mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-01-14 20:21:24 +01:00
add checkmine back
This commit is contained in:
28
salt/salt/engines/checkmine.py
Normal file
28
salt/salt/engines/checkmine.py
Normal file
@@ -0,0 +1,28 @@
|
|||||||
|
# -*- coding: utf-8 -*-
|
||||||
|
|
||||||
|
import logging
|
||||||
|
from time import sleep
|
||||||
|
from os import remove
|
||||||
|
|
||||||
|
log = logging.getLogger(__name__)
|
||||||
|
|
||||||
|
def start(interval=30):
|
||||||
|
log.info("checkmine engine started")
|
||||||
|
minionid = __grains__['id']
|
||||||
|
while True:
|
||||||
|
try:
|
||||||
|
ca_crt = __salt__['saltutil.runner']('mine.get', tgt=minionid, fun='x509.get_pem_entries')[minionid]['/etc/pki/ca.crt']
|
||||||
|
log.info('Successfully queried Salt mine for the CA.')
|
||||||
|
except:
|
||||||
|
log.error('Could not pull CA from the Salt mine.')
|
||||||
|
log.info('Removing /var/cache/salt/master/minions/%s/mine.p to force Salt mine to be repopulated.' % minionid)
|
||||||
|
try:
|
||||||
|
remove('/var/cache/salt/master/minions/%s/mine.p' % minionid)
|
||||||
|
log.info('Removed /var/cache/salt/master/minions/%s/mine.p' % minionid)
|
||||||
|
except FileNotFoundError:
|
||||||
|
log.error('/var/cache/salt/master/minions/%s/mine.p does not exist' % minionid)
|
||||||
|
|
||||||
|
__salt__['mine.send'](name='x509.get_pem_entries', glob_path='/etc/pki/ca.crt')
|
||||||
|
log.warning('Salt mine repopulated with /etc/pki/ca.crt')
|
||||||
|
|
||||||
|
sleep(interval)
|
||||||
6
salt/salt/files/engines.conf
Normal file
6
salt/salt/files/engines.conf
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
engines_dirs:
|
||||||
|
- /etc/salt/engines
|
||||||
|
|
||||||
|
engines:
|
||||||
|
- checkmine:
|
||||||
|
interval: 30
|
||||||
@@ -18,14 +18,17 @@ salt_master_service:
|
|||||||
- enable: True
|
- enable: True
|
||||||
|
|
||||||
checkmine_engine:
|
checkmine_engine:
|
||||||
file.absent:
|
file.managed:
|
||||||
- name: /etc/salt/engines/checkmine.py
|
- name: /etc/salt/engines/checkmine.py
|
||||||
|
- source: salt://salt/engines/checkmine.py
|
||||||
|
- makedirs: True
|
||||||
- watch_in:
|
- watch_in:
|
||||||
- service: salt_minion_service
|
- service: salt_minion_service
|
||||||
|
|
||||||
engines_config:
|
engines_config:
|
||||||
file.absent:
|
file.managed:
|
||||||
- name: /etc/salt/minion.d/engines.conf
|
- name: /etc/salt/minion.d/engines.conf
|
||||||
|
- source: salt://salt/files/engines.conf
|
||||||
- watch_in:
|
- watch_in:
|
||||||
- service: salt_minion_service
|
- service: salt_minion_service
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user