mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Merge remote-tracking branch 'remotes/origin/dev' into feature/suri5
This commit is contained in:
@@ -28,19 +28,82 @@ salttmp:
|
|||||||
- group: 939
|
- group: 939
|
||||||
- makedirs: True
|
- makedirs: True
|
||||||
|
|
||||||
# Install packages needed for the sensor
|
# Install epel
|
||||||
sensorpkgs:
|
{% if grains['os'] == 'CentOS' %}
|
||||||
|
epel:
|
||||||
pkg.installed:
|
pkg.installed:
|
||||||
- skip_suggestions: False
|
- skip_suggestions: True
|
||||||
|
- pkgs:
|
||||||
|
- epel-release
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
# Install common packages
|
||||||
|
{% if grains['os'] != 'CentOS' %}
|
||||||
|
commonpkgs:
|
||||||
|
pkg.installed:
|
||||||
|
- skip_suggestions: True
|
||||||
|
- pkgs:
|
||||||
|
- apache2-utils
|
||||||
|
- wget
|
||||||
|
- ntpdate
|
||||||
|
- jq
|
||||||
|
- python3-docker
|
||||||
|
- docker-ce
|
||||||
|
- curl
|
||||||
|
- ca-certificates
|
||||||
|
- software-properties-common
|
||||||
|
- apt-transport-https
|
||||||
|
- openssl
|
||||||
|
- netcat
|
||||||
|
- python3-mysqldb
|
||||||
|
- sqlite3
|
||||||
|
- argon2
|
||||||
|
- libssl-dev
|
||||||
|
- python3-dateutil
|
||||||
|
- python3-m2crypto
|
||||||
|
- python3-mysqldb
|
||||||
|
heldpackages:
|
||||||
|
pkg.installed:
|
||||||
|
- pkgs:
|
||||||
|
- containerd.io: 1.2.13-2
|
||||||
|
- docker-ce: 5:19.03.9~3-0~ubuntu-bionic
|
||||||
|
- hold: True
|
||||||
|
- update_holds: True
|
||||||
|
|
||||||
|
{% else %}
|
||||||
|
commonpkgs:
|
||||||
|
pkg.installed:
|
||||||
|
- skip_suggestions: True
|
||||||
- pkgs:
|
- pkgs:
|
||||||
- wget
|
- wget
|
||||||
|
- ntpdate
|
||||||
|
- bind-utils
|
||||||
- jq
|
- jq
|
||||||
{% if grains['os'] != 'CentOS' %}
|
|
||||||
- apache2-utils
|
|
||||||
{% else %}
|
|
||||||
- net-tools
|
|
||||||
- tcpdump
|
- tcpdump
|
||||||
- httpd-tools
|
- httpd-tools
|
||||||
|
- net-tools
|
||||||
|
- curl
|
||||||
|
- sqlite
|
||||||
|
- argon2
|
||||||
|
- mariadb-devel
|
||||||
|
- nmap-ncat
|
||||||
|
- python3
|
||||||
|
- python36-docker
|
||||||
|
- python36-dateutil
|
||||||
|
- python36-m2crypto
|
||||||
|
- python36-mysql
|
||||||
|
- yum-utils
|
||||||
|
- device-mapper-persistent-data
|
||||||
|
- lvm2
|
||||||
|
- openssl
|
||||||
|
|
||||||
|
heldpackages:
|
||||||
|
pkg.installed:
|
||||||
|
- pkgs:
|
||||||
|
- containerd.io: 1.2.13-3.2.el7
|
||||||
|
- docker-ce: 3:19.03.9-3.el7
|
||||||
|
- hold: True
|
||||||
|
- update_holds: True
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
# Always keep these packages up to date
|
# Always keep these packages up to date
|
||||||
|
|||||||
@@ -19,7 +19,7 @@ source ./so-whiptail
|
|||||||
source ./so-variables
|
source ./so-variables
|
||||||
source ./so-common-functions
|
source ./so-common-functions
|
||||||
|
|
||||||
SOVERSION=1.3.0
|
SOVERSION=1.4.0
|
||||||
|
|
||||||
accept_salt_key_remote() {
|
accept_salt_key_remote() {
|
||||||
systemctl restart salt-minion
|
systemctl restart salt-minion
|
||||||
@@ -514,7 +514,7 @@ detect_os() {
|
|||||||
# Install bind-utils so the host command exists
|
# Install bind-utils so the host command exists
|
||||||
if ! command -v host > /dev/null 2>&1; then
|
if ! command -v host > /dev/null 2>&1; then
|
||||||
echo "Installing required packages to run installer"
|
echo "Installing required packages to run installer"
|
||||||
yum -y install bind-utils >> "$setup_log" 2>&1
|
yum -y install bind-utils yum-plugin-versionlock >> "$setup_log" 2>&1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
|
||||||
@@ -583,7 +583,9 @@ docker_install() {
|
|||||||
{
|
{
|
||||||
yum clean expire-cache;
|
yum clean expire-cache;
|
||||||
yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo;
|
yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo;
|
||||||
yum -y install docker-ce;
|
yum -y install docker-ce-19.03.9-3.el7 containerd.io-1.2.6-3.el7;
|
||||||
|
yum versionlock docker-ce-19.03.9-3.el7;
|
||||||
|
yum versionlock containerd.io-1.2.6-3.el7
|
||||||
} >> "$setup_log" 2>&1
|
} >> "$setup_log" 2>&1
|
||||||
|
|
||||||
else
|
else
|
||||||
@@ -687,7 +689,7 @@ docker_seed_registry() {
|
|||||||
# Tag it with the new registry destination
|
# Tag it with the new registry destination
|
||||||
docker tag soshybridhunter/"$i" "$HOSTNAME":5000/soshybridhunter/"$i"
|
docker tag soshybridhunter/"$i" "$HOSTNAME":5000/soshybridhunter/"$i"
|
||||||
docker push "$HOSTNAME":5000/soshybridhunter/"$i"
|
docker push "$HOSTNAME":5000/soshybridhunter/"$i"
|
||||||
docker rmi soshybridhunter/"$i"
|
#docker rmi soshybridhunter/"$i"
|
||||||
} >> "$setup_log" 2>&1
|
} >> "$setup_log" 2>&1
|
||||||
done
|
done
|
||||||
else
|
else
|
||||||
@@ -1107,7 +1109,7 @@ saltify() {
|
|||||||
yum -y update exclude=salt*;
|
yum -y update exclude=salt*;
|
||||||
systemctl enable salt-minion;
|
systemctl enable salt-minion;
|
||||||
} >> "$setup_log" 2>&1
|
} >> "$setup_log" 2>&1
|
||||||
echo "exclude=salt*" >> /etc/yum.conf
|
yum versionlock salt*
|
||||||
else
|
else
|
||||||
DEBIAN_FRONTEND=noninteractive apt-get -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" upgrade >> "$setup_log" 2>&1
|
DEBIAN_FRONTEND=noninteractive apt-get -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" upgrade >> "$setup_log" 2>&1
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user