CB Response: Upgrade to server 6.4+ will not complete due to changes in cb.server.body

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Running /usr/share/cb/cbupgrade to complete upgrade requires reconciling file changes for /etc/cb/nginx/conf.d/includes/cb.server.body 

  • The installer has detected local changes in the following configuration 
    files: 
    
    /etc/cb/nginx/conf.d/includes/cb.server.body 
    

• A diff of cb.server.body and cb.server.body.rpmnew shows many different lines in the old file

Environment

• CB Response Server
  • Upgrading to 6.4.0 and Higher
  • Upgrading from 6.3.x and Lower

Cause

Custom configuration was added to cb.server.body in a previous version. In 6.4 most content has been moved to /etc/cb/nginx/conf.d/includes/cb.server.base_body 

Resolution

1. Compare the content of /cb.server.body to cb.server.base_body to find changes

   • diff /etc/cb/nginx/conf.d/includes/cb.server.body /etc/cb/nginx/conf.d/includes/cb.server.base_body

2. Make desired changes in cb.server.base_body
3. Swap the cb.server.body and cb.server.body.rpmnew files

   • mv cb.server.body cb.server.body.bk
     mv cb.server.body.rpmnew cb.server.body

4. Complete upgrade

   • /usr/share/cb/cbupgrade

     
     ​​​​​​​

Additional Information

A common change to the file is to add different ciphers such as 3DES