CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

add option to enable or disable to steno docker container - https://github.com/Security-Onion-Solutions/securityonion/issues/1601

Browse Source
This commit is contained in:
m0duspwnens
2020-10-22 10:52:34 -04:00
parent 905fcd06a6
commit 172ca9aa8d
2 changed files with 16 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/pcap/init.sls
View File

@@ -23,7 +23,7 @@
{% set INTERFACE = salt['pillar.get']('sensor:interface', 'bond0') %}
{% set BPF_STENO = salt['pillar.get']('steno:bpf', None) %}
{% set BPF_COMPILED = "" %}
{% from "pcap/map.jinja" import START with context %}
{% from "pcap/map.jinja" import STENOOPTIONS with context %}
# PCAP Section
@@ -135,9 +135,9 @@ sensoronilog:
- makedirs: True
so-steno:
docker_container.running:
docker_container.{{ STENOOPTIONS.status }}:
- image: {{ MANAGER }}:5000/{{ IMAGEREPO }}/so-steno:{{ VERSION }}
- start: {{ START }}
- start: {{ STENOOPTIONS.start }}
- network_mode: host
- privileged: True
- port_bindings:

17
salt/pcap/map.jinja
View File

@@ -1,6 +1,15 @@
# don't start the docker container if it is an import node
{% if grains.id.split('_')|last == 'import' %}
{% set START = False %}
{% set PCAPOPTIONS = {} %}
{% set ENABLED = salt['pillar.get']('steno:enabled', 'True') %}
# don't start the docker container if it is an import node or disabled via pillar
{% if grains.id.split('_')|last == 'import' || ENABLED is sameas false %}
{% set PCAPOPTIONS['start'] = False %}
{% else %}
{% set START = True %}
{% set PCAPOPTIONS['start'] = True %}
{% endif %}
{% if ENABLED is sameas false %}
{% set PCAPOPTIONS['status'] = 'stopped' %}
{% else %}
{% set PCAPOPTIONS['status'] = 'running' %}
{% endif %}