mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Registry Update
This commit is contained in:
@@ -303,7 +303,7 @@ grafanadashfndir:
|
|||||||
|
|
||||||
grafanadashsndir:
|
grafanadashsndir:
|
||||||
file.directory:
|
file.directory:
|
||||||
- name: /opt/so/conf/grafana/grafana_dashboards/storage_nodes
|
- name: /opt/so/conf/grafana/grafana_dashboards/search_nodes
|
||||||
- user: 939
|
- user: 939
|
||||||
- group: 939
|
- group: 939
|
||||||
- makedirs: True
|
- makedirs: True
|
||||||
@@ -362,11 +362,11 @@ dashboard-{{ SN }}:
|
|||||||
{%- for SN, SNDATA in salt['pillar.get']('nodestab', {}).items() %}
|
{%- for SN, SNDATA in salt['pillar.get']('nodestab', {}).items() %}
|
||||||
dashboard-{{ SN }}:
|
dashboard-{{ SN }}:
|
||||||
file.managed:
|
file.managed:
|
||||||
- name: /opt/so/conf/grafana/grafana_dashboards/storage_nodes/{{ SN }}-Node.json
|
- name: /opt/so/conf/grafana/grafana_dashboards/search_nodes/{{ SN }}-Node.json
|
||||||
- user: 939
|
- user: 939
|
||||||
- group: 939
|
- group: 939
|
||||||
- template: jinja
|
- template: jinja
|
||||||
- source: salt://common/grafana/grafana_dashboards/storage_nodes/storage.json
|
- source: salt://common/grafana/grafana_dashboards/search_nodes/searchnode.json
|
||||||
- defaults:
|
- defaults:
|
||||||
SERVERNAME: {{ SN }}
|
SERVERNAME: {{ SN }}
|
||||||
MANINT: {{ SNDATA.manint }}
|
MANINT: {{ SNDATA.manint }}
|
||||||
|
|||||||
40
salt/common/tools/sbin/so-elastic-download
Normal file
40
salt/common/tools/sbin/so-elastic-download
Normal file
@@ -0,0 +1,40 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
MASTER={{ MASTER }}
|
||||||
|
VERSION="HH1.1.4"
|
||||||
|
TRUSTED_CONTAINERS=( \
|
||||||
|
"so-auth-api:$VERSION" \
|
||||||
|
"so-auth-ui:$VERSION" \
|
||||||
|
"so-bro:$VERSION" \
|
||||||
|
"so-core:$VERSION" \
|
||||||
|
"so-cortex:$VERSION" \
|
||||||
|
"so-curator:VERSION" \
|
||||||
|
"so-cyberchef:VERSION" \
|
||||||
|
"so-elastalert:$VERSION" \
|
||||||
|
"so-elasticsearch:$VERSION" \
|
||||||
|
"so-filebeat:$VERSION" \
|
||||||
|
"so-fleet:$VERSION" \
|
||||||
|
"so-grafana:$VERSION" \
|
||||||
|
"so-idstools:$VERSION" \
|
||||||
|
"so-influxdb:$VERSION" \
|
||||||
|
"so-kibana:$VERSION" \
|
||||||
|
"so-mysql:$VERSION" \
|
||||||
|
"so-navigator:$VERSION" \
|
||||||
|
"so-playbook:$VERSION" \
|
||||||
|
"so-redis:$VERSION" \
|
||||||
|
"so-sensoroni:$VERSION" \
|
||||||
|
"so-soctopus:$VERSION" \
|
||||||
|
"so-steno:$VERSION" \
|
||||||
|
"so-suricata:$VERSION" \
|
||||||
|
"so-telegraf:$VERSION" \
|
||||||
|
"so-thehive:$VERSION" \
|
||||||
|
"so-thehive-es:$VERSION" \
|
||||||
|
"so-wazuh:$VERSION" )
|
||||||
|
|
||||||
|
for i in "${TRUSTED_CONTAINERS[@]}"
|
||||||
|
do
|
||||||
|
# Pull down the trusted docker image
|
||||||
|
docker pull --disable-content-trust=false docker.io/soshybridhunter/$i
|
||||||
|
# Tag it with the new registry destination
|
||||||
|
docker tag soshybridhunter/$i $MASTER:5000/soshybridhunter/$i
|
||||||
|
docker push $MASTER:5000/soshybridhunter/$i
|
||||||
|
done
|
||||||
@@ -409,9 +409,10 @@ docker_install() {
|
|||||||
yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
|
yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
|
||||||
yum -y update
|
yum -y update
|
||||||
yum -y install docker-ce python36-docker
|
yum -y install docker-ce python36-docker
|
||||||
if [ $INSTALLTYPE != 'EVALMODE' ]; then
|
# if [ $INSTALLTYPE != 'EVALMODE' ]; then
|
||||||
|
# docker_registry
|
||||||
|
# fi
|
||||||
docker_registry
|
docker_registry
|
||||||
fi
|
|
||||||
echo "Restarting Docker" >> $SETUPLOG 2>&1
|
echo "Restarting Docker" >> $SETUPLOG 2>&1
|
||||||
systemctl restart docker
|
systemctl restart docker
|
||||||
systemctl enable docker
|
systemctl enable docker
|
||||||
@@ -420,9 +421,10 @@ docker_install() {
|
|||||||
if [ $INSTALLTYPE == 'MASTERONLY' ] || [ $INSTALLTYPE == 'EVALMODE' ]; then
|
if [ $INSTALLTYPE == 'MASTERONLY' ] || [ $INSTALLTYPE == 'EVALMODE' ]; then
|
||||||
apt-get update >> $SETUPLOG 2>&1
|
apt-get update >> $SETUPLOG 2>&1
|
||||||
apt-get -y install docker-ce python3-docker >> $SETUPLOG 2>&1
|
apt-get -y install docker-ce python3-docker >> $SETUPLOG 2>&1
|
||||||
if [ $INSTALLTYPE != 'EVALMODE' ]; then
|
# if [ $INSTALLTYPE != 'EVALMODE' ]; then
|
||||||
docker_registry >> $SETUPLOG 2>&1
|
# docker_registry >> $SETUPLOG 2>&1
|
||||||
fi
|
# fi
|
||||||
|
docker_registry
|
||||||
echo "Restarting Docker" >> $SETUPLOG 2>&1
|
echo "Restarting Docker" >> $SETUPLOG 2>&1
|
||||||
systemctl restart docker >> $SETUPLOG 2>&1
|
systemctl restart docker >> $SETUPLOG 2>&1
|
||||||
else
|
else
|
||||||
|
|||||||
Reference in New Issue
Block a user