DefensiveDepth
d7ecad4333
Initial cut to remove Playbook and deps
2024-03-25 19:42:31 -04:00
Mike Reeves
9a413a2e31
Fix location of repo
2024-03-06 12:42:22 -05:00
Mike Reeves
9ca0f586ae
Manage the repos
2024-02-21 11:45:02 -05:00
Mike Reeves
2db5f4dd41
Merge pull request #12308 from petiepooo/feat-es-ownfs
...
FEATURE: Check for mountpoint during Elastic size limit calculations
2024-02-12 16:03:36 -05:00
Mike Reeves
f91cb5b81f
Merge pull request #12290 from petiepooo/fix-remove-intca-symlink
...
fix: also remove intca symlink
2024-02-12 12:33:13 -05:00
Pete
cf83d1cb86
feat: use mountpoint for Elastic log limit
...
Instead of just existence, this checks if the directories are separate mountpoints when determining disk size and log_size_limit calculations.
It also sets the percentage to 80 if /nsm/elasticsearch is a separate mountpoint. This allows for better disk utilization on server configurations where /nsm is based on large slow HDDs for increased PCAP retention but /nsm/elasticsearch is based on SSDs for faster Elasticsearch performance.
2024-02-02 12:25:16 -05:00
Pete
7a29b3a529
call salt before stopping salt services
...
salt-call does not work when the salt-master is not running. If these calls are to succeed, they should occur before the salt services are stopped.
2024-02-02 08:45:01 -05:00
Mike Reeves
341ff5b564
Update so-functions
2024-01-31 16:18:51 -05:00
reyesj2
a73d78300a
Add initial stig state
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-01-15 21:17:17 -05:00
Josh Brower
9159eab9fd
Merge pull request #12151 from Security-Onion-Solutions/fix/so-playbook-reset
...
Fix reinstall & reset stability
2024-01-10 14:23:53 -05:00
Mike Reeves
fc2f02c0a0
Update so-functions
2024-01-10 14:19:47 -05:00
Mike Reeves
1e3a00a833
Update so-functions
2024-01-10 14:16:55 -05:00
Josh Brower
6ff764e6a1
refactor for reinstall stability
2024-01-10 10:22:50 -05:00
m0duspwnens
ccfdafea0a
enable startup_states: highstate on managers during setup and not with salt
2024-01-04 16:24:48 -05:00
m0duspwnens
7b9ac7ae6d
remove checkin_at_boot function
2023-12-19 14:05:19 -05:00
m0duspwnens
b3be999aea
dont enable startup_states during setup. use salt to add it
2023-12-19 09:00:32 -05:00
Wes
d203aec44a
Remove Curator
2023-12-08 19:37:06 +00:00
Mike Reeves
cc93976db9
Add memory restrictions
2023-11-01 15:17:23 -04:00
Mike Reeves
b3b67acf07
Add memory restrictions
2023-11-01 15:11:54 -04:00
Mike Reeves
d07cfdd3fe
Update so-functions
2023-10-31 13:10:55 -04:00
m0duspwnens
6891a95254
remove wait_for_salt_minion from so-functions
2023-10-26 13:02:39 -04:00
m0duspwnens
a3e6b1ee1d
change generate_ssl wait_for_salt_minion
2023-10-25 09:26:36 -04:00
m0duspwnens
752390be2e
merge with dev, fix confict
2023-10-24 09:40:09 -04:00
m0duspwnens
ef2b89f5bf
fix attempts logic
2023-10-20 13:40:40 -04:00
m0duspwnens
dfcbbfd157
update call to wait_for_salt_minion with new options in so-functions
2023-10-19 15:58:50 -04:00
m0duspwnens
c5610edd83
handle salt for r9 and c9
2023-10-19 11:12:20 -04:00
m0duspwnens
9eb682bc40
generate_ca after salt-master and salt-minion states run
2023-10-18 18:37:35 -04:00
m0duspwnens
53fcafea50
redo how we check if salt-master is ready and accessible
2023-10-16 16:31:43 -04:00
m0duspwnens
05da5c039c
Merge remote-tracking branch 'origin/2.4/dev' into minechanges
2023-10-10 11:02:19 -04:00
Mike Reeves
f3ba28062b
Remove MySQL
2023-10-03 10:05:56 -04:00
m0duspwnens
2434ce14d3
remove removing mariadb-devel
2023-10-03 10:01:07 -04:00
m0duspwnens
66be04e78a
remove mariadb
2023-10-03 09:53:40 -04:00
m0duspwnens
0f08d5d640
install openssl version 1:3.0.7-16.0.1.el9_2
2023-10-02 11:43:03 -04:00
m0duspwnens
f85dd910a3
hold openssl from update during setup
2023-10-02 11:13:08 -04:00
m0duspwnens
827ed7b273
run salt.mine_function state locally and provide pillar info to it
2023-09-29 17:08:42 -04:00
m0duspwnens
8690304dff
change how mine_functions.conf is managed during setup
2023-09-29 16:17:19 -04:00
Mike Reeves
ff35946050
Fix manager cron logic
2023-09-28 13:06:21 -04:00
m0duspwnens
c65c9777bd
improvents for checking system requirements
2023-09-14 17:42:25 -04:00
Jason Ertel
598515e5b4
give priority to presets
2023-09-08 09:21:13 -04:00
Josh Patterson
651393988a
Merge pull request #11255 from Security-Onion-Solutions/issue/10975
...
Issue/10975
2023-09-05 11:57:58 -04:00
Jason Ertel
6efdf1b9d0
add additional test modes
2023-09-01 17:24:12 -04:00
m0duspwnens
585fba4bc6
add functions salt_install_module_deps and salt_patch_x509_v2
2023-09-01 12:40:01 -04:00
m0duspwnens
14a6280531
iso desktop join grid - set install_type and minion_type
2023-08-30 16:49:17 -04:00
m0duspwnens
97587064f8
remove packages from nongrid desktop install
2023-08-30 09:48:52 -04:00
m0duspwnens
ae01da780e
desktop network install nongrid
2023-08-30 09:10:59 -04:00
m0duspwnens
a4dc482372
add is_desktop_grid var
2023-08-29 13:10:06 -04:00
m0duspwnens
67ea7d31e1
dont exec so-setup desktop
2023-08-29 09:32:10 -04:00
m0duspwnens
b22776dc5a
set timezone to etc/utc during setup
2023-08-15 16:22:02 -04:00
m0duspwnens
fdb2ca4167
set SO desktop wallpaper for iso install
2023-08-11 09:15:41 -04:00
m0duspwnens
a443c654e5
fix desktop pillar in setup
2023-08-09 08:48:00 -04:00