mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-07-13 20:41:23 +02:00
Mike Reeves
52885e28c5
The reposync section in repodownload.conf and the client repo assigned in repo/client/oracle.sls both used the bare name securityonionkernel, colliding across the two roles. Rename the reposync-side section (and its --repoid, the so-repo-sync guard, and the so-kernel-upgrade presence check) to securityonionkernelsync, mirroring the existing securityonion/securityonionsync split for the main repo. The client repo stays securityonionkernel. Also give the section its own name=Security Onion Kernel Repo repo.
26 lines
1.3 KiB
Bash
Executable File
26 lines
1.3 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
|
|
# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at
|
|
# https://securityonion.net/license; you may not use this file except in compliance with the
|
|
# Elastic License 2.0.
|
|
NOROOT=1
|
|
. /usr/sbin/so-common
|
|
|
|
set -e
|
|
|
|
curl --retry 5 --retry-delay 60 -A "reposync/$(sync_options)" https://sigs.securityonion.net/checkup --output /tmp/checkup
|
|
|
|
dnf reposync --norepopath -g --delete -m -c /opt/so/conf/reposync/repodownload.conf --repoid=securityonionsync --download-metadata -p /nsm/repo/
|
|
createrepo /nsm/repo
|
|
|
|
# The kernel repo section is deployed to repodownload.conf by the manager highstate, which
|
|
# runs AFTER this script during soup. On the first upgrade to a kernel-aware version the
|
|
# on-disk config still predates the section, so guard on its presence to avoid dnf's
|
|
# "Unknown repo: 'securityonionkernelsync'" aborting the sync (set -e). The next sync after the
|
|
# highstate deploys the section will pick it up.
|
|
if grep -q '^\[securityonionkernelsync\]' /opt/so/conf/reposync/repodownload.conf; then
|
|
dnf reposync --norepopath -g --delete -m -c /opt/so/conf/reposync/repodownload.conf --repoid=securityonionkernelsync --download-metadata -p /nsm/kernelrepo/
|
|
createrepo /nsm/kernelrepo
|
|
fi
|