mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
130 lines
4.4 KiB
Plaintext
130 lines
4.4 KiB
Plaintext
# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
|
|
# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at
|
|
# https://securityonion.net/license; you may not use this file except in compliance with the
|
|
# Elastic License 2.0.
|
|
|
|
{% if '2.4' in salt['cp.get_file_str']('/etc/soversion') %}
|
|
|
|
{% import_yaml '/opt/so/saltstack/local/pillar/global/soc_global.sls' as SOC_GLOBAL %}
|
|
{% if SOC_GLOBAL.global.airgap %}
|
|
{% set UPDATE_DIR='/tmp/soagupdate/SecurityOnion' %}
|
|
{% else %}
|
|
{% set UPDATE_DIR='/tmp/sogh/securityonion' %}
|
|
{% endif %}
|
|
{% set SOVERSION = salt['file.read']('/etc/soversion').strip() %}
|
|
|
|
remove_common_soup:
|
|
file.absent:
|
|
- name: /opt/so/saltstack/default/salt/common/tools/sbin/soup
|
|
|
|
remove_common_so-firewall:
|
|
file.absent:
|
|
- name: /opt/so/saltstack/default/salt/common/tools/sbin/so-firewall
|
|
|
|
# This section is used to put the scripts in place in the Salt file system
|
|
# in case a state run tries to overwrite what we do in the next section.
|
|
copy_so-common_common_tools_sbin:
|
|
file.copy:
|
|
- name: /opt/so/saltstack/default/salt/common/tools/sbin/so-common
|
|
- source: {{UPDATE_DIR}}/salt/common/tools/sbin/so-common
|
|
- force: True
|
|
- preserve: True
|
|
|
|
copy_so-image-common_common_tools_sbin:
|
|
file.copy:
|
|
- name: /opt/so/saltstack/default/salt/common/tools/sbin/so-image-common
|
|
- source: {{UPDATE_DIR}}/salt/common/tools/sbin/so-image-common
|
|
- force: True
|
|
- preserve: True
|
|
|
|
copy_soup_manager_tools_sbin:
|
|
file.copy:
|
|
- name: /opt/so/saltstack/default/salt/manager/tools/sbin/soup
|
|
- source: {{UPDATE_DIR}}/salt/manager/tools/sbin/soup
|
|
- force: True
|
|
- preserve: True
|
|
|
|
copy_so-firewall_manager_tools_sbin:
|
|
file.copy:
|
|
- name: /opt/so/saltstack/default/salt/manager/tools/sbin/so-firewall
|
|
- source: {{UPDATE_DIR}}/salt/manager/tools/sbin/so-firewall
|
|
- force: True
|
|
- preserve: True
|
|
|
|
copy_so-yaml_manager_tools_sbin:
|
|
file.copy:
|
|
- name: /opt/so/saltstack/default/salt/manager/tools/sbin/so-yaml.py
|
|
- source: {{UPDATE_DIR}}/salt/manager/tools/sbin/so-yaml.py
|
|
- force: True
|
|
- preserve: True
|
|
|
|
copy_so-repo-sync_manager_tools_sbin:
|
|
file.copy:
|
|
- name: /opt/so/saltstack/default/salt/manager/tools/sbin/so-repo-sync
|
|
- source: {{UPDATE_DIR}}/salt/manager/tools/sbin/so-repo-sync
|
|
- preserve: True
|
|
|
|
# This section is used to put the new script in place so that it can be called during soup.
|
|
# It is faster than calling the states that normally manage them to put them in place.
|
|
copy_so-common_sbin:
|
|
file.copy:
|
|
- name: /usr/sbin/so-common
|
|
- source: {{UPDATE_DIR}}/salt/common/tools/sbin/so-common
|
|
- force: True
|
|
- preserve: True
|
|
|
|
copy_so-image-common_sbin:
|
|
file.copy:
|
|
- name: /usr/sbin/so-image-common
|
|
- source: {{UPDATE_DIR}}/salt/common/tools/sbin/so-image-common
|
|
- force: True
|
|
- preserve: True
|
|
|
|
copy_soup_sbin:
|
|
file.copy:
|
|
- name: /usr/sbin/soup
|
|
- source: {{UPDATE_DIR}}/salt/manager/tools/sbin/soup
|
|
- force: True
|
|
- preserve: True
|
|
|
|
copy_so-firewall_sbin:
|
|
file.copy:
|
|
- name: /usr/sbin/so-firewall
|
|
- source: {{UPDATE_DIR}}/salt/manager/tools/sbin/so-firewall
|
|
- force: True
|
|
- preserve: True
|
|
|
|
copy_so-yaml_sbin:
|
|
file.copy:
|
|
- name: /usr/sbin/so-yaml.py
|
|
- source: {{UPDATE_DIR}}/salt/manager/tools/sbin/so-yaml.py
|
|
- force: True
|
|
- preserve: True
|
|
|
|
copy_so-repo-sync_sbin:
|
|
file.copy:
|
|
- name: /usr/sbin/so-repo-sync
|
|
- source: {{UPDATE_DIR}}/salt/manager/tools/sbin/so-repo-sync
|
|
- force: True
|
|
- preserve: True
|
|
|
|
{# this is added in 2.4.120 to remove salt repo files pointing to saltproject.io to accomodate the move to broadcom and new bootstrap-salt script #}
|
|
{% if salt['pkg.version_cmp'](SOVERSION, '2.4.120') == -1 %}
|
|
{% set saltrepofile = '/etc/yum.repos.d/salt.repo' %}
|
|
{% if grains.os_family == 'Debian' %}
|
|
{% set saltrepofile = '/etc/apt/sources.list.d/salt.list' %}
|
|
{% endif %}
|
|
remove_saltproject_io_repo:
|
|
file.absent:
|
|
- name: {{ saltrepofile }}
|
|
{% endif %}
|
|
|
|
{% else %}
|
|
fix_23_soup_sbin:
|
|
cmd.run:
|
|
- name: curl -s -f -o /usr/sbin/soup https://raw.githubusercontent.com/Security-Onion-Solutions/securityonion/2.3/main/salt/common/tools/sbin/soup
|
|
fix_23_soup_salt:
|
|
cmd.run:
|
|
- name: curl -s -f -o /opt/so/saltstack/defalt/salt/common/tools/sbin/soup https://raw.githubusercontent.com/Security-Onion-Solutions/securityonion/2.3/main/salt/common/tools/sbin/soup
|
|
{% endif %}
|