Mike Reeves 80c39d612c Pin NIC names by MAC via udev (run-once) from the common state ...

Add so-nic-pin, which writes by-MAC persistent-net udev rules pinning each
physical NIC to its current name so a kernel upgrade can't renumber the
interfaces Security Onion binds by name (host:mainint, sensor:mainint, bond0).

Gated by the drop file /opt/so/state/nic_names_pinned: run-once on highstate,
and an admin can pre-create the marker to opt out. Wired into common/init.sls
as pin_nic_names, guarded by a matching unless.

2026-06-11 18:40:43 -04:00

..

_beacons

remove unneeded files

2025-05-30 12:50:59 -04:00

_modules

Remove non-Oracle Linux 9 support from salt states

2026-03-16 16:58:39 -04:00

_runners

indicate base image download start

2025-11-20 17:13:36 -05:00

backup

use so-config-backup script in soup

2026-06-01 11:52:35 -05:00

bpf

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

ca

Add so-postgres Salt states and integration wiring

2026-04-08 10:58:52 -04:00

common

Pin NIC names by MAC via udev (run-once) from the common state

2026-06-11 18:40:43 -04:00

cron

…

desktop

the great ssl refactor

2025-12-11 17:30:06 -05:00

docker

Change so-postgres final_octet to 47

2026-04-21 09:33:47 -04:00

docker_clean

…

elastalert

new elastalert options advanced

2026-03-19 17:19:42 -04:00

elastic-fleet-package-registry

fleet package registry health check

2026-05-04 10:52:37 -05:00

elasticagent

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

elasticfleet

fleet manager start kibana if it isn't already running and wait for healthly status

2026-06-10 17:52:08 -05:00

elasticsearch

fix elasticsearch template generation issue

2026-06-05 16:42:08 -05:00

firewall

Open postgres on every hostgroup that opens influxdb

2026-04-29 09:09:50 -04:00

global

Remove helpLink for influxdb in soc_global.yaml

2026-04-23 13:56:41 -04:00

healthcheck

…

host

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

hydra

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

hypervisor

merge 2.4/dev

2025-12-02 11:16:08 -06:00

idh

Remove hardcoded path

2026-03-23 16:26:56 -04:00

influxdb

define options in annotation files

2026-04-09 10:18:36 -04:00

kafka

define options in annotation files

2026-04-09 10:18:36 -04:00

kibana

fleet manager start kibana if it isn't already running and wait for healthly status

2026-06-10 17:52:08 -05:00

kratos

prep for soc db config

2026-05-13 17:28:07 -04:00

libvirt

create libvirt volumes directory

2025-10-30 11:02:36 -04:00

logrotate

remove steno

2026-03-06 15:45:36 -05:00

logstash

add ingest latency metrics

2026-05-11 16:51:38 -05:00

manager

so-boot-mine-update: warm master pillar cache before highstate

2026-06-09 13:52:19 -04:00

motd

FIX: Update MOTD #13317

2024-07-09 10:06:16 -04:00

nginx

Tweak for nginx upgrade

2026-05-14 17:08:57 -04:00

ntp

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

orch

fix regex

2026-05-05 14:26:04 -04:00

patch

ensure bool sliders for patch

2026-03-19 14:39:10 -04:00

pcap

cleanup steno. sensor run pcap.cleanup

2026-03-10 16:09:32 -04:00

pipeline

…

postgres

postgres updates

2026-06-03 09:49:53 -04:00

reactor

fix regex

2026-05-05 14:26:04 -04:00

redis

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

registry

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

repo/client

Remove non-Oracle Linux 9 support from salt states

2026-03-16 16:58:39 -04:00

salt

Add manager boot-time grid mine.update oneshot before highstate

2026-06-08 11:05:13 -04:00

sensor

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

sensoroni

ensure bool sliders sensoroni

2026-03-19 14:41:49 -04:00

setup/virt

remove highstate from startup_states. highstate on system start

2026-05-14 13:57:40 -04:00

soc

postgres updates

2026-06-03 09:49:53 -04:00

ssl

dont remove ca in ssl.remove

2026-01-07 14:14:57 -05:00

stig

update stig profile v1r3

2026-03-23 14:04:48 -05:00

storage

remove .log extension

2025-10-14 11:03:00 -04:00

strelka

Merge pull request #15792 from Security-Onion-Solutions/3/strelkalnk

2026-05-14 13:06:26 +02:00

suricata

define options in annotation files

2026-04-09 10:18:36 -04:00

systemd

…

tcpreplay

…

telegraf

Change Telegraf output from BOTH to INFLUXDB

2026-05-13 11:58:21 -04:00

utility

…

vars

Move telegraf_output from global pillar to telegraf pillar

2026-04-20 16:03:02 -04:00

versionlock

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

vm

handle - in hypervisor hostname

2025-08-04 15:25:26 -04:00

zeek

Fix JA4+ license link in soc_zeek.yaml

2026-04-06 10:12:37 -04:00

allowed_states.map.jinja

Merge pull request #15749 from Security-Onion-Solutions/feature/postgres

2026-04-28 10:15:47 -04:00

schedule.sls

splay highstate schedule 2minutes for non managers

2025-07-22 11:52:50 -04:00

top.sls

remove stig from hypervisor and managerhype

2026-05-13 10:53:11 -04:00