EDR: Post upgrade to 6.1 and above Nginx fails to start

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• After performing an upgrade, the Nginx service (cb-nginx) fails to start.
• /etc/cb/nginx/conf.d contains both a file named cb.conf and a file like cb.multihome.conf or cb-multihome.conf.
• Duplicate listen messages appear in /var/log/cb/nginx/startup.log when starting services 

  • Starting cb-nginx: nginx: [emerg] duplicate listen options for [::]:80 in /etc/cb/nginx/conf.d/cb.conf:29
    nginx: [emerg] duplicate listen options for [::]:443 in /etc/cb/nginx/conf.d/cb.multihome.conf:43  

Environment

• EDR Server: 6.1 and Higher

Cause

Nginx cannot run with multiple .conf files in /etc/cb/nginx/conf.d. A cb.conf file was automatically created upon upgrade if one did not already exist. 

Resolution

1. Determine which .conf file contains the appropriate settings for the environment. 

   • Nginx has 3 .conf files which should not be deleted - http.conf, maps.conf, and upstream.conf 

2. Take a backup or delete the .conf file not to be used

3. If the file to be kept was not named cb.conf, rename the file

   • mv /etc/cb/nginx/conf.d/cb.multihome.conf /etc/cb/nginx/conf.d/cb.conf

4. Restart EDR services - https://community.carbonblack.com/t5/Knowledge-Base/Cb-Response-How-to-restart-server-services/ta-p/41294