mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-09-17 13:19:23 +02:00
Mike Reeves
cb48909578
Upstream Elastic now ships binaries built for the x86-64-v3 micro-architecture level. This is not a Security Onion choice: nodes whose CPUs predate x86-64-v3 can no longer run Elastic's own builds, so those nodes break once they are upgraded. Check for support before soup modifies anything, and require the operator to type "override" to proceed when a node is unsupported or offline. Runs after upgrade_check so a grid that is already current exits without prompting. Targets only the roles that run a container built from the so-elastic-agent image, using the role lists already maintained in salt/reactor/pillar_push_map.yaml. Adds --skip-cpu-check to bypass the gate for automation, and exit code 162 when the operator declines to override.