Cscli dashboard deprecation

This blog article will outline the steps being taken to deprecate the cscli dashboard command out of the cscli binary. The cscli dashboard command was used to setup a containerized Metabase dashboard.

Why deprecate cscli dashboard ?

There were multiple factors which led to the decision to deprecate the cscli dashboard command:

The cscli dashboard command was initially offered a way to visualize the data collected by your local CrowdSec instance. However, we found the tools to be too limited and not user-friendly enough. So we started working on the CrowdSec Console which is a more powerful and user-friendly tool to visualize your data.

Some users using cscli dashboard command did not understand what was happening "under the hood" and were not proactively maintaining or securing their dashboards. This led to recent CVE's not being patched in a timely manner since the version was tied to the cscli binary and users were publicly exposing their dashboards.

What will happen to the cscli dashboard command ?

The cscli dashboard command will be deprecated in version 1.7.0 of the CrowdSec package. However, we don't want to leave users without a solution to visualize their data. We are working on a new way to deploy the Metabase dashboard via a script that will automate the deployment of the dashboard.

A development version of the script can be found linked here

What should I do now?

Currently we recommend that you firstly check which version of Metabase that is currently deployed on your system to ensure that you are not vulnerable to any CVE's. You can do this by running the following command:

docker ps -a

This will show you the running containers on your system. Look for the Metabase container and check the version of the container. If you are running a version of Metabase that is vulnerable to a CVE, we recommend that you update to latest version of CrowdSec then re run the cscli dashboard command to update the Metabase dashboard.