Issue with Wazuh deployment in RHEL9 (New system) using quickstart

[Dhruvin Shah]

Hey Team

I am deploying Wazuh 4.12 using quickstart in RHEL9 system (new/fresh system)

I am facing issue while installation phase. Wazuh-dashboard keeps failing and then all other components are removed by the installation process. After looking into the log fail. I could only see the following error.

=================================== Installing: wazuh-dashboard x86_64 4.12.0-1 wazuh 267 M Transaction Summary ================================================================================ Install 1 Package Total download size: 267 M Installed size: 884 M Downloading Packages: [MIRROR] wazuh-dashboard-4.12.0-1.x86_64.rpm: Curl error (23): Failed writing received data to disk/application for https://packages.wazuh.com/4.x/yum/wazuh-dashboard-4.12.0-1.x86_64.rpm [Failure writing output to destination] [FAILED] wazuh-dashboard-4.12.0-1.x86_64.rpm: Curl error (23): Failed writing received data to disk/application for https://packages.wazuh.com/4.x/yum/wazuh-dashboard-4.12.0-1.x86_64.rpm [Failure writing output to destination] The downloaded packages were saved in cache until the next successful transaction. You can remove cached packages by executing 'yum clean packages'. Error: Error downloading packages: wazuh-dashboard-4.12.0-1.x86_64: Download failed: Curl error (23): Failed writing received data to disk/application for https://packages.wazuh.com/4.x/yum/wazuh-dashboard-4.12.0-1.x86_64.rpm [Failure writing output to destination] 24/06/2025 14:25:09 ERROR: Wazuh dashboard installation failed. 24/06/2025 14:25:09 INFO: --- Removing existing Wazuh installation --- 24/06/2025 14:25:09 INFO: Removing Wazuh manager. Dependencies resolved.

Can someone help me understand what is the issue and how to resolve it?

Kind Regards

[hasitha.u...@wazuh.com]

Hi Dhruvin Shah, 

The Curl error (23) is likely due to insufficient disk space or inode exhaustion, common in Wazuh installations on systems with limited storage. Start by verifying disk space and inodes, clearing the dnf cache, and disabling SELinux temporarily. The Wazuh dashboard requires 267 MB for the download and 884 MB for installation.
The quickstart guide recommends at least 50 GB for an all-in-one deployment to accommodate the indexer, manager, dashboard, and logs.
Run this command and share the output: df -h 
Requirements 

A full inode table can prevent file creation even if disk space is available. df -i

RHEL 9 uses SELinux in enforcing mode by default, which may restrict dnf operations.
Check SELinux status:
sestatus
If it says Current mode: enforcing, temporarily set to permissive:
sudo setenforce 0

Retry the installation:
sudo bash wazuh-install.sh -a 
Clear dnf cache:
sudo dnf clean all 

If the issue persists, please share the install log, if it's available, to check further. /var/log/wazuh-install.log

Let me know the update on this.

On Wednesday, June 25, 2025 at 2:02:10 PM UTC+5:30 hasitha.u...@wazuh.com wrote:

Hi Dhruvin Shah, The Curl error (23) is likely due to insufficient disk space or inode exhaustion, common in Wazuh installations on systems with limited storage. Start by verifying disk space and inodes, clearing the dnf cache, and disabling SELinux temporarily. The Wazuh dashboard requires 267 MB for the download and 884 MB for installation. The quickstart guide recommends at least 50 GB for an all-in-one deployment to accommodate the indexer, manager, dashboard, and logs. Run this command and share the output: df -h Requirements A full inode table can prevent file creation even if disk space is available. df -i

RHEL 9 uses SELinux in enforcing mode by default, which may restrict dnf operations.

Check SELinux status:
sestatus
If it says Current mode: enforcing, temporarily set to permissive:
sudo setenforce 0
Retry the installation:
sudo bash wazuh-install.sh -a Clear dnf cache:
sudo dnf clean all If the issue persists, please share install log, if it's available to check further. /var/log/wazuh-install.log

Let me know the update on this.

[hasitha.u...@wazuh.com]

Hi  Dhruvin,

Let me know if you need further assistance on this.