initialized
2026-06-11 16:00:40,086 INFO supervisord started with pid 8
2026-06-11 16:00:41,089 INFO spawned: 'nginx' with pid 9
2026-06-11 16:00:41,090 INFO spawned: 'php-fpm' with pid 10
2026-06-11 16:00:41,092 INFO spawned: 'rsyslog' with pid 11
INIT | Initialize MySQL ...
Configure PHP | Change PHP values ...
Configure PHP | Setting 'memory_limit = 2048M'
--------------
DESCRIBE attributes
--------------

ERROR 1146 (42S02) at line 1: Table 'misp.attributes' doesn't exist
... database has not been initialized, importing MySQL scheme...
Configure PHP | Setting 'max_execution_time = 300'
Configure PHP | Setting 'upload_max_filesize = 50M'
Configure PHP | Setting 'max_file_uploads = 50'
Configure PHP | Setting 'post_max_size = 50M'
Configure PHP | Setting 'max_input_time = 300'
Configure PHP | Setting 'session.save_path = 'tcp://misp-redis:6379?auth=redispassword'
Configure PHP | Setting 'date.timezone = UTC'
Configure PHP | Setting 'pm.max_children = 5'
Configure PHP | Setting 'pm.start_servers = 2'
Configure PHP | Setting 'pm.(min|max)_spare_servers = 2'
Configure PHP | Setting 'pm.max_requests = 0'
Configure PHP | Disabling 'pm.status_path'
Configure PHP | Disabling 'pm.status_listen'
Configure PHP | Starting PHP FPM
2026-06-11 16:00:42,298 INFO success: nginx entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:00:42,298 INFO success: php-fpm entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:00:42,298 INFO success: rsyslog entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
INIT | Initialize NGINX ...
... adjusting 'fastcgi_read_timeout' to 300s
... adjusting 'fastcgi_send_timeout' to 300s
... adjusting 'fastcgi_connect_timeout' to 300s
... adjusting 'client_max_body_size' to 50M
... adjusting Content-Security-Policy
... no Content-Security-Policy header will be set as CONTENT_SECURITY_POLICY is not defined
... adjusting X-Frame-Options
... setting 'X-Frame-Options SAMEORIGIN'
... adjusting HTTP Strict Transport Security (HSTS)
... no HSTS header will be set as HSTS_MAX_AGE is not defined
... enabling port 80 redirect
... enabling IPv6 on port 80
... enabling SSL redirect
... enabling port 443
... enabling IPv6 on port 443
... TLS certificates found
... nginx docroot set to /var/www/html/
INIT | Initialize MISP files and configurations ...
... initialize configuration files
14+1 records in
14+1 records out
7321 bytes (7.3 kB, 7.1 KiB) copied, 6.7006e-05 s, 109 MB/s
3+1 records in
3+1 records out
1811 bytes (1.8 kB, 1.8 KiB) copied, 3.5117e-05 s, 51.6 MB/s
21+1 records in
21+1 records out
10814 bytes (11 kB, 11 KiB) copied, 8.1214e-05 s, 133 MB/s
31+1 records in
31+1 records out
16064 bytes (16 kB, 16 KiB) copied, 0.000124986 s, 129 MB/s
... patch bootstrap.php settings not required
... initialize database.php settings
... initialize email.php settings
... initialize app files
INIT | Update MISP app/files directory ...
... found local files/VERSION: v2.5.36
... local files/ match distribution version, skipping file sync
INIT | Enforce MISP permissions ...
... local files/ match distribution version, skipping data permissions in files/
... chown -R www-data:www-data /var/www/MISP/app/Config
find & change ... chmod -R 0550 files /var/www/MISP/app/Config ...
find & change ... chmod -R 0770 directories /var/www/MISP/app/Config
... chmod 600 /var/www/MISP/app/Config/{config,database,email}.php
INIT | Flip NGINX live ...
... nginx docroot set to /var/www/MISP/app/webroot
... nginx reloaded
2026/06/11 16:00:54 [notice] 177#177: signal process started
INIT | Configure MISP installation ...
MISP | Update CA certificates ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Updating /var/www/MISP/app/Lib/cakephp/lib/Cake/Config/cacert.pem using curl data...
MISP | Apply minimum configuration directives ...
... enforcing env var settings
Enforcing minimum_config setting 'GnuPG.binary' to env var or default value '/usr/bin/gpg'...
Enforcing minimum_config setting 'MISP.python_bin' to env var or default value '/usr/local/bin/python3'...
Enforcing minimum_config setting 'MISP.redis_host' to env var or default value 'misp-redis'...
Enforcing minimum_config setting 'MISP.redis_password' to env var or default value 'redispassword'...
Enforcing minimum_config setting 'MISP.redis_port' to env var or default value '6379'...
Enforcing minimum_config setting 'Plugin.ZeroMQ_redis_host' to env var or default value 'misp-redis'...
Enforcing minimum_config setting 'Plugin.ZeroMQ_redis_password' to env var or default value 'redispassword'...
Enforcing minimum_config setting 'Plugin.ZeroMQ_redis_port' to env var or default value '6379'...
Enforcing minimum_config setting 'SimpleBackgroundJobs.redis_host' to env var or default value 'misp-redis'...
Enforcing minimum_config setting 'SimpleBackgroundJobs.redis_password' to env var or default value 'redispassword'...
Enforcing minimum_config setting 'SimpleBackgroundJobs.redis_port' to env var or default value '6379'...
Enforcing minimum_config setting 'SimpleBackgroundJobs.supervisor_host' to env var or default value '127.0.0.1'...
Enforcing minimum_config setting 'SimpleBackgroundJobs.supervisor_password' to env var or default value 'supervisor'...
Enforcing minimum_config setting 'SimpleBackgroundJobs.supervisor_user' to env var or default value 'supervisor'...
... checking for unset default settings
Updating unset minimum_config setting 'MISP.attachments_dir' to '/var/www/MISP/app/files'...
Updating unset minimum_config setting 'MISP.background_jobs' to 'true'...
Updating unset minimum_config setting 'MISP.ca_path' to '/etc/ssl/certs/ca-certificates.crt'...
Updating unset minimum_config setting 'MISP.download_gpg_from_homedir' to 'false'...
Updating unset minimum_config setting 'MISP.menu_custom_right_link' to ''...
Updating unset minimum_config setting 'MISP.menu_custom_right_link_html' to ''...
Updating unset minimum_config setting 'MISP.online_version_check' to 'true'...
Updating unset minimum_config setting 'MISP.osuser' to 'www-data'...
Updating unset minimum_config setting 'MISP.redis_database' to '13'...
Updating unset minimum_config setting 'MISP.self_update' to 'false'...
Updating unset minimum_config setting 'MISP.tmpdir' to '/var/www/MISP/app/tmp'...
Updating unset minimum_config setting 'Plugin.ZeroMQ_enable' to 'false'...
Updating unset minimum_config setting 'Security.disable_instance_file_uploads' to 'false'...
Updating unset minimum_config setting 'Security.disable_local_feed_access' to 'false'...
Updating unset minimum_config setting 'Security.rest_client_enable_arbitrary_urls' to 'false'...
Updating unset minimum_config setting 'Security.salt' to ''...
Updating unset minimum_config setting 'SimpleBackgroundJobs.enabled' to 'true'...
Updating unset minimum_config setting 'SimpleBackgroundJobs.max_job_history_ttl' to '86400'...
Updating unset minimum_config setting 'SimpleBackgroundJobs.redis_database' to '1'...
Updating unset minimum_config setting 'SimpleBackgroundJobs.redis_namespace' to 'background_jobs'...
Updating unset minimum_config setting 'SimpleBackgroundJobs.supervisor_port' to '9001'...
MISP | Initialize configuration ...
... enforcing env var settings
Enforcing db_enable setting 'MISP.system_setting_db' to env var or default value 'false'...
... enforcing env var settings
Enforcing initialisation setting 'MISP.attachments_dir' to env var or default value '/var/www/MISP/app/files'...
Enforcing initialisation setting 'MISP.baseurl' to env var or default value 'https://localhost'...
Enforcing initialisation setting 'MISP.contact' to env var or default value 'admin@admin.test'...
Enforcing initialisation setting 'MISP.email' to env var or default value 'admin@admin.test'...
Not enforcing initialisation setting 'MISP.uuid' as value is blank...
Enforcing initialisation setting 'Security.encryption_key' to env var or default value ''...
Not enforcing initialisation setting 'Security.salt' as value is blank...
Enforcing initialisation setting 'debug' to env var or default value '0'...
... checking for unset default settings
Updating unset initialisation setting 'MISP.default_attribute_distribution' to 'event'...
Updating unset initialisation setting 'MISP.default_event_distribution' to '1'...
Updating unset initialisation setting 'MISP.default_event_tag_collection' to '0'...
Updating unset initialisation setting 'MISP.delegation' to 'true'...
Updating unset initialisation setting 'MISP.disable_user_login_change' to 'false'...
Updating unset initialisation setting 'MISP.enableEventBlocklisting' to 'true'...
Updating unset initialisation setting 'MISP.enableOrgBlocklisting' to 'true'...
Updating unset initialisation setting 'MISP.event_alert_republish_ban' to 'true'...
Updating unset initialisation setting 'MISP.event_alert_republish_ban_refresh_on_retry' to 'true'...
Updating unset initialisation setting 'MISP.event_alert_republish_ban_threshold' to '120'...
Updating unset initialisation setting 'MISP.full_tags_on_event_index' to '1'...
Updating unset initialisation setting 'MISP.incoming_tags_disabled_by_default' to 'false'...
Updating unset initialisation setting 'MISP.language' to 'eng'...
Updating unset initialisation setting 'MISP.log_auth' to 'true'...
Updating unset initialisation setting 'MISP.log_new_audit' to 'true'...
Updating unset initialisation setting 'MISP.proposals_block_attributes' to 'false'...
Updating unset initialisation setting 'MISP.server_settings_skip_backup_rotate' to 'false'...
Updating unset initialisation setting 'MISP.showCorrelationsOnIndex' to 'true'...
Updating unset initialisation setting 'MISP.showorg' to 'true'...
Updating unset initialisation setting 'MISP.showorgalternate' to 'false'...
Updating unset initialisation setting 'MISP.store_api_access_time' to 'false'...
Updating unset initialisation setting 'MISP.tagging' to 'true'...
Updating unset initialisation setting 'MISP.take_ownership_xml_import' to 'false'...
Updating unset initialisation setting 'MISP.terms_download' to 'false'...
Updating unset initialisation setting 'MISP.unpublishedprivate' to 'false'...
Updating unset initialisation setting 'MISP.user_email_notification_ban' to 'true'...
Updating unset initialisation setting 'SecureAuth.amount' to '5'...
Updating unset initialisation setting 'SecureAuth.expire' to '300'...
Updating unset initialisation setting 'Security.advanced_authkeys' to 'true'...
Updating unset initialisation setting 'Security.alert_on_suspicious_logins' to 'true'...
Updating unset initialisation setting 'Security.check_sec_fetch_site_header' to 'true'...
Updating unset initialisation setting 'Security.disable_browser_cache' to 'true'...
Updating unset initialisation setting 'Security.do_not_log_authkeys' to 'true'...
Updating unset initialisation setting 'Security.log_each_individual_auth_fail' to 'true'...
Updating unset initialisation setting 'Security.require_password_confirmation' to 'true'...
Updating unset initialisation setting 'Security.username_in_response_header' to 'true'...
MISP | Initialize workers ...
... starting background workers
2026-06-11 16:01:13,812 INFO spawned: 'default_00' with pid 2625
2026-06-11 16:01:13,813 INFO spawned: 'default_01' with pid 2626
2026-06-11 16:01:13,815 INFO spawned: 'default_02' with pid 2627
2026-06-11 16:01:13,816 INFO spawned: 'default_03' with pid 2628
2026-06-11 16:01:13,818 INFO spawned: 'default_04' with pid 2631
2026-06-11 16:01:13,820 INFO spawned: 'email_00' with pid 2635
2026-06-11 16:01:13,822 INFO spawned: 'email_01' with pid 2640
2026-06-11 16:01:13,824 INFO spawned: 'email_02' with pid 2648
2026-06-11 16:01:13,826 INFO spawned: 'email_03' with pid 2657
2026-06-11 16:01:13,828 INFO spawned: 'email_04' with pid 2662
2026-06-11 16:01:13,830 INFO spawned: 'cache_00' with pid 2670
2026-06-11 16:01:13,832 INFO spawned: 'cache_01' with pid 2678
2026-06-11 16:01:13,834 INFO spawned: 'cache_02' with pid 2683
2026-06-11 16:01:13,836 INFO spawned: 'cache_03' with pid 2690
2026-06-11 16:01:13,840 INFO spawned: 'cache_04' with pid 2705
2026-06-11 16:01:13,842 INFO spawned: 'prio_00' with pid 2712
2026-06-11 16:01:13,845 INFO spawned: 'prio_01' with pid 2722
2026-06-11 16:01:13,852 INFO spawned: 'prio_02' with pid 2739
2026-06-11 16:01:13,855 INFO spawned: 'prio_03' with pid 2743
2026-06-11 16:01:13,860 INFO spawned: 'prio_04' with pid 2749
2026-06-11 16:01:13,863 INFO spawned: 'update_00' with pid 2754
2026-06-11 16:01:13,869 INFO spawned: 'scheduler_00' with pid 2757
2026-06-11 16:01:15,053 INFO success: default_00 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: default_01 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: default_02 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: default_03 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: default_04 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: email_00 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: email_01 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: email_02 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: email_03 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: email_04 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: cache_00 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: cache_01 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: cache_02 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: cache_03 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: cache_04 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: prio_00 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: prio_01 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: prio_02 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: prio_03 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: prio_04 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: update_00 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-06-11 16:01:15,053 INFO success: scheduler_00 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
misp-workers:default_00: started
misp-workers:default_01: started
misp-workers:default_02: started
misp-workers:default_03: started
misp-workers:default_04: started
misp-workers:email_00: started
misp-workers:email_01: started
misp-workers:email_02: started
misp-workers:email_03: started
misp-workers:email_04: started
misp-workers:cache_00: started
misp-workers:cache_01: started
misp-workers:cache_02: started
misp-workers:cache_03: started
misp-workers:cache_04: started
misp-workers:prio_00: started
misp-workers:prio_01: started
misp-workers:prio_02: started
misp-workers:prio_03: started
misp-workers:prio_04: started
misp-workers:update_00: started
misp-workers:scheduler_00: started
MISP | Apply DB updates ...
Executing all updates to bring the database up to date with the current version.
All updates completed.
MISP | Configure GPG key ...
... generating new GPG key in /var/www/MISP/.gnupg
gpg: WARNING: unsafe permissions on homedir '/var/www/MISP/.gnupg'
gpg: keybox '/var/www/MISP/.gnupg/pubring.kbx' created
gpg: Generating a basic OpenPGP key
gpg: /var/www/MISP/.gnupg/trustdb.gpg: trustdb created
gpg: directory '/var/www/MISP/.gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/var/www/MISP/.gnupg/openpgp-revocs.d/7F9A7B4934F3A5642B7A281469CC633F6E04BC90.rev'
gpg: Done
... exporting GPG key
... enforcing env var settings
Enforcing gpg setting 'GnuPG.email' to env var or default value 'admin@admin.test'...
Enforcing gpg setting 'GnuPG.homedir' to env var or default value '/var/www/MISP/.gnupg'...
Enforcing gpg setting 'GnuPG.password' to env var or default value 'passphrase'...
... checking for unset default settings
Updating unset gpg setting 'GnuPG.onlyencrypted' to 'false'...
Updating unset gpg setting 'SMIME.enabled' to 'false'...
MISP | Init default user and organization ...
... setting admin key to 'JHxBbGPnAtyut0FTwkeuhVFnbMksGRCRwsE0V9Xw'
... admin user key set to 'JHxBbGPnAtyut0FTwkeuhVFnbMksGRCRwsE0V9Xw'
... setting admin password to 'admin'
Password for admin@admin.test changed.
MISP | Resolve critical issues ...
... enforcing env var settings
Enforcing critical setting 'MISP.external_baseurl' to env var or default value 'https://localhost'...
Enforcing critical setting 'Security.rest_client_baseurl' to env var or default value 'https://localhost'...
... checking for unset default settings
Updating unset critical setting 'MISP.host_org_id' to '1'...
Updating unset critical setting 'Plugin.Enrichment_hover_enable' to 'false'...
Updating unset critical setting 'Plugin.Enrichment_hover_popover_only' to 'false'...
Updating unset critical setting 'Security.csp_enforce' to 'true'...
Updating unset critical setting 'Security.auth' to 'Array()'...
MISP | Start component updates ...
Galaxies updated
Successfully updated 165 taxonomies.
122 warninglists updated, 0 fails
Notice lists updated
Successfully updated 388 object templates.
MISP | Resolve non-critical issues ...
... enforcing env var settings
Enforcing optional setting 'MISP.enable_themes' to env var or default value 'false'...
Enforcing optional setting 'Plugin.Action_services_url' to env var or default value 'http://misp-modules'...
Enforcing optional setting 'Plugin.Enrichment_services_url' to env var or default value 'http://misp-modules'...
Enforcing optional setting 'Plugin.Export_services_url' to env var or default value 'http://misp-modules'...
Enforcing optional setting 'Plugin.Import_services_url' to env var or default value 'http://misp-modules'...
... checking for unset default settings
Updating unset optional setting 'MISP.log_client_ip' to 'true'...
Updating unset optional setting 'MISP.log_user_ips' to 'true'...
Updating unset optional setting 'MISP.log_user_ips_authkeys' to 'true'...
Updating unset optional setting 'MISP.welcome_text_bottom' to ''...
Updating unset optional setting 'MISP.welcome_text_top' to ''...
Updating unset optional setting 'Plugin.Action_services_enable' to 'true'...
Updating unset optional setting 'Plugin.Cortex_services_enable' to 'false'...
Updating unset optional setting 'Plugin.Enrichment_hover_timeout' to '5'...
Updating unset optional setting 'Plugin.Enrichment_services_enable' to 'true'...
Updating unset optional setting 'Plugin.Enrichment_timeout' to '30'...
Updating unset optional setting 'Plugin.Export_services_enable' to 'true'...
Updating unset optional setting 'Plugin.Import_services_enable' to 'true'...
Updating unset optional setting 'Plugin.Workflow_enable' to 'true'...
MISP | Configure storage ...
MISP | Create sync servers ...
MISP | Set Up OIDC ...
... OIDC authentication disabled
MISP | Set Up apachesecureauth ...
... LDAP APACHESECUREAUTH authentication disabled
MISP | Set Up LDAP ...
... LDAPAUTH authentication disabled
MISP | Set Up AAD ...
... Entra (AzureAD) authentication disabled
MISP | Set Up CustomAuth ...
... CUSTOM_AUTH authentication disabled
MISP | Set Up Session ...
... Session configured
MISP | Set Up Proxy ...
... Proxy disabled
MISP | Create default Scheduled Tasks ...
MISP | Configure misp-guard CA certificate ...
MISP | Mark instance live
MISP | Version: 2.5.36
Set live status to True in Redis.
Set live status in PHP config file.
MISP is now live. Users can now log in.
INIT | Configure PHP ...
2026-06-11 16:03:30,910 INFO waiting for php-fpm to stop
Entrypoint FPM caught SIGTERM signal!
Killing process 48
2026-06-11 16:03:30,911 WARN stopped: php-fpm (exit status 143)
2026-06-11 16:03:30,915 INFO spawned: 'php-fpm' with pid 3817
Configure PHP | Change PHP values ...
Configure PHP | Setting 'memory_limit = 2048M'
Configure PHP | Setting 'max_execution_time = 300'
Configure PHP | Setting 'upload_max_filesize = 50M'
Configure PHP | Setting 'max_file_uploads = 50'
Configure PHP | Setting 'post_max_size = 50M'
Configure PHP | Setting 'max_input_time = 300'
Configure PHP | Setting 'session.save_path = 'tcp://misp-redis:6379?auth=redispassword'
Configure PHP | Setting 'date.timezone = UTC'
Configure PHP | Setting 'pm.max_children = 5'
Configure PHP | Setting 'pm.start_servers = 2'
Configure PHP | Setting 'pm.(min|max)_spare_servers = 2'
Configure PHP | Setting 'pm.max_requests = 0'
Configure PHP | Disabling 'pm.status_path'
Configure PHP | Disabling 'pm.status_listen'
Configure PHP | Starting PHP FPM
2026-06-11 16:03:32,013 INFO success: php-fpm entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
php-fpm: stopped
php-fpm: started
INIT | Done ...
