mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-10-30 17:30:45 +01:00
Mike Reeves
11c8fe3093
Anchor the grid CA and blocklist the eMudhra roots in the host trust store (new ca.trust state, also used by the desktop role), then mount the extracted store into each container instead of the frozen copies made by so-catrust. Containers restart when the host trust changes.
16 lines
303 B
YAML+Jinja
16 lines
303 B
YAML+Jinja
{% from 'vars/globals.map.jinja' import GLOBALS %}
|
|
|
|
{# we only want this state to run it is CentOS #}
|
|
{% if GLOBALS.os == 'OEL' %}
|
|
|
|
include:
|
|
- ca.trust
|
|
|
|
{% else %}
|
|
|
|
desktop_trusted-ca_os_fail:
|
|
test.fail_without_changes:
|
|
- comment: 'SO Desktop can only be installed on Oracle Linux'
|
|
|
|
{% endif %}
|