MANAGERHYPE setup is now complete!

This commit is contained in:
Josh Patterson
2025-03-12 21:05:04 -04:00
parent ae94722eda
commit 44a5b3b1e5
23 changed files with 493 additions and 297 deletions

View File

@@ -512,7 +512,7 @@ configure_minion() {
'workstation')
echo "master: '$MSRV'" >> "$minion_config"
;;
'manager' | 'eval' | 'managersearch' | 'standalone' | 'import')
'manager'* | 'eval' | 'standalone' | 'import')
cp -f ../salt/ca/files/signing_policies.conf /etc/salt/minion.d/signing_policies.conf
printf '%s\n'\
"master: '$HOSTNAME'"\
@@ -609,6 +609,10 @@ check_requirements() {
req_mem=8
req_cores=2
req_nics=1
elif [[ $is_managerhype || $is_hypervisor ]]; then
req_mem=64
req_cores=32
req_nics=1
fi
if [[ $setup_type == 'network' ]] ; then
@@ -1574,6 +1578,10 @@ process_installtype() {
is_receiver=true
elif [ "$install_type" = 'DESKTOP' ]; then
is_desktop=true
elif [ "$install_type" = 'HYPERVISOR' ]; then
is_hypervisor=true
elif [ "$install_type" = 'MANAGERHYPE' ]; then
is_managerhype=true
fi
}

View File

@@ -635,6 +635,29 @@ if ! [[ -f $install_opt_file ]]; then
set_minion_info
whiptail_end_settings
elif [[ $is_managerhype ]]; then
info "Setting up as node type managerhype"
check_elastic_license
waitforstate=true
[[ $is_iso ]] && whiptail_airgap
check_requirements
networking_needful
configure_hyper_bridge
[[ ! $is_airgap ]] && collect_net_method
collect_dockernet
[[ ! $is_airgap ]] && detect_cloud
set_minion_info
set_default_log_size >> $setup_log 2>&1
info "Verifying all network devices are managed by Network Manager that should be"
check_network_manager_conf
set_network_dev_status_list
calculate_useable_cores
collect_webuser_inputs
get_redirect
collect_so_allow
[[ ! $is_airgap ]] && whiptail_accept_telemetry
whiptail_end_settings
fi
if [[ $waitforstate ]]; then

View File

@@ -654,9 +654,10 @@ whiptail_install_type_dist_new() {
Note: MANAGER is the recommended option for most users. MANAGERSEARCH should only be used in very specific situations.
EOM
install_type=$(whiptail --title "$whiptail_title" --menu "$mngr_msg" 20 75 2 \
install_type=$(whiptail --title "$whiptail_title" --menu "$mngr_msg" 20 75 3 \
"MANAGER" "New grid, requires separate search node(s) " \
"MANAGERSEARCH" "New grid, separate search node(s) are optional " \
"MANAGERHYPE" "Manager with hypervisor - Security Onion Pro required " \
3>&1 1>&2 2>&3
)
@@ -681,7 +682,7 @@ whiptail_install_type_dist_existing() {
"HEAVYNODE" "Sensor + Search Node " \
"IDH" "Intrusion Detection Honeypot Node " \
"RECEIVER" "Receiver Node " \
"HYPERVISOR" "Hypervisor Node " \
"HYPERVISOR" "Hypervisor Node - Security Onion Pro required " \
3>&1 1>&2 2>&3
# "HOTNODE" "Add Hot Node (Uses Elastic Clustering)" \ # TODO
# "WARMNODE" "Add Warm Node to existing Hot or Search node" \ # TODO
@@ -714,8 +715,6 @@ whiptail_install_type_dist_existing() {
is_receiver=true
elif [ "$install_type" = 'DESKTOP' ]; then
is_desktop=true
elif [ "$install_type" = 'HYPERVISOR' ]; then
is_hypervisor=true
fi
local exitstatus=$?