T-Pot 24.04.0 released 🎉

[t3chn0m4g3]

Release Notes / Changelog

T-Pot 24.04.0 marks probably the largest change in the history of the project. While most of the changes have been made to the underlying platform some changes will be standing out in particular - a T-Pot ISO image will no longer be provided with the benefit that T-Pot will now run on multiple Linux distributions (Alma Linux, Debian, Fedora, OpenSuse, Raspbian, Rocky Linux, Ubuntu), Raspberry Pi (optimized) and macOS / Windows (limited).

New Features

• Distributed Installation is now using NGINX reverse proxy instead of SSH to transmit HIVE_SENSOR logs to HIVE
• deploy.sh, will make the deployment of sensor much easier and will automatically take care of the configuration. You only have to install the T-Pot sensor.
• T-Pot Init is the foundation for running T-Pot on multiple Linux distributions and will also ensure to restart containers with failed healthchecks using autoheal
• T-Pot Installer is now mostly Ansible based providing a universal playbook for the most common Linux distributions
• T-Pot Uninstaller allows to uninstall T-Pot, while not recommended for general usage, this comes in handy for testing purposes
• T-Pot Customizer (compose/customizer.py) is here to assist you in the creation of a customized docker-compose.yml
• T-Pot Landing Page has been redesigned and simplified
• Kibana Dashboards, Objects fully refreshed in favor of Lens based objects
• Wordpot is added as new addition to the available honeypots within T-Pot and will run on tcp/8080 by default.
• Raspberry Pi is now supported using a dedicated mobile.yml (why this is called mobile will be revealed soon!)
• GeoIP Attack Map is now aware of connects / disconnects and thus eliminating required reloads
• Docker, where possible, will now be installed directly from the Docker repositories to avoid any incompatibilities
• .env now provides a single configuration file for the T-Pot related settings
• genuser.sh can now be used to add new users to the T-Pot Landing Page as part of the T-Pot configuration file (.env)

Updates

• Honeypots and tools were updated to their latest pushed code and / or releases
• Where possible Docker Images will now use Alpine 3.19
• Updates will be provided continuously through Docker Images updates

Breaking Changes

• There is no option to migrate a previous installation to T-Pot 24.04.0, you can try to transfer the old data folder to the new T-Pot installation, but a working environment depends on too many other factors outside of our control and a new installation is simply faster.
• Most of the support scripts were moved into the T-Pot Init image and are no longer available directly on the host.
• Cockpit is no longer available as part of T-Pot itself. However, where supported, you can simply install the cockpit package.

Thanks & Credits

• @sp3t3rs, @trixam, for their backend and ews support!
• @cha147 made their first contribution in Fix typos in readme #1135
• @ctulio made their first contribution in Update some url repos #1187
• @zambroid made their first contribution in Corrected small typos #1173
• @kawaiipantsu made their first contribution in Update updateip.sh #1259
• @tadashi-oya made their first contribution in fix empty myINSTALLPACKAGES #1283
• @kauedg made their first contribution in call $0 instead of hardcoded script name #1338
• @swiftsolves-msft made their first contribution in Azure Deployment via ARM template #1369
• @shark4ce for taking the time to test, debug and offer a solution [DEV] Docker Installation Fails on Ubuntu Due to Incorrect Architecture Naming in Ansible Playbook #1472

History of merged changes

• Fix typos in readme by @cha147 in Fix typos in readme #1135
• Update some url repos by @ctulio in Update some url repos #1187
• Corrected small typos by @zambroid in Corrected small typos #1173
• Update updateip.sh by @kawaiipantsu in Update updateip.sh #1259
• Fixing uri max size by @kawaiipantsu in Fixing uri max size #1266
• fix empty myINSTALLPACKAGES by @tadashi-oya in fix empty myINSTALLPACKAGES #1283
• call $0 instead of hardcoded script name by @kauedg in call $0 instead of hardcoded script name #1338
• fixes Geoip ASN not working #1346 by @t3chn0m4g3 in fixes #1346 #1351
• Azure Deployment via ARM template by @swiftsolves-msft in Azure Deployment via ARM template #1369
• 24.04 by @t3chn0m4g3 in 24.04 #1513

Full Changelog: 22.04.0...24.04.0

---

This discussion was created from the release 24.04.0.

[aishla]

Hi, I'm having a problem installing T-Pot and I haven't been able to fix it even though I've tried installing it several times. I always get the same error. How can I fix it?

[t3chn0m4g3]

You are trying to install a previous version of T-Pot. Please follow the instructions of the Readme for T-Pot 24.04.

[msaleh00]

how can i get .iso file ?

[aishla]

there is a new version on t-pot, the instalation of this version doesn't work

[kanowah]

How to prevent the server from restarting everyday? Can't find it in the crontab anymore!

[t3chn0m4g3]

Use sudo crontab -e for editing the crontab and sudo crontab -l for viewing it.

[kanowah]

I know these steps, but I can't find the line that need to be removed to prevent daily reboot in the newest version.

[t3chn0m4g3]

Here is an example.

[kanowah]

Thank you

[ShoaibTalib]

I have been trying up for so long to install tpot 24.04.0 (latest) on Debian 12 . i am having some errors , i tried ubuntu server also .. attached screen shot is for reference

Kindly look into this grievance. Secondly it would be better to make iso for this version , as like in 22.04 verrsion

[t3chn0m4g3]

You are trying to install as root and you are not in the $HOME folder.
Follow the ReadMe for all the necessary instructions for a successful installation.

[ghenry]

You need to install ansible-playbook like the error indicates 😎

[ShoaibTalib]

i tried this also , but after running there are other error that i am getting

[ShoaibTalib]

You can see the errors in second screen shot of ubuntu server !!!

[t3chn0m4g3]

From the looks of it you are trying to install on top of the Desktop edition of either Ubuntu or Debian. Please follow the ReadMe and use a supported distribution ISO and install no extra packages, except for SSH.

[ShoaibTalib]

i deployed the tpot successfully on ubuntu server , and i checked either tpot is running or not using sudo systemctl status tpot, now my question is how can i run elastic search kibana dashboard, like previously in tpot 22.02 , it was easy just to use port no with external ip and we were good to go , but how can i run on this , secondly how can i perform attacks on cowrie using kali linux, i have deployed both vms in GNS3 software and connected via router , my research is basically on honeypots , kindly guide me ..

[kanowah]

I have an issue with this new version, after 24 hours after the installation, I'm getting this message and the attack map stop working, how to fix this issue?

[ShoaibTalib]

how did you access this dashboard, which ip ?? kindly give me some details

[kanowah]

Accessing from Kibana > T-POT Dashboard, after 24 hours after the installation I'm getting these error messages. I've done some research trying to solve this issue but I'm still stuck, the only solution that is working for me is to reinstall everything again, but same error appear after 24 hours.

[ShoaibTalib]

i mean to say on which port kibana is running , how can i access my kibana dashboard, what ip would i be using ? Local ip address starting off with 192.168 .. , i have deployed this on ubuntu server running on vmware, which is put in bridge connection kindly respond

[enlightenedEagle]

Hey, i am having an issue with the Tpot dashboard, i have tried installing Tpot on Ubuntu 23.10 and RockyLinux9 and in both of my installation, i could not access the web interface, or even if i could, not ever part of it was working

Also i am new to TPot, is there any guide about all the available, configs and other stuff that we can refer too
Thankyou

[ARGUS269]

Hello, can you give me all the information about the system you used to download t-pot

[atbohmer]

Works as a charm on a Debian GNU/Linux 12 (bookworm) VM, thanks for the great work!

[ARGUS269]

Thank you, I am having difficulty with tpot, did you use commands like "docker build" and "docker-compose up" to configure the honeypot?I have a report dated 6/26