Jason Ertel
26bb6cc011
Require either true | false in parameter to so-elastic-auth and ensure all minions are fully updated with the new auth setting
2021-06-22 15:29:48 -04:00
Jason Ertel
a323aeb8fa
Allow so-elastic-auth to run before common even though the script has dependency on a common-provided script (benign error). This is needed first since common will need to know if auth is enabled
2021-06-16 14:23:58 -04:00
Jason Ertel
989f9dce42
Ensure sqlite.db exists before querying it; Execute so-elastic-auth after common state has been applied and redirect output to setup log
2021-06-15 16:57:13 -04:00
Jason Ertel
9b61723194
Merge branch 'dev' into kilo
2021-06-08 11:04:09 -04:00
Jason Ertel
14aa9805b4
Stop failing an install because salt is already running when a highstate is applied at 95%
2021-06-06 18:20:57 -04:00
Jason Ertel
fa6af06204
Avoid running highstate during setup when flipping auth flag
2021-06-02 17:13:59 -04:00
William Wernert
b3f2c60065
Whiptail title fixes
...
- Use a variable for the title
- Fix cases where the whiptail title wasn't changed previously
2021-06-02 12:38:32 -04:00
m0duspwnens
d25a439bd4
more changes
2021-06-01 10:53:58 -04:00
m0duspwnens
3859f6464a
dont be quiet on first grep
2021-05-14 08:56:42 -04:00
m0duspwnens
74f2a61b25
install influxdb and grafana during setup prior to final highstate
2021-05-13 09:06:47 -04:00
m0duspwnens
b01bfda862
Merge remote-tracking branch 'remotes/origin/dev' into issue/3264
2021-05-03 11:49:09 -04:00
William Wernert
19dd9b97d2
Don't ask for node description on eval and import installs
2021-05-03 09:40:53 -04:00
m0duspwnens
93ee96b1cd
Ignore "Status .* was not found" due to output from salt http.query or http.wait_for_successful_query states used with retry
2021-04-29 10:19:42 -04:00
William Wernert
3f007f1026
Disable fastestmirror during setup + soup
2021-04-20 15:18:06 -04:00
William Wernert
113e558a05
Set manager early for proxy config
2021-04-20 14:32:17 -04:00
William Wernert
bbf16d0f11
Show airgap prompt within if statement + persist variable for node installs
2021-04-20 11:34:17 -04:00
William Wernert
b449955711
Proxy whiptail fixes
...
* Don't try to set up proxy/manager proxy during network only flow
* Fix logic to never show new menu on airgap, set MANAGERUPDATES to 1 on airgap minions
2021-04-19 16:26:53 -04:00
William Wernert
7948906f51
Fix minion airgap logic
2021-04-19 14:04:01 -04:00
William Wernert
ba9a45bd0f
Split network init + ssh copy notices
2021-04-19 14:02:00 -04:00
William Wernert
002fa99055
Fix whiptail order
2021-04-19 13:47:50 -04:00
William Wernert
e8553162a5
[refactor] Change how whiptail asks for proxy settings
2021-04-19 10:51:39 -04:00
William Wernert
cc344d921a
Skip whiptail during testing, echo error message to setup log
2021-04-12 16:13:32 -04:00
William Wernert
4db20a00ff
Add quotes around description, since it can contain spaces
2021-04-09 10:16:19 -04:00
William Wernert
fc9df2bbae
Update airgap question to ask during minion installs too
2021-04-09 10:00:50 -04:00
William Wernert
9b5276f1ab
Remove bad || statement
2021-04-09 09:59:54 -04:00
William Wernert
b2fcd438c2
Initial support for checking state of manager during setup
2021-04-09 09:39:33 -04:00
William Wernert
6d6829ba34
Remove duplicate variable assignment
2021-04-06 13:21:07 -04:00
William Wernert
b70d9c0892
Add end summary and warning about SSH host key change
2021-04-06 13:20:56 -04:00
William Wernert
b6dba26e2c
Merge pull request #3767 from Security-Onion-Solutions/foxtrot
...
Move function call using nmcli to prevent error during setup
2021-04-06 09:11:23 -04:00
Mike Reeves
d62ab60d48
Merge pull request #3768 from Security-Onion-Solutions/newrepo
...
Newrepo
2021-04-05 15:03:44 -04:00
Mike Reeves
fc88634159
Set the Repo for airgap during install
2021-04-05 15:01:21 -04:00
William Wernert
6f784565d4
Merge branch 'fix/nmcli-ami-error' into foxtrot
2021-04-05 12:41:02 -04:00
William Wernert
fd57996bc6
Change behavior of adding lines to sshd config
...
* Replace existing lines in cases where a change has already been made
2021-04-02 10:00:27 -04:00
William Wernert
fa373e9db0
Merge branch 'fix/ssh-harden-setup' into foxtrot
2021-04-01 11:04:10 -04:00
William Wernert
dfe5e73608
Merge branch 'feature/node-description' into foxtrot
2021-03-31 16:02:12 -04:00
William Wernert
3de980e4a1
Move function call to run after Network Manager is installed
2021-03-31 16:00:37 -04:00
William Wernert
1c4ba28336
[fix] host_pillar overwrites the file, so run ntp_pillar after it
2021-03-31 13:28:42 -04:00
William Wernert
04920dcbed
Merge branch 'dev' into foxtrot
2021-03-31 09:15:17 -04:00
William Wernert
c03e2b2c11
Move ntp server array to its own pillar in the minion sls file
2021-03-31 09:14:40 -04:00
William Wernert
25eca39428
Always ask for ntp setup on iso installs, don't ask on network installs
2021-03-30 09:54:21 -04:00
William Wernert
0e9ffe033d
Show message about setting up network earlier during setup
2021-03-30 09:30:06 -04:00
Mike Reeves
362bf55526
fixpath for GPG keys
2021-03-28 22:01:58 -04:00
Mike Reeves
955d41abde
Fix acng to actually cache
2021-03-26 16:18:49 -04:00
Mike Reeves
26f8ae87c5
Fix acng to actually cache
2021-03-26 16:10:00 -04:00
Mike Reeves
8819cc1371
Fix acng to actually cache
2021-03-26 16:01:22 -04:00
William Wernert
eb674b3b93
Validate list of ntp servers (ip4, hostname, or fqdn)
2021-03-25 14:45:33 -04:00
Mike Reeves
af3951e1ad
Attempt to use so repo for network install
2021-03-25 11:51:55 -04:00
William Wernert
23cd006724
so-ssh-harden fixes
...
* Change when script is run during setup
* Add newlines to sshd config for legibility
2021-03-23 14:06:10 -04:00
William Wernert
2d873b92fa
Fix ntp logic elsewhere
2021-03-23 10:22:41 -04:00
William Wernert
0e9c81c145
Fix logic around ntp prompt
2021-03-23 09:44:44 -04:00
