CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 01:32:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

[refactor] Rearrange docker_registry seed

Browse Source
This commit is contained in:
William Wernert
2020-04-18 18:18:41 -04:00
parent a4267fd28b
commit 2ab1fa75ee
1 changed files with 51 additions and 67 deletions
Download Patch File Download Diff File Expand all files Collapse all files

118
setup/so-functions
View File

@@ -581,75 +581,59 @@ docker_registry() {
} }
docker_seed_registry() { docker_seed_registry() {
VERSION="HH$SOVERSION" VERSION="HH$SOVERSION"
if [ $INSTALLTYPE != 'HELIXSENSOR' ]; then TRUSTED_CONTAINERS=(\
TRUSTED_CONTAINERS=( \ "so-core:$VERSION" \
"so-acng:$VERSION" \ "so-filebeat:$VERSION" \
"so-core:$VERSION" \ "so-logstash:$VERSION" \
"so-thehive-cortex:$VERSION" \ "so-idstools:$VERSION" \
"so-curator:$VERSION" \ "so-redis:$VERSION" \
"so-domainstats:$VERSION" \ "so-steno:$VERSION" \
"so-elastalert:$VERSION" \ "so-suricata:$VERSION" \
"so-elasticsearch:$VERSION" \ "so-telegraf:$VERSION" \
"so-filebeat:$VERSION" \ "so-zeek:$VERSION"
"so-fleet:$VERSION" \ )
"so-fleet-launcher:$VERSION" \ if [ "$INSTALLTYPE" != 'HELIXSENSOR' ]; then
"so-freqserver:$VERSION" \ TRUSTED_CONTAINERS=("${TRUSTED_CONTAINERS[@]}" \
"so-grafana:$VERSION" \ "so-acng:$VERSION" \
"so-idstools:$VERSION" \ "so-thehive-cortex:$VERSION" \
"so-influxdb:$VERSION" \ "so-curator:$VERSION" \
"so-kibana:$VERSION" \ "so-domainstats:$VERSION" \
"so-logstash:$VERSION" \ "so-elastalert:$VERSION" \
"so-mysql:$VERSION" \ "so-elasticsearch:$VERSION" \
"so-navigator:$VERSION" \ "so-fleet:$VERSION" \
"so-playbook:$VERSION" \ "so-fleet-launcher:$VERSION" \
"so-redis:$VERSION" \ "so-freqserver:$VERSION" \
"so-soc:$VERSION" \ "so-grafana:$VERSION" \
"so-kratos:$VERSION" \ "so-influxdb:$VERSION" \
"so-soctopus:$VERSION" \ "so-kibana:$VERSION" \
"so-steno:$VERSION" \ "so-mysql:$VERSION" \
#"so-strelka:$VERSION" \ "so-navigator:$VERSION" \
"so-suricata:$VERSION" \ "so-playbook:$VERSION" \
"so-telegraf:$VERSION" \ "so-soc:$VERSION" \
"so-thehive:$VERSION" \ "so-kratos:$VERSION" \
"so-thehive-es:$VERSION" \ "so-soctopus:$VERSION" \
"so-wazuh:$VERSION" \ "so-thehive:$VERSION" \
"so-zeek:$VERSION" ) "so-thehive-es:$VERSION" \
else "so-wazuh:$VERSION" \
TRUSTED_CONTAINERS=( \ )
"so-core:$VERSION" \ fi
"so-filebeat:$VERSION" \
"so-idstools:$VERSION" \
"so-logstash:$VERSION" \
"so-redis:$VERSION" \
#"so-sensoroni:$VERSION" \
"so-steno:$VERSION" \
"so-suricata:$VERSION" \
"so-telegraf:$VERSION" \
"so-zeek:$VERSION" )
fi
if [ ! -f /nsm/docker-registry/docker/so-dockers-$VERSION.tar ]; then if [ ! -f /nsm/docker-registry/docker/so-dockers-"$VERSION".tar ]; then
# Download the container from the interwebs for i in "${TRUSTED_CONTAINERS[@]}"; do
for i in "${TRUSTED_CONTAINERS[@]}" # Pull down the trusted docker image
do echo "Downloading $i"
# Pull down the trusted docker image docker pull --disable-content-trust=false docker.io/soshybridhunter/"$i"
echo "Downloading $i" # Tag it with the new registry destination
docker pull --disable-content-trust=false docker.io/soshybridhunter/$i docker tag soshybridhunter/"$i" "$HOSTNAME":5000/soshybridhunter/"$i"
# Tag it with the new registry destination docker push "$HOSTNAME":5000/soshybridhunter/"$i"
docker tag soshybridhunter/$i $HOSTNAME:5000/soshybridhunter/$i done
docker push $HOSTNAME:5000/soshybridhunter/$i
done
for i in "${TRUSTED_CONTAINERS[@]}" # Prune any images that aren't used by containers
do docker image prune -af
echo "Removing $i locally" else
docker rmi soshybridhunter/$i rm /nsm/docker-registry/docker/so-dockers-$VERSION.tar
done fi
else
# We already have the goods son
rm /nsm/docker-registry/docker/so-dockers-$VERSION.tar
fi
} }