CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-02-20 06:05:01 +01:00
Code Issues Packages Projects Releases Wiki Activity

Move kratos DB to /nsm

Browse Source
This commit is contained in:
Jason Ertel
2022-12-14 10:50:24 -05:00
parent 6e4912f759
commit 6985b0ab27
4 changed files with 37 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/common/tools/sbin/so-user
View File

@@ -45,7 +45,7 @@ email=$2
role=$3
kratosUrl=${KRATOS_URL:-http://127.0.0.1:4434/admin}
databasePath=${KRATOS_DB_PATH:-/opt/so/conf/kratos/db/db.sqlite}
databasePath=${KRATOS_DB_PATH:-/nsm/kratos/db/db.sqlite}
databaseTimeout=${KRATOS_DB_TIMEOUT:-5000}
bcryptRounds=${BCRYPT_ROUNDS:-12}
elasticUsersFile=${ELASTIC_USERS_FILE:-/opt/so/saltstack/local/salt/elasticsearch/files/users}

24
salt/common/tools/sbin/soup
View File

@@ -551,6 +551,7 @@ preupgrade_changes() {
[[ "$INSTALLEDVERSION" == 2.3.180 ]] && up_to_2.3.181
[[ "$INSTALLEDVERSION" == 2.3.181 ]] && up_to_2.3.182
[[ "$INSTALLEDVERSION" == 2.3.182 ]] && up_to_2.3.190
[[ "$INSTALLEDVERSION" == 2.3.190 ]] && up_to_2.3.200
true
}
@@ -574,6 +575,7 @@ postupgrade_changes() {
[[ "$POSTVERSION" == 2.3.180 ]] && post_to_2.3.181
[[ "$POSTVERSION" == 2.3.181 ]] && post_to_2.3.182
[[ "$POSTVERSION" == 2.3.182 ]] && post_to_2.3.190
[[ "$POSTVERSION" == 2.3.190 ]] && post_to_2.3.200
true
}
@@ -692,6 +694,11 @@ post_to_2.3.190() {
POSTVERSION=2.3.190
}
post_to_2.3.200() {
echo "Nothing to do for .200"
POSTVERSION=2.3.200
}
stop_salt_master() {
# kill all salt jobs across the grid because the hang indefinitely if they are queued and salt-master restarts
set +e
@@ -1005,6 +1012,23 @@ up_to_2.3.190() {
INSTALLEDVERSION=2.3.190
}
up_to_2.3.200() {
echo "Upgrading to 2.3.200"
if [ ! -d /nsm/kratos ]; then
mkdir /nsm/kratos
chown -R kratos:kratos /nsm/kratos
chmod 700 /nsm/kratos
fi
if [ ! -d /nsm/kratos/db ]; then
echo "Moving Kratos DB to /nsm partition..."
mv /opt/so/conf/kratos/db /nsm/kratos/
echo "Move completed successfully"
else
echo "WARNING: /nsm/kratos/db already exists. This is unexpected and could result in SOC users no longer being able to login."
fi
INSTALLEDVERSION=2.3.200
}
verify_upgradespace() {
CURRENTSPACE=$(df -BG / | grep -v Avail | awk '{print $4}' | sed 's/.$//')
if [ "$CURRENTSPACE" -lt "10" ]; then