e536ffa363
so-boot-mine-update: render node_data after mine.update before highstate
...
After the boot-time mine.update, have the manager actually render the
node_data pillar and log whether it came back populated. node_data: False
makes salt/top.sls apply the bootstrap recovery branch instead of the
manager's real config, so surfacing this in the journal makes the
condition visible before so-boot-highstate runs. Best-effort and
non-blocking: always exits 0 so highstate proceeds regardless.
2026-06-09 09:35:24 -04:00
9580976ba2
Add manager boot-time grid mine.update oneshot before highstate
...
so-boot-mine-update.service is a manager-only Type=oneshot unit that runs
once per boot after salt-master/salt-minion start and before
so-boot-highstate.service. It pushes mine.update to all reachable minions
so mine-backed pillars (node IPs, ES/Redis/Logstash discovery) are fresh
before the boot highstate renders them.
The helper waits for the responsive minion set to settle (plateau) rather
than for every accepted key to report up, so an intentionally powered-off
minion doesn't block the update; MAX_WAIT remains as a backstop.
2026-06-08 11:05:13 -04:00
cb3631da81
Move setup-complete marker from /opt/so/conf to /opt/so/state
...
The setup-complete marker is a runtime-state file, not config, so move it
to /opt/so/state/setup-complete. Updates both writers (mark_setup_complete
in setup/so-functions and the upgrade-path state in minion/init.sls) and the
three readers (so-boot-highstate.service ConditionPathExists, boot_highstate.sls
enable gate, and the so-user_sync cron gate).
2026-06-04 15:07:27 -04:00
f5d63f585e
Merge remote-tracking branch 'origin/3/dev' into nostartupstates
2026-06-04 09:19:01 -04:00
13f8be40b5
so-boot-highstate: wait for docker before running highstate
...
Add docker.service to After= and Wants= so the boot-time highstate
starts after docker is up. Uses Wants (soft) so highstate still runs
if docker fails to start.
2026-06-04 08:46:35 -04:00
9ee90a5bc0
Merge pull request #15955 from Security-Onion-Solutions/jertel/wip
...
config updates
2026-06-03 17:26:51 -04:00
ca85c5d900
fix version
2026-06-03 17:26:08 -04:00
2d653b6f1b
does not need to be jinja template
2026-06-03 15:46:58 -04:00
34fee25b0c
Merge remote-tracking branch 'origin/3/dev' into nostartupstates
2026-06-03 15:44:41 -04:00
1d3d98f759
kilo
2026-06-03 12:24:41 -04:00
a767c79641
restore soup db init
2026-06-03 10:39:37 -04:00
61e72c89e4
postgres updates
2026-06-03 09:49:53 -04:00
d9fb7313f9
merge
2026-06-03 09:30:05 -04:00
7ca2313255
move to securityonion db
2026-06-03 09:05:23 -04:00
534f0e639d
Merge pull request #15954 from Security-Onion-Solutions/reyesj2-patch-4
...
run elastic agent regen installer script in post_to_3.2.0
2026-06-02 15:25:55 -05:00
559465b407
run elastic agent gen installers script in post_to_3.2.0
2026-06-02 15:18:00 -05:00
f9c2579261
remove logstash pipeline rename from hotfix moving to up_to_3.2.0
2026-06-02 15:18:00 -05:00
33699a914b
Merge pull request #15952 from Security-Onion-Solutions/reyesj2-patch-3
...
use so-config-backup script in soup
2026-06-02 15:02:27 -05:00
0c2d8f8973
Merge pull request #15951 from Security-Onion-Solutions/reyesj2-patch-2
...
check if there is a version or hotfix to upgrade to before verifiying elasticsearch compatibility
2026-06-02 15:02:10 -05:00
f2996fb888
use so-config-backup script in soup
2026-06-01 11:52:35 -05:00
3c533cccbc
and after free space check
2026-06-01 11:28:59 -05:00
79da9f9f2c
check if there is a version or hotfix to upgrade to before verifiying elasticsearch compatibility
2026-06-01 11:26:52 -05:00
99a027589b
Merge pull request #15949 from Security-Onion-Solutions/jertel/wip
...
fix version
2026-05-30 09:50:14 -04:00
68a82a425b
fix version
2026-05-30 08:12:50 -04:00
d86a3c5cc9
Merge pull request #15947 from Security-Onion-Solutions/jertel/wip
...
refactored soc config
2026-05-29 14:07:06 -04:00
86edc5aaba
version
2026-05-28 22:57:59 -04:00
9a70a06b3b
Merge remote-tracking branch 'origin/3/dev' into jertel/wip
2026-05-28 13:55:12 -04:00
526d739b3b
Merge pull request #15940 from Security-Onion-Solutions/TOoSmOotH-patch-4
...
Remove outdated HOTFIX version number
2026-05-28 10:25:28 -04:00
68d783e760
Remove outdated HOTFIX version number
2026-05-28 10:24:47 -04:00
1e9b6b0975
Merge pull request #15939 from Security-Onion-Solutions/3/main
...
main to dev for hotfix
2026-05-28 10:24:21 -04:00
2131e7d450
Merge pull request #15937 from Security-Onion-Solutions/hotfix/3.1.0
...
Hotfix/3.1.0
2026-05-28 10:20:53 -04:00
2a2d853ac4
Merge pull request #15936 from Security-Onion-Solutions/hotfix310
...
3.1.0 hotfix
2026-05-28 09:53:00 -04:00
5abd6de4b5
3.1.0 hotfix
2026-05-28 09:34:17 -04:00
bb8ae91d91
fix so-soc postgres bootstrap
2026-05-27 16:39:52 -04:00
93ffce98d7
add onionconfig and postgres modules to soc config
2026-05-27 15:07:25 -04:00
5599cce22c
Merge pull request #15934 from Security-Onion-Solutions/reyesj2-patch-1
...
keep logstash lumberjack pipeline name update unified
2026-05-27 13:37:41 -05:00
b2a82fec29
fix_logstash_0013_lumberjack_pipeline_name
...
Before removing from apply_hotfix function first verify that older installs < 3.1.0 are still upgradable when referencing 'so/0013_input_lumberjack_fleet.conf' via pillar. Failure to do so will prevent logstash from starting
2026-05-27 13:24:23 -05:00
613eca52fc
update hotfix date
2026-05-27 13:24:10 -05:00
79987f3659
bootstrap so-soc db in postgres during soup
2026-05-27 13:55:30 -04:00
bf609a112e
LF
2026-05-27 12:21:44 -05:00
0b4a4de609
always run logstash pipeline rename
2026-05-27 12:21:22 -05:00
ad376d2a43
Merge pull request #15930 from Security-Onion-Solutions/reyesj2-patch-1
...
check for stale logstash pipeline name in local pillar
2026-05-27 10:16:39 -05:00
0834998cca
usuable for next soup
2026-05-27 09:52:29 -05:00
473f93f0ee
check for stale logstash pipeline name in pillars
2026-05-27 09:33:15 -05:00
16055c4d88
Merge remote-tracking branch 'origin/3/dev' into jertel/wip
2026-05-27 09:18:33 -04:00
7cc2e045fb
Merge pull request #15925 from Security-Onion-Solutions/reyesj2/soup-heavynode
...
use multiple or combined input
2026-05-26 08:34:33 -05:00
6955ee73bf
Merge pull request #15924 from Security-Onion-Solutions/TOoSmOotH-patch-3
...
Add version number to HOTFIX file
2026-05-26 09:28:41 -04:00
c0272ddb81
Add version number to HOTFIX file
2026-05-26 09:24:10 -04:00
d72219c586
use multiple or combined input
2026-05-22 20:04:21 -05:00
ffd34d4e0e
Merge pull request #15919 from Security-Onion-Solutions/TOoSmOotH-patch-2
...
Add 3.2.0 option to discussion template
2026-05-21 15:58:28 -04:00
Josh Patterson
Jason Ertel
Jason Ertel
Jorge Reyes
Mike Reeves
Mike Reeves