CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

change container to abesent of pcap is disabled

Browse Source
This commit is contained in:
m0duspwnens
2021-07-26 10:08:59 -04:00
parent 668199f1a8
commit 2e277bf487
2 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
salt/pcap/init.sls
View File

@@ -111,6 +111,7 @@ stenolog:
so-steno:
docker_container.{{ STENOOPTIONS.status }}:
{% if STENOOPTIONS.status == 'running' %}
- image: {{ MANAGER }}:5000/{{ IMAGEREPO }}/so-steno:{{ VERSION }}
- start: {{ STENOOPTIONS.start }}
- network_mode: host
@@ -126,6 +127,9 @@ so-steno:
- /opt/so/log/stenographer:/var/log/stenographer:rw
- watch:
- file: /opt/so/conf/steno/config
{% else %} {# if stenographer isn't enabled, then stop and remove the container #}
- force: True
{% endif %}
append_so-steno_so-status.conf:
file.append:
@@ -133,7 +137,6 @@ append_so-steno_so-status.conf:
- text: so-steno
- unless: grep -q so-steno /opt/so/conf/so-status/so-status.conf
{% if not STENOOPTIONS.start %}
so-steno_so-status.disabled:
file.comment:

2
salt/pcap/map.jinja
View File

@@ -9,7 +9,7 @@
{% endif %}
{% if ENABLED is sameas false %}
{% do STENOOPTIONS.update({'status': 'stopped'}) %}
{% do STENOOPTIONS.update({'status': 'absent'}) %}
{% else %}
{% do STENOOPTIONS.update({'status': 'running'}) %}
{% endif %}