Mike Reeves
698a746d6d
Add UEK8 kernel repo support across install and grid
...
Mirror the kernel repo to full parity with the main package repo so the
grid can pull the Oracle UEK8 kernel:
- setup/so-functions: securityonion_repo() emits a [securityonionkernel]
section in every branch (mirrorlist on non-airgap, https://$MSRV/kernelrepo
for airgap/minion, file:///nsm/kernelrepo/ for manager); repo_sync_local()
and create_repo() sync and build /nsm/kernelrepo.
- manager/init.sls: create /nsm/kernelrepo and deploy mirror-kernel.txt.
- nginx/enabled.sls: serve /nsm/kernelrepo at https://<repo_host>/kernelrepo.
- repo/client/oracle.sls: add so_kernel_repo, gated by
onlyif test -e /opt/so/state/nic_names_pinned so the kernel repo is only
assigned once NICs are pinned by MAC.
- update_packages(): run so-nic-pin before the dnf update that pulls the
kernel, freezing interface names and dropping the pin marker so the kernel
isn't downgraded then re-upgraded on the first highstate.
2026-06-23 13:19:56 -04:00
Mike Reeves
afc14ec29d
Remove non-Oracle Linux 9 support from salt states
...
Simplifies salt states, map files, and modules to only support
Oracle Linux 9, removing all Debian/Ubuntu/CentOS/Rocky/AlmaLinux/RHEL
conditional branches.
2026-03-16 16:58:39 -04:00
DefensiveDepth
271f545f4f
Fixup Airgap
2025-12-06 15:26:44 -05:00
DefensiveDepth
1284150382
Move to manager init
2025-11-27 08:39:19 -05:00
DefensiveDepth
ced3af818c
Refactor for Airgap
2025-11-25 13:51:50 -05:00
reyesj2
348f9dcaec
prevent multiple script instances using file lock
2025-09-05 10:01:24 -05:00
reyesj2
e26310d172
elastic agent offline alerter
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2025-09-02 17:00:03 -05:00
Josh Brower
b428573a0a
Airgap tweaks
2025-06-06 17:48:49 -04:00
Josh Patterson
19514a969b
use file.directory
2025-04-23 08:41:53 -04:00
Josh Patterson
77f88371b8
manage default and local in separate states
2025-04-23 08:30:37 -04:00
Jason Ertel
0047246cf2
reduce stdout verbosity
2025-03-04 10:55:12 -05:00
reyesj2
a373d96c3c
run managed_soc_annotations.sls from manager state
2025-01-27 13:45:03 -06:00
Josh Patterson and GitHub
b3ce624fff
Merge pull request #13921 from Security-Onion-Solutions/reposynccron
...
only enable repo sync cron if OEL
2024-11-08 16:16:48 -05:00
m0duspwnens
ee4405e75e
only enable repo sync cron if OEL
2024-11-08 16:13:44 -05:00
defensivedepth
c509dab5f1
Use socore user
2024-10-30 11:03:14 -04:00
defensivedepth
5406a263d5
Add local custom template
2024-10-29 19:42:06 -04:00
m0duspwnens
7a0f6d5e93
fix pkg name
2024-10-22 16:42:01 -04:00
m0duspwnens
8d2ae23ae6
install createrepo on airgap and non airgap
2024-10-22 13:56:38 -04:00
reyesj2
680e84851b
Re-add manager sbin_jinja file recurse
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-06-24 12:27:52 -04:00
weslambert and GitHub
13062099b3
Remove YARA script update and reference to exclusions
2024-05-13 18:04:16 -04:00
Mike Reeves
283939b18a
Gather metrics from elastic agent to influx
2024-04-02 15:36:01 -04:00
weslambert and GitHub
f431e9ae08
Remove Strelka config
2024-03-21 10:06:25 -04:00
weslambert and GitHub
34d5954e16
Fix indent
2024-03-11 09:12:05 -04:00
Josh Brower
4a9e8265ce
Merge remote-tracking branch 'origin/2.4/dev' into kilo
2024-03-08 14:48:04 -05:00
Wes
4e32935991
Add Strelka config back
2024-03-08 16:24:37 +00:00
Mike Reeves and GitHub
1fe8f3d9e4
Merge pull request #12405 from Security-Onion-Solutions/repochange
...
Manage the repo files
2024-02-29 14:01:48 -05:00
Mike Reeves
9ca0f586ae
Manage the repos
2024-02-21 11:45:02 -05:00
Corey Ogburn
858166bcae
WIP: Detections Changes
...
Removed some strelka/yara rules from salt.
Removed yara scripts for downloading and updating rules. This will be managed by SOC.
Added a new compile_yara.py script.
Added the strelka repos folder.
2024-01-30 15:43:51 -07:00
Jason Ertel
9231c8d2f2
replace reset sed with new script
2023-11-08 19:17:32 -05:00
defensivedepth
310a6b4f27
Add kibana curl config
2023-10-24 14:21:01 -04:00
Mike Reeves
95d32cb076
Fix manager cron logic
2023-09-28 12:49:46 -04:00
Mike Reeves
5040df7551
Fix manager cron logic
2023-09-28 12:32:40 -04:00
Mike Reeves
7a21b7903d
Fix manager cron logic
2023-09-28 11:46:43 -04:00
Mike Reeves and GitHub
a77a53f20b
Update init.sls
2023-09-28 11:10:17 -04:00
m0duspwnens
da27fce95f
run so-yara-download/update if scripts change
2023-07-11 13:48:26 -04:00
m0duspwnens
f8ed2e6e8e
make parent dirs
2023-07-10 16:11:45 -04:00
m0duspwnens
1ac72e5b24
ensure /nsm/rules/yara directory exists
2023-07-10 11:10:37 -04:00
m0duspwnens
fa933d3f53
use file_mode
2023-07-10 10:26:30 -04:00
m0duspwnens
f4dc73a206
yara download and update
2023-07-10 09:42:37 -04:00
m0duspwnens
8be5082b60
yara scripts
2023-07-07 16:43:26 -04:00
m0duspwnens
5b06aa518e
makedirs if needed
2023-05-10 15:55:21 -04:00
m0duspwnens
54c9a3ec71
enable/disable each strelka container in ui
2023-05-10 15:50:07 -04:00
Mike Reeves and GitHub
d7972032e4
Update init.sls
2023-05-05 10:33:11 -04:00
Mike Reeves
cbd1c05929
Sbin Changes
2023-05-04 10:36:03 -04:00
m0duspwnens
1047462898
add identifiers for all cron.present
2023-04-13 16:25:47 -04:00
Mike Reeves
0a096712cb
Fix cache location
2023-03-23 12:39:31 -04:00
Mike Reeves
c977f38a58
Change repo conf permissions
2023-03-23 11:56:40 -04:00
Mike Reeves
8f4076ccd6
Change repo conf permissions
2023-03-23 11:46:32 -04:00
Mike Reeves
02aa8662f7
Saltify it up
2023-03-23 10:52:05 -04:00
Mike Reeves
f8d5acd37d
Saltify it up
2023-03-23 10:43:47 -04:00
Mike Reeves
DefensiveDepth
reyesj2
Josh Patterson
Jason Ertel
weslambertandGitHub
Mike Reeves
Corey Ogburn