CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Netowrk Setup - Added salt key acceptance foo

Browse Source
This commit is contained in:
Mike Reeves
2018-02-21 15:45:07 -05:00
parent 930cd81b4d
commit fb49b22752
1 changed files with 14 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
so-setup-network.sh
View File

@@ -139,8 +139,14 @@ if (whiptail --title "Security Onion Setup" --yesno "Are you sure you want to in
# Create bond interface # Create bond interface
if [ $INSTALLTYPE != 'MASTERONLY' ] || [ $INSTALLTYPE != 'BACKENDNODE' ]; then if [ $INSTALLTYPE != 'MASTERONLY' ] || [ $INSTALLTYPE != 'BACKENDNODE' ]; then
echo "Setting up Bond" echo "Setting up Bond"
alias bond0 bonding if [ $OS == 'centos' ]; then
mode=0 alias bond0 bonding
mode=0
# Create Bond files
else
echo bonding >> /etc/modules
modprobe bonding
fi fi
# Install Updates and the Salt Package # Install Updates and the Salt Package
@@ -206,7 +212,8 @@ if (whiptail --title "Security Onion Setup" --yesno "Are you sure you want to in
# Create the grains file for the sensor # Create the grains file for the sensor
touch /etc/salt/grains touch /etc/salt/grains
echo "role: so-sensor" > /etc/salt/grains echo "role: so-sensor" > /etc/salt/grains
# Master server
echo "master: $MASTER" > /etc/salt/minion
# Start the salt agent # Start the salt agent
service salt-minion start service salt-minion start
@@ -223,7 +230,7 @@ if (whiptail --title "Security Onion Setup" --yesno "Are you sure you want to in
scp /tmp/$HOSTNAME.sls socore@$MASTERSRV:/opt/so/saltstack/pillar/sensors/ scp /tmp/$HOSTNAME.sls socore@$MASTERSRV:/opt/so/saltstack/pillar/sensors/
# Accept the key on the master # Accept the key on the master
ssh socore@$MASTERSRV 'sudo salt-key -qa $HOSTNAME' ssh socore@$MASTERSRV 'sudo salt-key -ya $HOSTNAME'
# Grab the ssl key for lumberjack from the master # Grab the ssl key for lumberjack from the master
scp socore@$MASTERSRV:/some/path /some/path scp socore@$MASTERSRV:/some/path /some/path
@@ -264,6 +271,9 @@ if (whiptail --title "Security Onion Setup" --yesno "Are you sure you want to in
service salt-master restart service salt-master restart
service salt-minion restart service salt-minion restart
# Sudoers
echo "socore ALL=(ALL) NOPASSWD:/usr/bin/salt-key" | sudo tee -a /etc/sudoers
# Create the pillar # Create the pillar
touch /opt/so/saltstack/pillar/masters/$HOSTNAME.sls touch /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
echo "master:" > /opt/so/saltstack/pillar/masters/$HOSTNAME.sls echo "master:" > /opt/so/saltstack/pillar/masters/$HOSTNAME.sls