Something happens

[einar-lanfranco]

It freezes in first windows Starting modules!

No error in docker, just stop!

xhost + && docker-compose up
access control disabled, clients can connect from any host
Starting autopsy ... done
Attaching to autopsy
autopsy    | Picked up JAVA_TOOL_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true -Dswing.defaultlaf=com.sun.java.swing.plaf.gtk.GTKLookAndFeel
autopsy    | Temp Folder for Libraries: /tmp
autopsy    | SleuthkitJNI: loaded libtsk_jni

Previously one error shows up: Failed to load module "canberra-gtk-module, but i fixed it and it wasnt the cause of fthe reeze.

[einar-lanfranco]

As a temporal workaround we upload a previous version of your image to dockerhub!

docker pull certunlp/autopsy:4.17.0

https://hub.docker.com/r/certunlp/autopsy/tags?page=1&ordering=last_updated

Please use tags in dockerhub, additional to latest.

[bannsec]

So it doesn't error for me. It will sit at starting modules for upwards of a minute or so, but then will continue on and open correctly. As I am not seeing errors, I think it's simply autopsy bloat happening.

[bannsec]

Ok, figured it out. The first time autopsy starts up it's actually displaying a prompt. Unfortunately, this prompt is going behind the splashscreen. I just happened to hit enter while typing something which cause it to hit accept and continue forward.

You can verify this by clicking on the splash and then just hitting enter blindly. Then give it a few seconds to continue loading.

I'm not a huge fan of simply removing the splash screen (though it's an option). Will see if autopsy folks can fix on their end which is where it should be fixed.

[artificialexit]

@bannsec If you create a config file to disable the central repository before first start then the dialog won't show.

Eg:

cat > ${HOME}/.autopsy/dev/config/CentralRepository.properties <<EOF
db.useCentralRepo=false
initialized=true
EOF

[bannsec]

honestly would rather disable the splash screen. that might be what i do since autopsy folks haven't responded to the issue.

[einar-lanfranco]

You could push in Acivities and you get the hidden screen at least in Ubuntu
.