mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
93 lines
4.8 KiB
Bash
Executable File
93 lines
4.8 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
|
|
# or more contributor license agreements. Licensed under the Elastic License 2.0; you may not use
|
|
# this file except in compliance with the Elastic License 2.0.
|
|
|
|
#so-elastic-agent-gen-installers $FleetHostURLs $EnrollmentToken
|
|
|
|
{% from 'vars/globals.map.jinja' import GLOBALS %}
|
|
|
|
. /usr/sbin/so-common
|
|
. /usr/sbin/so-elastic-fleet-common
|
|
|
|
LOG="/opt/so/log/elasticfleet/so-elastic-agent-gen-installers.log"
|
|
|
|
# get the variables needed such as ELASTIC_AGENT_TARBALL_VERSION
|
|
get_elastic_agent_vars
|
|
|
|
# Check to see if we are already running
|
|
NUM_RUNNING=$(pgrep -cf "/bin/bash /sbin/so-elastic-agent-gen-installers")
|
|
[ "$NUM_RUNNING" -gt 1 ] && echo "$(date) - $NUM_RUNNING gen installers script processes running...exiting." >>$LOG && exit 0
|
|
|
|
for i in {1..30}
|
|
do
|
|
ENROLLMENTOKEN=$(curl -K /opt/so/conf/elasticsearch/curl.config -L "localhost:5601/api/fleet/enrollment_api_keys?perPage=100" -H 'kbn-xsrf: true' -H 'Content-Type: application/json' | jq .list | jq -r -c '.[] | select(.policy_id | contains("endpoints-initial")) | .api_key')
|
|
FLEETHOST=$(curl -K /opt/so/conf/elasticsearch/curl.config 'http://localhost:5601/api/fleet/fleet_server_hosts/grid-default' | jq -r '.item.host_urls[]' | paste -sd ',')
|
|
if [[ $FLEETHOST ]] && [[ $ENROLLMENTOKEN ]]; then break; else sleep 10; fi
|
|
done
|
|
|
|
if [[ -z $FLEETHOST ]] || [[ -z $ENROLLMENTOKEN ]]; then
|
|
printf "\nFleet Host URL, Enrollment Token or Elastic Version empty - exiting..."
|
|
printf "\nFleet Host: $FLEETHOST, Enrollment Token: $ENROLLMENTOKEN\n"
|
|
exit
|
|
fi
|
|
|
|
OSARCH=( "linux-x86_64" "windows-x86_64" "darwin-x86_64" "darwin-aarch64" )
|
|
|
|
printf "\n### Creating a temp directory at /nsm/elastic-agent-workspace\n"
|
|
rm -rf /nsm/elastic-agent-workspace
|
|
mkdir -p /nsm/elastic-agent-workspace
|
|
|
|
|
|
printf "\n### Extracting outer tarball and then each individual tarball/zip\n"
|
|
tar -xf /nsm/elastic-fleet/artifacts/elastic-agent_SO-$ELASTIC_AGENT_TARBALL_VERSION.tar.gz -C /nsm/elastic-agent-workspace/
|
|
unzip -q /nsm/elastic-agent-workspace/elastic-agent-*.zip -d /nsm/elastic-agent-workspace/
|
|
for archive in /nsm/elastic-agent-workspace/*.tar.gz
|
|
do
|
|
printf "\nExtracting $archive..."
|
|
tar xf "$archive" -C /nsm/elastic-agent-workspace/
|
|
done
|
|
|
|
printf "\n### Stripping out unused components"
|
|
find /nsm/elastic-agent-workspace/elastic-agent-*/data/elastic-agent-*/components -maxdepth 1 -regex '.*fleet.*\|.*packet.*\|.*apm.*\|.*heart.*\|.*cloud.*' -delete
|
|
|
|
printf "\n### Tarring everything up again"
|
|
for OS in "${OSARCH[@]}"
|
|
do
|
|
printf "\nCreating tarball for $OS..."
|
|
rm -rf /nsm/elastic-agent-workspace/elastic-agent
|
|
mv /nsm/elastic-agent-workspace/elastic-agent-*-$OS /nsm/elastic-agent-workspace/elastic-agent
|
|
tar -czf /nsm/elastic-agent-workspace/$OS.tar.gz -C /nsm/elastic-agent-workspace elastic-agent
|
|
done
|
|
|
|
GOTARGETOS=( "linux" "windows" "darwin" "darwin/arm64" )
|
|
GOARCH="amd64"
|
|
printf "\n### Generating OS packages using the cleaned up tarballs"
|
|
for GOOS in "${GOTARGETOS[@]}"
|
|
do
|
|
if [[ $GOOS == 'darwin/arm64' ]]; then GOOS="darwin" && GOARCH="arm64"; fi
|
|
printf "\n\n### Generating $GOOS/$GOARCH Installer...\n"
|
|
docker run -e CGO_ENABLED=0 -e GOOS=$GOOS -e GOARCH=$GOARCH \
|
|
--mount type=bind,source=/etc/pki/tls/certs/,target=/workspace/files/cert/ \
|
|
--mount type=bind,source=/nsm/elastic-agent-workspace/,target=/workspace/files/elastic-agent/ \
|
|
--mount type=bind,source=/opt/so/saltstack/local/salt/elasticfleet/files/so_agent-installers/,target=/output/ \
|
|
{{ GLOBALS.registry_host }}:5000/{{ GLOBALS.image_repo }}/so-elastic-agent-builder:{{ GLOBALS.so_version }} go build -ldflags "-X main.fleetHostURLsList=$FLEETHOST -X main.enrollmentToken=$ENROLLMENTOKEN" -o /output/so-elastic-agent_${GOOS}_${GOARCH}
|
|
printf "\n### $GOOS/$GOARCH Installer Generated...\n"
|
|
done
|
|
|
|
printf "\n\n### Generating MSI...\n"
|
|
cp /opt/so/saltstack/local/salt/elasticfleet/files/so_agent-installers/so-elastic-agent_windows_amd64 /opt/so/saltstack/local/salt/elasticfleet/files/so_agent-installers/so-elastic-agent_windows_amd64.exe
|
|
docker run \
|
|
--mount type=bind,source=/opt/so/saltstack/local/salt/elasticfleet/files/so_agent-installers/,target=/output/ -w /output \
|
|
{{ GLOBALS.registry_host }}:5000/{{ GLOBALS.image_repo }}/so-elastic-agent-builder:{{ GLOBALS.so_version }} wixl -o so-elastic-agent_windows_amd64_msi --arch x64 /workspace/so-elastic-agent.wxs
|
|
printf "\n### MSI Generated...\n"
|
|
|
|
printf "\n### Cleaning up temp files \n"
|
|
rm -rf /nsm/elastic-agent-workspace
|
|
rm -rf /opt/so/saltstack/local/salt/elasticfleet/files/so_agent-installers/so-elastic-agent_windows_amd64.exe
|
|
|
|
printf "\n### Copying so_agent-installers to /nsm/elastic-fleet/ for nginx.\n"
|
|
\cp -vr /opt/so/saltstack/local/salt/elasticfleet/files/so_agent-installers/ /nsm/elastic-fleet/
|
|
chmod 644 /nsm/elastic-fleet/so_agent-installers/*
|