From b8368a207a59fbcecde7406d8fa5b25ca3b3b84c Mon Sep 17 00:00:00 2001 From: wazuhci <22834044+wazuhci@users.noreply.github.com> Date: Thu, 2 Jul 2026 15:53:58 +0000 Subject: [PATCH 01/25] feat: revert 5.0.0 references --- .github/workflows/5_build_and_push_images.yml | 8 ++++---- .../workflows/5_check_integration_tools.yml | 2 +- docs/ref/upgrade.md | 18 +++++++++--------- multi-node/docker-compose.yml | 12 ++++++------ single-node/docker-compose.yml | 6 +++--- wazuh-agent/docker-compose.yml | 2 +- 6 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/5_build_and_push_images.yml b/.github/workflows/5_build_and_push_images.yml index db902a77..d0eebded 100644 --- a/.github/workflows/5_build_and_push_images.yml +++ b/.github/workflows/5_build_and_push_images.yml @@ -6,7 +6,7 @@ on: inputs: image_tag: description: 'Docker image tag' - default: 'v5.0.0-beta3' + default: '5.0.0' required: true docker_reference: description: 'wazuh-docker reference' @@ -14,7 +14,7 @@ on: wazuh_automation_reference: description: 'Branch or tag of the wazuh-automation repository' required: false - default: 'v5.0.0-beta3' + default: '5.0.0' products: description: 'Comma-separated list of the image names to build and push' default: 'wazuh-manager,wazuh-dashboard,wazuh-indexer,wazuh-agent' @@ -42,7 +42,7 @@ on: inputs: image_tag: description: 'Docker image tag' - default: 'v5.0.0-beta3' + default: '5.0.0' required: true type: string docker_reference: @@ -52,7 +52,7 @@ on: wazuh_automation_reference: description: 'Branch or tag of the wazuh-automation repository' required: false - default: 'v5.0.0-beta3' + default: '5.0.0' type: string products: description: 'Comma-separated list of the image names to build and push' diff --git a/.github/workflows/5_check_integration_tools.yml b/.github/workflows/5_check_integration_tools.yml index aefce3bb..4f42c83c 100644 --- a/.github/workflows/5_check_integration_tools.yml +++ b/.github/workflows/5_check_integration_tools.yml @@ -16,7 +16,7 @@ on: automation_reference: description: 'Branch of wazuh-automation to use' required: false - default: 'v5.0.0-beta3' + default: '5.0.0' type: string deployment_type: description: 'Deployment type to test' diff --git a/docs/ref/upgrade.md b/docs/ref/upgrade.md index fa74e6d8..7e15c983 100644 --- a/docs/ref/upgrade.md +++ b/docs/ref/upgrade.md @@ -24,15 +24,15 @@ Below is a step-by-step example of how to perform this update: ```yaml services: wazuh.manager: - image: wazuh/wazuh-manager:5.0.0-beta3 + image: wazuh/wazuh-manager:5.0.0 ... wazuh.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta3 + image: wazuh/wazuh-indexer:5.0.0 ... wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0-beta3 + image: wazuh/wazuh-dashboard:5.0.0 ... ``` @@ -48,27 +48,27 @@ Below is a step-by-step example of how to perform this update: ```yaml services: wazuh.master: - image: wazuh/wazuh-manager:5.0.0-beta3 + image: wazuh/wazuh-manager:5.0.0 ... wazuh.worker: - image: wazuh/wazuh-manager:5.0.0-beta3 + image: wazuh/wazuh-manager:5.0.0 ... wazuh1.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta3 + image: wazuh/wazuh-indexer:5.0.0 ... wazuh2.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta3 + image: wazuh/wazuh-indexer:5.0.0 ... wazuh3.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta3 + image: wazuh/wazuh-indexer:5.0.0 ... wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0-beta3 + image: wazuh/wazuh-dashboard:5.0.0 ... ``` diff --git a/multi-node/docker-compose.yml b/multi-node/docker-compose.yml index 78a68170..4fa8d8bf 100644 --- a/multi-node/docker-compose.yml +++ b/multi-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.master: - image: wazuh/wazuh-manager:5.0.0-beta3 + image: wazuh/wazuh-manager:5.0.0 hostname: wazuh.master container_name: multi-node-wazuh.master restart: always @@ -44,7 +44,7 @@ services: - ./config/wazuh_master/certs/wazuh.master-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem wazuh.worker: - image: wazuh/wazuh-manager:5.0.0-beta3 + image: wazuh/wazuh-manager:5.0.0 hostname: wazuh.worker container_name: multi-node-wazuh.worker restart: always @@ -83,7 +83,7 @@ services: - ./config/wazuh_worker/certs/wazuh.worker-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem wazuh1.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta3 + image: wazuh/wazuh-indexer:5.0.0 hostname: wazuh1.indexer container_name: multi-node-wazuh1.indexer restart: always @@ -121,7 +121,7 @@ services: - ./config/wazuh1_indexer/certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem wazuh2.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta3 + image: wazuh/wazuh-indexer:5.0.0 hostname: wazuh2.indexer container_name: multi-node-wazuh2.indexer restart: always @@ -159,7 +159,7 @@ services: - ./config/wazuh2_indexer/certs/wazuh2.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem wazuh3.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta3 + image: wazuh/wazuh-indexer:5.0.0 hostname: wazuh3.indexer container_name: multi-node-wazuh3.indexer restart: always @@ -197,7 +197,7 @@ services: - ./config/wazuh3_indexer/certs/wazuh3.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0-beta3 + image: wazuh/wazuh-dashboard:5.0.0 hostname: wazuh.dashboard container_name: multi-node-wazuh.dashboard restart: always diff --git a/single-node/docker-compose.yml b/single-node/docker-compose.yml index 4543567d..042162cb 100644 --- a/single-node/docker-compose.yml +++ b/single-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.manager: - image: wazuh/wazuh-manager:5.0.0-beta3 + image: wazuh/wazuh-manager:5.0.0 hostname: wazuh.manager container_name: single-node-wazuh.manager restart: always @@ -44,7 +44,7 @@ services: - ./config/wazuh_manager/certs/wazuh.manager-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem wazuh.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta3 + image: wazuh/wazuh-indexer:5.0.0 hostname: wazuh.indexer container_name: single-node-wazuh.indexer restart: always @@ -81,7 +81,7 @@ services: - ./config/wazuh_indexer/certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0-beta3 + image: wazuh/wazuh-dashboard:5.0.0 hostname: wazuh.dashboard container_name: single-node-wazuh.dashboard restart: always diff --git a/wazuh-agent/docker-compose.yml b/wazuh-agent/docker-compose.yml index ea8d57fd..842677e1 100644 --- a/wazuh-agent/docker-compose.yml +++ b/wazuh-agent/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.agent: - image: wazuh/wazuh-agent:5.0.0-beta3 + image: wazuh/wazuh-agent:5.0.0 restart: always environment: - WAZUH_MANAGER_SERVER= From fb0110a1c35d5b77b65c319818b71ffc079a94a0 Mon Sep 17 00:00:00 2001 From: wazuhci <22834044+wazuhci@users.noreply.github.com> Date: Fri, 3 Jul 2026 15:05:24 +0000 Subject: [PATCH 02/25] feat: bump 4.14.8 --- .env | 6 +++--- .github/.goss.yaml | 2 +- .github/workflows/4_build_and_push_images.yml | 4 ++-- CHANGELOG.md | 18 ++++++++++++++++++ README.md | 2 +- VERSION.json | 2 +- build-docker-images/README.md | 4 ++-- build-docker-images/build-images.sh | 4 ++-- docs/dev/build-image.md | 4 ++-- docs/dev/introduction.md | 2 +- docs/dev/setup.md | 6 +++--- docs/ref/Introduction/description.md | 6 +++--- docs/ref/Introduction/introduction.md | 4 ++-- docs/ref/configuration/configuration-files.md | 2 +- docs/ref/configuration/configuration.md | 2 +- .../getting-started/deployment/deployment.md | 6 +++--- docs/ref/getting-started/getting-started.md | 6 +++--- docs/ref/getting-started/requirements.md | 2 +- docs/ref/glossary.md | 6 +++--- multi-node/docker-compose.yml | 12 ++++++------ single-node/docker-compose.yml | 6 +++--- wazuh-agent/docker-compose.yml | 2 +- 22 files changed, 63 insertions(+), 45 deletions(-) diff --git a/.env b/.env index 680106f1..445c9cee 100755 --- a/.env +++ b/.env @@ -1,6 +1,6 @@ -WAZUH_VERSION=4.14.7 -WAZUH_IMAGE_VERSION=4.14.7 +WAZUH_VERSION=4.14.8 +WAZUH_IMAGE_VERSION=4.14.8 WAZUH_TAG_REVISION=1 -FILEBEAT_TEMPLATE_BRANCH=4.14.7 +FILEBEAT_TEMPLATE_BRANCH=4.14.8 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz WAZUH_UI_REVISION=1 diff --git a/.github/.goss.yaml b/.github/.goss.yaml index a00299f4..e189ee00 100644 --- a/.github/.goss.yaml +++ b/.github/.goss.yaml @@ -42,7 +42,7 @@ package: wazuh-manager: installed: true versions: - - 4.14.7 + - 4.14.8 port: tcp:1514: listening: true diff --git a/.github/workflows/4_build_and_push_images.yml b/.github/workflows/4_build_and_push_images.yml index a801e928..e60a00f7 100644 --- a/.github/workflows/4_build_and_push_images.yml +++ b/.github/workflows/4_build_and_push_images.yml @@ -6,7 +6,7 @@ on: inputs: image_tag: description: 'Docker image tag' - default: '4.14.7' + default: '4.14.8' required: true docker_reference: description: 'wazuh-docker reference' @@ -38,7 +38,7 @@ on: inputs: image_tag: description: 'Docker image tag' - default: '4.14.7' + default: '4.14.8' required: true type: string docker_reference: diff --git a/CHANGELOG.md b/CHANGELOG.md index 31447766..986887e7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,24 @@ # Change Log All notable changes to this project will be documented in this file. +## [4.14.8] + +### Added + +- None + +### Changed + +- None + +### Fixed + +- None + +### Deleted + +- None + ## [4.14.7] ### Added diff --git a/README.md b/README.md index a4c2fdaa..31dcdd6a 100644 --- a/README.md +++ b/README.md @@ -18,7 +18,7 @@ The `wazuh/wazuh-docker` repository provides resources to deploy the Wazuh cyber ## Branch Convention - `main`: Developing and testing of new features. -- `X.Y.Z`: Version-specific branches (e.g., `4.14.7`, `4.13.0`, etc.). +- `X.Y.Z`: Version-specific branches (e.g., `4.14.8`, `4.13.0`, etc.). ## Documentation diff --git a/VERSION.json b/VERSION.json index 3b820185..4cd188c1 100644 --- a/VERSION.json +++ b/VERSION.json @@ -1,4 +1,4 @@ { - "version": "4.14.7", + "version": "4.14.8", "stage": "alpha0" } diff --git a/build-docker-images/README.md b/build-docker-images/README.md index 51659a0a..296f837d 100644 --- a/build-docker-images/README.md +++ b/build-docker-images/README.md @@ -19,7 +19,7 @@ Then execute: The script also allows to build images from other versions of Wazuh by using the `-v` or `--version` argument: ```bash -./build-images.sh -v 4.14.7 +./build-images.sh -v 4.14.8 ``` To get all the available script options use the -h or --help option: @@ -33,7 +33,7 @@ Usage: ./build-images.sh [OPTIONS] -f, --filebeat-module [Optional] Set Filebeat module version. By default 0.5. -r, --revision [Optional] Package revision. By default 1 -rg, --registry [Optional] Set the Docker registry to push the images. - -v, --version [Optional] Set the Wazuh version should be builded. By default, 4.14.7. + -v, --version [Optional] Set the Wazuh version should be builded. By default, 4.14.8. -m, --multiarch [Optional] Enable multi-architecture builds. -h, --help Show this help. diff --git a/build-docker-images/build-images.sh b/build-docker-images/build-images.sh index e6fca7da..a205e00e 100755 --- a/build-docker-images/build-images.sh +++ b/build-docker-images/build-images.sh @@ -8,11 +8,11 @@ # License (version 2) as published by the FSF - Free Software # Foundation. -IMAGE_TAG=4.14.7 +IMAGE_TAG=4.14.8 WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '["]tag_name["]:' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g') WAZUH_REGISTRY=docker.io -WAZUH_IMAGE_VERSION="4.14.7" +WAZUH_IMAGE_VERSION="4.14.8" WAZUH_TAG_REVISION="1" WAZUH_DEV_STAGE="" FILEBEAT_MODULE_VERSION="0.5" diff --git a/docs/dev/build-image.md b/docs/dev/build-image.md index 2a6998ac..267b07ba 100644 --- a/docs/dev/build-image.md +++ b/docs/dev/build-image.md @@ -13,7 +13,7 @@ This script initializes the environment variables needed to build each of the im The script allows you to build images from other versions of Wazuh, to do this you must use the -v or --version argument: ``` -$ build-docker-images/build-images.sh -v 4.14.7 +$ build-docker-images/build-images.sh -v 4.14.8 ``` To get all the available script options use the -h or --help option: @@ -26,7 +26,7 @@ Usage: build-docker-images/build-images.sh [OPTIONS] -d, --dev [Optional] Set the development stage you want to build, example rc4 or beta1, not used by default. -f, --filebeat-module [Optional] Set Filebeat module version. By default 0.5. -r, --revision [Optional] Package revision. By default 1 - -v, --version [Optional] Set the Wazuh version should be builded. By default, 4.14.7. + -v, --version [Optional] Set the Wazuh version should be builded. By default, 4.14.8. -h, --help Show this help. ``` \ No newline at end of file diff --git a/docs/dev/introduction.md b/docs/dev/introduction.md index 03bf7bb0..124ba34d 100644 --- a/docs/dev/introduction.md +++ b/docs/dev/introduction.md @@ -1,6 +1,6 @@ # Development Guide - Introduction -Welcome to the Development Guide for Wazuh-docker version 4.14.7. This guide is intended for developers, contributors, and advanced users who wish to understand the development aspects of the Wazuh-Docker project, build custom Docker images, or contribute to its development. +Welcome to the Development Guide for Wazuh-docker version 4.14.8. This guide is intended for developers, contributors, and advanced users who wish to understand the development aspects of the Wazuh-Docker project, build custom Docker images, or contribute to its development. ## Purpose of This Guide diff --git a/docs/dev/setup.md b/docs/dev/setup.md index 1875ac52..23957832 100644 --- a/docs/dev/setup.md +++ b/docs/dev/setup.md @@ -1,6 +1,6 @@ # Development Guide - Setup Environment -This section outlines the steps required to set up your local development environment for working with the Wazuh-Docker project (version 4.14.7). A proper setup is crucial for building images, running tests, and contributing effectively. +This section outlines the steps required to set up your local development environment for working with the Wazuh-Docker project (version 4.14.8). A proper setup is crucial for building images, running tests, and contributing effectively. ## Prerequisites @@ -26,12 +26,12 @@ Before you begin, ensure your system meets the following requirements: Follow these steps to prepare your development environment: 1. **Clone the Repository**: - Clone the `wazuh-docker` repository from GitHub. It's important to check out the specific branch you intend to work with, in this case, `4.14.7`. + Clone the `wazuh-docker` repository from GitHub. It's important to check out the specific branch you intend to work with, in this case, `4.14.8`. ```bash git clone [https://github.com/wazuh/wazuh-docker.git](https://github.com/wazuh/wazuh-docker.git) cd wazuh-docker - git checkout v4.14.7 + git checkout v4.14.8 ``` 2. **Verify Docker Installation**: diff --git a/docs/ref/Introduction/description.md b/docs/ref/Introduction/description.md index ee14fa1c..b7e1db0a 100644 --- a/docs/ref/Introduction/description.md +++ b/docs/ref/Introduction/description.md @@ -1,6 +1,6 @@ # Reference Manual - Description -This section provides a detailed description of Wazuh-docker (version 4.14.7), its components, and its architecture when deployed using Docker containers. Understanding these aspects is key to effectively deploying and managing your Wazuh environment. +This section provides a detailed description of Wazuh-docker (version 4.14.8), its components, and its architecture when deployed using Docker containers. Understanding these aspects is key to effectively deploying and managing your Wazuh environment. ## What is Wazuh? @@ -18,7 +18,7 @@ Wazuh-docker is a project that provides Docker images and `docker compose` confi ## Core Components in Wazuh-Docker -The Wazuh-Docker project typically provides images for the following core Wazuh components, adapted for version 4.14.7: +The Wazuh-Docker project typically provides images for the following core Wazuh components, adapted for version 4.14.8: 1. **Wazuh Manager**: - The central component that collects and analyzes data from deployed Wazuh agents. @@ -28,7 +28,7 @@ The Wazuh-Docker project typically provides images for the following core Wazuh 2. **Wazuh Indexer**: - A highly scalable, full-text search and analytics engine. - Based on OpenSearch (or historically Elasticsearch), it stores and indexes alerts and monitoring data generated by the Wazuh manager. - - The Wazuh indexer container provides the data persistence layer for Wazuh alerts and events. For version 4.14.7, this is typically an OpenSearch-based component. + - The Wazuh indexer container provides the data persistence layer for Wazuh alerts and events. For version 4.14.8, this is typically an OpenSearch-based component. 3. **Wazuh Dashboard**: - A flexible visualization tool based on OpenSearch Dashboards (or historically Kibana). diff --git a/docs/ref/Introduction/introduction.md b/docs/ref/Introduction/introduction.md index 65f09a77..40d7519f 100644 --- a/docs/ref/Introduction/introduction.md +++ b/docs/ref/Introduction/introduction.md @@ -1,6 +1,6 @@ # Reference Manual - Introduction -Welcome to the Reference Manual for Wazuh-Docker, version 4.14.7. This manual provides comprehensive information about deploying, configuring, and managing your Wazuh environment using Docker. +Welcome to the Reference Manual for Wazuh-Docker, version 4.14.8. This manual provides comprehensive information about deploying, configuring, and managing your Wazuh environment using Docker. ## Purpose of This Manual @@ -44,4 +44,4 @@ This manual is structured to help you find information efficiently: - If you need to customize your deployment, refer to the [Configuration](configuration/configuration.md) section. - For specific terms or concepts, consult the [Glossary](glossary.md). -This manual refers to version 4.14.7 of Wazuh-Docker. Ensure you are using the documentation that corresponds to your deployed version. +This manual refers to version 4.14.8 of Wazuh-Docker. Ensure you are using the documentation that corresponds to your deployed version. diff --git a/docs/ref/configuration/configuration-files.md b/docs/ref/configuration/configuration-files.md index 11b8464c..647f3302 100644 --- a/docs/ref/configuration/configuration-files.md +++ b/docs/ref/configuration/configuration-files.md @@ -29,4 +29,4 @@ ``` -Consult the official Wazuh documentation for version 4.14.7 for detailed information on all possible configuration parameters for each component. +Consult the official Wazuh documentation for version 4.14.8 for detailed information on all possible configuration parameters for each component. diff --git a/docs/ref/configuration/configuration.md b/docs/ref/configuration/configuration.md index 126fe672..08c12984 100644 --- a/docs/ref/configuration/configuration.md +++ b/docs/ref/configuration/configuration.md @@ -1,6 +1,6 @@ # Reference Manual - Configuration -This section details how to configure your Wazuh-Docker deployment (version 4.14.7). Proper configuration is key to tailoring the Wazuh stack to your specific needs, managing data persistence, and integrating with your environment. +This section details how to configure your Wazuh-Docker deployment (version 4.14.8). Proper configuration is key to tailoring the Wazuh stack to your specific needs, managing data persistence, and integrating with your environment. ## Overview of Configuration Methods diff --git a/docs/ref/getting-started/deployment/deployment.md b/docs/ref/getting-started/deployment/deployment.md index 744c07ce..d91e207e 100644 --- a/docs/ref/getting-started/deployment/deployment.md +++ b/docs/ref/getting-started/deployment/deployment.md @@ -1,6 +1,6 @@ # Reference Manual - Deployment -This section provides detailed instructions for deploying Wazuh-Docker (version 4.14.7) in various configurations. Choose the deployment model that best suits your needs, from simple single-node setups for testing to more robust multi-node configurations for production environments. +This section provides detailed instructions for deploying Wazuh-Docker (version 4.14.8) in various configurations. Choose the deployment model that best suits your needs, from simple single-node setups for testing to more robust multi-node configurations for production environments. ## Overview of Deployment Options @@ -24,11 +24,11 @@ Ensure you have: - Met all the [System Requirements](ref/getting-started/requirements.md). - Installed Docker and Docker Compose on your host(s). -- Cloned the `wazuh-docker` repository (version `4.14.7`) or downloaded the necessary deployment files. +- Cloned the `wazuh-docker` repository (version `4.14.8`) or downloaded the necessary deployment files. ```bash git clone [https://github.com/wazuh/wazuh-docker.git](https://github.com/wazuh/wazuh-docker.git) cd wazuh-docker - git checkout v4.14.7 + git checkout v4.14.8 ``` - Made a backup of any existing Wazuh data if you are migrating or upgrading. diff --git a/docs/ref/getting-started/getting-started.md b/docs/ref/getting-started/getting-started.md index a1b41a89..e60d673d 100644 --- a/docs/ref/getting-started/getting-started.md +++ b/docs/ref/getting-started/getting-started.md @@ -1,6 +1,6 @@ # Reference Manual - Getting Started -This section guides you through the initial steps to get your Wazuh-docker (version 4.14.7) environment up and running. We will cover the prerequisites and point you to the deployment instructions. +This section guides you through the initial steps to get your Wazuh-docker (version 4.14.8) environment up and running. We will cover the prerequisites and point you to the deployment instructions. ## Overview @@ -27,11 +27,11 @@ Before diving into the deployment, please ensure you have reviewed: Verify that your host system has sufficient RAM, CPU, and disk space. Ensure Docker and Docker Compose are installed and functioning correctly. 2. **Obtain Wazuh-docker Configuration**: - You'll need the Docker Compose files and any associated configuration files from the `wazuh-docker` repository for version 4.14.7. + You'll need the Docker Compose files and any associated configuration files from the `wazuh-docker` repository for version 4.14.8. ```bash git clone [https://github.com/wazuh/wazuh-docker.git](https://github.com/wazuh/wazuh-docker.git) cd wazuh-docker - git checkout v4.14.7 + git checkout v4.14.8 # Navigate to the specific docker-compose directory, e.g., single-node or multi-node # cd docker-compose/single-node/ (example path) ``` diff --git a/docs/ref/getting-started/requirements.md b/docs/ref/getting-started/requirements.md index 8bc1f463..7c8f9c0c 100644 --- a/docs/ref/getting-started/requirements.md +++ b/docs/ref/getting-started/requirements.md @@ -1,6 +1,6 @@ # Reference Manual - Requirements -Before deploying Wazuh-Docker (version 4.14.7), it's essential to ensure your environment meets the necessary hardware and software requirements. Meeting these prerequisites will help ensure a stable and performant Wazuh deployment. +Before deploying Wazuh-Docker (version 4.14.8), it's essential to ensure your environment meets the necessary hardware and software requirements. Meeting these prerequisites will help ensure a stable and performant Wazuh deployment. ## Host System Requirements diff --git a/docs/ref/glossary.md b/docs/ref/glossary.md index 877894da..8aed5e75 100644 --- a/docs/ref/glossary.md +++ b/docs/ref/glossary.md @@ -1,6 +1,6 @@ # Reference Manual - Glossary -This glossary defines key terms and concepts related to Wazuh, Docker, and their use together in the Wazuh-Docker project (version 4.14.7). +This glossary defines key terms and concepts related to Wazuh, Docker, and their use together in the Wazuh-Docker project (version 4.14.8). --- @@ -22,7 +22,7 @@ This glossary defines key terms and concepts related to Wazuh, Docker, and their **D** -- **Dashboard (Wazuh Dashboard / OpenSearch Dashboards / Kibana)**: A web-based visualization tool used to explore, analyze, and visualize data stored in the Wazuh Indexer. It provides dashboards, visualizations, and a query interface for security events and alerts. For Wazuh 4.14.7, this is typically OpenSearch Dashboards. +- **Dashboard (Wazuh Dashboard / OpenSearch Dashboards / Kibana)**: A web-based visualization tool used to explore, analyze, and visualize data stored in the Wazuh Indexer. It provides dashboards, visualizations, and a query interface for security events and alerts. For Wazuh 4.14.8, this is typically OpenSearch Dashboards. - **Decoder**: A component in the Wazuh Manager that parses and extracts relevant information (fields) from raw log messages or event data. - **Docker**: An open platform for developing, shipping, and running applications inside containers. - **Docker Compose**: A tool for defining and running multi-container Docker applications. It uses a YAML file (`docker-compose.yml`) to configure the application's services, networks, and volumes. @@ -42,7 +42,7 @@ This glossary defines key terms and concepts related to Wazuh, Docker, and their **I** -- **Indexer (Wazuh Indexer / OpenSearch / Elasticsearch)**: The component responsible for storing, indexing, and making searchable the alerts and event data generated by the Wazuh Manager. For Wazuh 4.14.7, this is typically OpenSearch. +- **Indexer (Wazuh Indexer / OpenSearch / Elasticsearch)**: The component responsible for storing, indexing, and making searchable the alerts and event data generated by the Wazuh Manager. For Wazuh 4.14.8, this is typically OpenSearch. **L** diff --git a/multi-node/docker-compose.yml b/multi-node/docker-compose.yml index ace50751..5381e42c 100644 --- a/multi-node/docker-compose.yml +++ b/multi-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.master: - image: wazuh/wazuh-manager:4.14.7 + image: wazuh/wazuh-manager:4.14.8 hostname: wazuh.master restart: always ulimits: @@ -43,7 +43,7 @@ services: - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf wazuh.worker: - image: wazuh/wazuh-manager:4.14.7 + image: wazuh/wazuh-manager:4.14.8 hostname: wazuh.worker restart: always ulimits: @@ -79,7 +79,7 @@ services: - ./config/wazuh_cluster/wazuh_worker.conf:/wazuh-config-mount/etc/ossec.conf wazuh1.indexer: - image: wazuh/wazuh-indexer:4.14.7 + image: wazuh/wazuh-indexer:4.14.8 hostname: wazuh1.indexer restart: always ports: @@ -105,7 +105,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh2.indexer: - image: wazuh/wazuh-indexer:4.14.7 + image: wazuh/wazuh-indexer:4.14.8 hostname: wazuh2.indexer restart: always environment: @@ -127,7 +127,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh3.indexer: - image: wazuh/wazuh-indexer:4.14.7 + image: wazuh/wazuh-indexer:4.14.8 hostname: wazuh3.indexer restart: always environment: @@ -149,7 +149,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh.dashboard: - image: wazuh/wazuh-dashboard:4.14.7 + image: wazuh/wazuh-dashboard:4.14.8 hostname: wazuh.dashboard restart: always ports: diff --git a/single-node/docker-compose.yml b/single-node/docker-compose.yml index 5f1a7b07..f641e274 100644 --- a/single-node/docker-compose.yml +++ b/single-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.manager: - image: wazuh/wazuh-manager:4.14.7 + image: wazuh/wazuh-manager:4.14.8 hostname: wazuh.manager restart: always ulimits: @@ -44,7 +44,7 @@ services: - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf wazuh.indexer: - image: wazuh/wazuh-indexer:4.14.7 + image: wazuh/wazuh-indexer:4.14.8 hostname: wazuh.indexer restart: always ports: @@ -69,7 +69,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh.dashboard: - image: wazuh/wazuh-dashboard:4.14.7 + image: wazuh/wazuh-dashboard:4.14.8 hostname: wazuh.dashboard restart: always ports: diff --git a/wazuh-agent/docker-compose.yml b/wazuh-agent/docker-compose.yml index e5785236..84c300fa 100644 --- a/wazuh-agent/docker-compose.yml +++ b/wazuh-agent/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.agent: - image: wazuh/wazuh-agent:4.14.7 + image: wazuh/wazuh-agent:4.14.8 restart: always environment: - WAZUH_MANAGER_SERVER= From 1f2b777866ad6cd9e3bf9264079a704cbe3fefc0 Mon Sep 17 00:00:00 2001 From: Victor Carlos Erenu Date: Fri, 3 Jul 2026 22:14:56 +0700 Subject: [PATCH 03/25] Add authd.pass file configuration on Wazuh agent container deployment --- build-docker-images/wazuh-agent/Dockerfile | 3 +-- .../wazuh-agent/config/etc/cont-init.d/0-wazuh-init | 9 +++++++++ build-docker-images/wazuh-dashboard/Dockerfile | 3 +-- build-docker-images/wazuh-indexer/Dockerfile | 3 +-- wazuh-agent/docker-compose.yml | 1 + 5 files changed, 13 insertions(+), 6 deletions(-) diff --git a/build-docker-images/wazuh-agent/Dockerfile b/build-docker-images/wazuh-agent/Dockerfile index 7cb8ea35..da45f1ce 100644 --- a/build-docker-images/wazuh-agent/Dockerfile +++ b/build-docker-images/wazuh-agent/Dockerfile @@ -36,8 +36,7 @@ RUN dnf install procps shadow-utils -y && \ curl -o /wazuh-agent.rpm "${agent_url}" && \ dnf install /wazuh-agent.rpm -y && \ rm -rf /wazuh-agent.rpm && \ - dnf clean all && \ - sed -i '//d' /var/ossec/etc/ossec.conf + dnf clean all # Download tini static binary (no external library dependencies) RUN curl --fail --silent -L \ diff --git a/build-docker-images/wazuh-agent/config/etc/cont-init.d/0-wazuh-init b/build-docker-images/wazuh-agent/config/etc/cont-init.d/0-wazuh-init index c7802236..f9efca25 100644 --- a/build-docker-images/wazuh-agent/config/etc/cont-init.d/0-wazuh-init +++ b/build-docker-images/wazuh-agent/config/etc/cont-init.d/0-wazuh-init @@ -62,6 +62,15 @@ set_manager_conn() { sed -i "s#
CHANGE_MANAGER_IP
#
$WAZUH_MANAGER_SERVER
#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf sed -i "s#CHANGE_ENROLL_IP#$WAZUH_REGISTRATION_SERVER#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf sed -i "s#CHANGE_AGENT_NAME#$WAZUH_AGENT_NAME#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf + if [ -n "$WAZUH_REGISTRATION_PASSWORD" ]; then + set +x + cat << EOF > /var/ossec/etc/authd.pass +$WAZUH_REGISTRATION_PASSWORD +EOF + set -x + else + echo "WAZUH_REGISTRATION_PASSWORD is not set; the authd.pass configuration is omitted." + fi } ############################################################################## diff --git a/build-docker-images/wazuh-dashboard/Dockerfile b/build-docker-images/wazuh-dashboard/Dockerfile index 40c287ef..6a004691 100644 --- a/build-docker-images/wazuh-dashboard/Dockerfile +++ b/build-docker-images/wazuh-dashboard/Dockerfile @@ -46,8 +46,7 @@ RUN setcap 'cap_net_bind_service=-ep' /usr/share/wazuh-dashboard/node/bin/node ################################################################################ # Build stage 1 (the current Wazuh dashboard image): -# -# Copy wazuh-dashboard from stage 0 +# Copy wazuh-dashboard from builder # Add entrypoint # Add wazuh_dashboard_config ################################################################################ diff --git a/build-docker-images/wazuh-indexer/Dockerfile b/build-docker-images/wazuh-indexer/Dockerfile index 80c528e3..3d2c4758 100644 --- a/build-docker-images/wazuh-indexer/Dockerfile +++ b/build-docker-images/wazuh-indexer/Dockerfile @@ -41,8 +41,7 @@ RUN yum install curl-minimal shadow-utils findutils hostname -y && \ ################################################################################ # Build stage 1 (the actual Wazuh indexer image): -# -# Copy wazuh-indexer from stage 0 +# Copy wazuh-indexer from builder # Add entrypoint ################################################################################ FROM amazonlinux:2023 diff --git a/wazuh-agent/docker-compose.yml b/wazuh-agent/docker-compose.yml index 842677e1..303f1ca3 100644 --- a/wazuh-agent/docker-compose.yml +++ b/wazuh-agent/docker-compose.yml @@ -5,3 +5,4 @@ services: restart: always environment: - WAZUH_MANAGER_SERVER= + - WAZUH_REGISTRATION_PASSWORD= From ffd39b0191bc172b8fc68398213fd1459bd7f02e Mon Sep 17 00:00:00 2001 From: Victor Carlos Erenu Date: Fri, 3 Jul 2026 22:24:59 +0700 Subject: [PATCH 04/25] Add Wazuh agent authd.pass configuration in repository documentation --- docs/ref/getting-started/deployment/wazuh-agent.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/ref/getting-started/deployment/wazuh-agent.md b/docs/ref/getting-started/deployment/wazuh-agent.md index 718718a3..fbf6da72 100644 --- a/docs/ref/getting-started/deployment/wazuh-agent.md +++ b/docs/ref/getting-started/deployment/wazuh-agent.md @@ -19,9 +19,11 @@ Follow these steps to deploy the Wazuh agent using Docker. # ... environment: - WAZUH_MANAGER_SERVER= + - WAZUH_REGISTRATION_PASSWORD= # ... ``` - **Note:** Replace `` with the actual IP address or hostname of your Wazuh manager. + **Note:** Replaces `` with the actual IP address or hostname of your Wazuh manager. + **Note:** Replaces `` with the password configured in the `/var/wazuh-manager/etc/authd.pass` file of the Wazuh manager server where you will connect. 3. Start the environment using `docker compose`: From e153333402e93cef3343dfc462ed06d7c589fd3c Mon Sep 17 00:00:00 2001 From: Victor Carlos Erenu Date: Fri, 3 Jul 2026 22:43:24 +0700 Subject: [PATCH 05/25] Update changelog --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 42c8b24f..ebdebb62 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,7 @@ All notable changes to this project will be documented in this file. ### Added +- Set authd password in agents installation. ([#2524](https://github.com/wazuh/wazuh-docker/issues/2524)) - Added bump-issue-link support for Revert Stage Bump. ([#2505](https://github.com/wazuh/wazuh-docker/pull/2505)) - Add integration test module docs ([#2491](https://github.com/wazuh/wazuh-docker/pull/2491)) - Implement the wazuh-docker integration testing module ([#2188](https://github.com/wazuh/wazuh-docker/issues/2188)) From 577f2e0af7c7d1ebf275943dc81f33f5afd3bad6 Mon Sep 17 00:00:00 2001 From: wazuhci <22834044+wazuhci@users.noreply.github.com> Date: Mon, 6 Jul 2026 15:55:07 +0000 Subject: [PATCH 06/25] feat: bump 5.0.0 --- VERSION.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION.json b/VERSION.json index 9cfe1722..f7d92283 100644 --- a/VERSION.json +++ b/VERSION.json @@ -1,4 +1,4 @@ { "version": "5.0.0", - "stage": "beta3" + "stage": "beta4" } From 3f2ebfac37c5c60ba56838b097bd84e9eb2444a4 Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Fri, 3 Jul 2026 16:08:43 -0300 Subject: [PATCH 07/25] Fix bumper workflow failure when bump produces no changes --- .github/workflows/5_bumper_repository.yml | 25 ++++++++++++++++------- 1 file changed, 18 insertions(+), 7 deletions(-) diff --git a/.github/workflows/5_bumper_repository.yml b/.github/workflows/5_bumper_repository.yml index 281b4775..43241783 100644 --- a/.github/workflows/5_bumper_repository.yml +++ b/.github/workflows/5_bumper_repository.yml @@ -144,10 +144,17 @@ jobs: bash ${{ env.BUMP_SCRIPT_PATH }} ${{ steps.vars.outputs.script_params }} - name: Commit changes (Bump) + id: bump_commit if: inputs.revert != true run: | git add . - git commit -m "feat: bump ${{ github.ref_name }}" + if git diff --staged --quiet; then + echo "Nothing to bump: the repository is already at the requested version/stage. Skipping commit." + echo "has_changes=false" >> $GITHUB_OUTPUT + else + git commit -m "feat: bump ${{ github.ref_name }}" + echo "has_changes=true" >> $GITHUB_OUTPUT + fi - name: Fetch full history (Revert) if: inputs.revert == true @@ -198,13 +205,13 @@ jobs: fi - name: Push changes - if: inputs.revert != true || (inputs.revert == true && steps.revert_step.outputs.has_changes == 'true') + if: (inputs.revert != true && steps.bump_commit.outputs.has_changes == 'true') || (inputs.revert == true && steps.revert_step.outputs.has_changes == 'true') run: | git push origin ${{ steps.vars.outputs.branch_name }} - name: Create pull request id: create_pr - if: inputs.revert != true || (inputs.revert == true && steps.revert_step.outputs.has_changes == 'true') + if: (inputs.revert != true && steps.bump_commit.outputs.has_changes == 'true') || (inputs.revert == true && steps.revert_step.outputs.has_changes == 'true') run: | gh auth setup-git PR_URL=$(gh pr create \ @@ -217,7 +224,7 @@ jobs: echo "pull_request_url=${PR_URL}" >> $GITHUB_OUTPUT - name: Merge pull request - if: inputs.revert != true || (inputs.revert == true && steps.revert_step.outputs.has_changes == 'true') + if: (inputs.revert != true && steps.bump_commit.outputs.has_changes == 'true') || (inputs.revert == true && steps.revert_step.outputs.has_changes == 'true') run: | # Any checks for the PR are bypassed since the branch is expected to be functional gh pr merge "${{ steps.create_pr.outputs.pull_request_url }}" --merge --admin @@ -225,9 +232,13 @@ jobs: - name: Show logs if: inputs.revert != true run: | - echo "Bump complete." - echo "Branch: ${{ steps.vars.outputs.branch_name }}" - echo "PR: ${{ steps.create_pr.outputs.pull_request_url }}" + if [[ "${{ steps.bump_commit.outputs.has_changes }}" == "true" ]]; then + echo "Bump complete." + echo "Branch: ${{ steps.vars.outputs.branch_name }}" + echo "PR: ${{ steps.create_pr.outputs.pull_request_url }}" + else + echo "Bump skipped: the repository is already at the requested version/stage." + fi echo "Bumper scripts logs:" cat ${BUMP_LOG_PATH}/repository_bumper*log From 1c8583f366520fcfc836d92adb3f8ef958ea5975 Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Mon, 6 Jul 2026 10:13:10 -0300 Subject: [PATCH 08/25] Fix bumper workflow failure when bump produces no changes --- .github/workflows/4_bumper_repository.yml | 23 ++++++++++++++++++----- 1 file changed, 18 insertions(+), 5 deletions(-) diff --git a/.github/workflows/4_bumper_repository.yml b/.github/workflows/4_bumper_repository.yml index bafe7557..23694a04 100644 --- a/.github/workflows/4_bumper_repository.yml +++ b/.github/workflows/4_bumper_repository.yml @@ -110,13 +110,21 @@ jobs: bash ${{ env.BUMP_SCRIPT_PATH }} ${{ steps.vars.outputs.script_params }} - name: Commit and push changes + id: bump_commit run: | git add . - git commit -m "feat: bump ${{ github.ref_name }}" - git push origin ${{ steps.vars.outputs.branch_name }} + if git diff --staged --quiet; then + echo "Nothing to bump: the repository is already at the requested version/stage. Skipping commit." + echo "has_changes=false" >> $GITHUB_OUTPUT + else + git commit -m "feat: bump ${{ github.ref_name }}" + git push origin ${{ steps.vars.outputs.branch_name }} + echo "has_changes=true" >> $GITHUB_OUTPUT + fi - name: Create pull request id: create_pr + if: steps.bump_commit.outputs.has_changes == 'true' run: | gh auth setup-git PR_URL=$(gh pr create \ @@ -129,14 +137,19 @@ jobs: echo "pull_request_url=${PR_URL}" >> $GITHUB_OUTPUT - name: Merge pull request + if: steps.bump_commit.outputs.has_changes == 'true' run: | # Any checks for the PR are bypassed since the branch is expected to be functional (i.e. the bump process does not introduce any bugs) gh pr merge "${{ steps.create_pr.outputs.pull_request_url }}" --merge --admin - name: Show logs run: | - echo "Bump complete." - echo "Branch: ${{ steps.vars.outputs.branch_name }}" - echo "PR: ${{ steps.create_pr.outputs.pull_request_url }}" + if [[ "${{ steps.bump_commit.outputs.has_changes }}" == "true" ]]; then + echo "Bump complete." + echo "Branch: ${{ steps.vars.outputs.branch_name }}" + echo "PR: ${{ steps.create_pr.outputs.pull_request_url }}" + else + echo "Bump skipped: the repository is already at the requested version/stage." + fi echo "Bumper scripts logs:" cat ${BUMP_LOG_PATH}/repository_bumper*log From 80807a1cf9cbf0aa4043a8c934af760c345aac1a Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Tue, 7 Jul 2026 09:46:37 -0300 Subject: [PATCH 09/25] Update CHANGELOG --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 31447766..622e85d8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,7 +14,7 @@ All notable changes to this project will be documented in this file. ### Fixed -- None +- Fix bumper workflow failure when bump produces no changes ([#2534](https://github.com/wazuh/wazuh-docker/pull/2534)) ### Deleted From 495b67251e364fede7dd220f074efe37241198e4 Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Tue, 7 Jul 2026 09:46:59 -0300 Subject: [PATCH 10/25] Update CHANGELOG --- CHANGELOG.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ebdebb62..d7a7da87 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -65,6 +65,7 @@ All notable changes to this project will be documented in this file. ### Fixed +- Fix bumper workflow failure when bump produces no changes ([#2533](https://github.com/wazuh/wazuh-docker/pull/2533)) - Bumper script issue when the tag is set to false ([#2477](https://github.com/wazuh/wazuh-docker/issues/2477)) - Fix reported WF vulnerabilities ([#2443](https://github.com/wazuh/wazuh-docker/issues/2443)) - Adapt Wazuh manager healthcheck with local binaries ([#2422](https://github.com/wazuh/wazuh-docker/issues/2422)) @@ -76,4 +77,4 @@ All notable changes to this project will be documented in this file. - Development - DevOps 5.0 adaptation - Docker - Delete lists directory references ([#2128](https://github.com/wazuh/wazuh-docker/issues/2128)) ## Prior version -- []() \ No newline at end of file +- []() From daa919db58ec7aad2b2567e2b8aeac76400a9f67 Mon Sep 17 00:00:00 2001 From: Vikman Fernandez-Castro Date: Tue, 7 Jul 2026 16:12:20 +0200 Subject: [PATCH 11/25] docs(security): update security policy --- SECURITY.md | 27 +++++++++++++++++++-------- 1 file changed, 19 insertions(+), 8 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 4d35ef4f..6ab811e0 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,6 +1,6 @@ # Wazuh Open Source Project Security Policy -Version: 2023-06-12 +Version: 2026-07-06 ## Introduction This document outlines the Security Policy for Wazuh's open source projects. It emphasizes our commitment to maintain a secure environment for our users and contributors, and reflects our belief in the power of collaboration to identify and resolve security vulnerabilities. @@ -13,16 +13,27 @@ If you believe you've discovered a potential security vulnerability in one of ou Please submit your findings as security advisories under the "Security" tab in the relevant GitHub repository. Alternatively, you may send the details of your findings to [security@wazuh.com](mailto:security@wazuh.com). +## Reporting Vulnerabilities in Non-GA Versions + +Wazuh publishes pre-release versions (Alphas, Betas, and Release Candidates) of its open source projects ahead of General Availability (GA) to gather community feedback. If you discover a potential security vulnerability in one of these non-GA versions, please report it following the process described above. + +Upon receiving such a report, we will determine whether the vulnerability: + +- **Affects only non-GA version(s)**: We will manage the report privately by opening a GitHub Security Advisory (GHSA). Since the affected code has not been part of a GA release, the vulnerability is not eligible for a CVE ID, consistent with the [CNA Operational Rules](https://www.cve.org/ResourcesSupport/AllResources/CNARules). Once resolved, the GHSA will be converted into a public issue instead of a security advisory. +- **Also affects a previously released GA version**: We will continue managing the report as a GHSA and evaluate requesting a CVE ID for the GA-affected versions, in accordance with the eligibility criteria in the CNA Operational Rules. + ## Vulnerability Disclosure Policy Upon receiving a report of a potential vulnerability, our team will initiate an investigation. If the reported issue is confirmed as a vulnerability, we will take the following steps: -1. Acknowledgment: We will acknowledge the receipt of your vulnerability report and begin our investigation. -2. Validation: We will validate the issue and work on reproducing it in our environment. -3. Remediation: We will work on a fix and thoroughly test it -4. Release & Disclosure: After 90 days from the discovery of the vulnerability, or as soon as a fix is ready and thoroughly tested (whichever comes first), we will release a security update for the affected project. We will also publicly disclose the vulnerability by publishing a CVE (Common Vulnerabilities and Exposures) and acknowledging the discovering party. -5. Exceptions: In order to preserve the security of the Wazuh community at large, we might extend the disclosure period to allow users to patch their deployments. +1. **Acknowledgment**: We will acknowledge the receipt of your vulnerability report and begin our investigation. +2. **Validation**: We will validate the issue and work on reproducing it in our environment. +3. **Remediation**: We will develop a fix, have it reviewed, and merge it once thoroughly tested. +4. **Release**: We will publish a security release for the affected project that includes the fix. +5. **Rollout**: We will confirm that the fix has been applied to environments managed by Wazuh before proceeding with disclosure. +6. **Disclosure**: Once the fix has been released and confirmed in managed environments, we will publicly disclose the vulnerability by publishing a CVE (Common Vulnerabilities and Exposures), where applicable, and acknowledging the discovering party. +7. **Exceptions**: In order to preserve the security of the Wazuh community at large, we might extend the disclosure period to allow users to patch their deployments. -This 90-day period allows for end-users to update their systems and minimizes the risk of widespread exploitation of the vulnerability. +Steps 1 through 6 will be completed within 90 days from the report of the vulnerability. This period allows for end-users to update their systems and minimizes the risk of widespread exploitation of the vulnerability. ## Automatic Scanning We leverage GitHub Actions to perform automated scans of our supply chain. These scans assist us in identifying vulnerabilities and outdated dependencies in a proactive and timely manner. @@ -42,4 +53,4 @@ We ask that all users and contributors respect this policy and the security of o ## Changes to this Security Policy This policy may be revised from time to time. Each version of the policy will be identified at the top of the page by its effective date. -If you have any questions about this Security Policy, please contact us at [security@wazuh.com](mailto:security@wazuh.com) +If you have any questions about this Security Policy, please contact us at [security@wazuh.com](mailto:security@wazuh.com) \ No newline at end of file From a6558e8f4a9baca467e9f7c62d366848e9aed864 Mon Sep 17 00:00:00 2001 From: wazuhci <22834044+wazuhci@users.noreply.github.com> Date: Wed, 8 Jul 2026 17:11:16 +0000 Subject: [PATCH 12/25] feat: bump 4.14.7 --- VERSION.json | 2 +- multi-node/docker-compose.yml | 12 ++++++------ single-node/docker-compose.yml | 6 +++--- wazuh-agent/docker-compose.yml | 2 +- 4 files changed, 11 insertions(+), 11 deletions(-) diff --git a/VERSION.json b/VERSION.json index 3b820185..69fa8c1a 100644 --- a/VERSION.json +++ b/VERSION.json @@ -1,4 +1,4 @@ { "version": "4.14.7", - "stage": "alpha0" + "stage": "rc1" } diff --git a/multi-node/docker-compose.yml b/multi-node/docker-compose.yml index ace50751..376cd27d 100644 --- a/multi-node/docker-compose.yml +++ b/multi-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.master: - image: wazuh/wazuh-manager:4.14.7 + image: wazuh/wazuh-manager:4.14.7-rc1 hostname: wazuh.master restart: always ulimits: @@ -43,7 +43,7 @@ services: - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf wazuh.worker: - image: wazuh/wazuh-manager:4.14.7 + image: wazuh/wazuh-manager:4.14.7-rc1 hostname: wazuh.worker restart: always ulimits: @@ -79,7 +79,7 @@ services: - ./config/wazuh_cluster/wazuh_worker.conf:/wazuh-config-mount/etc/ossec.conf wazuh1.indexer: - image: wazuh/wazuh-indexer:4.14.7 + image: wazuh/wazuh-indexer:4.14.7-rc1 hostname: wazuh1.indexer restart: always ports: @@ -105,7 +105,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh2.indexer: - image: wazuh/wazuh-indexer:4.14.7 + image: wazuh/wazuh-indexer:4.14.7-rc1 hostname: wazuh2.indexer restart: always environment: @@ -127,7 +127,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh3.indexer: - image: wazuh/wazuh-indexer:4.14.7 + image: wazuh/wazuh-indexer:4.14.7-rc1 hostname: wazuh3.indexer restart: always environment: @@ -149,7 +149,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh.dashboard: - image: wazuh/wazuh-dashboard:4.14.7 + image: wazuh/wazuh-dashboard:4.14.7-rc1 hostname: wazuh.dashboard restart: always ports: diff --git a/single-node/docker-compose.yml b/single-node/docker-compose.yml index 5f1a7b07..97a6e8cd 100644 --- a/single-node/docker-compose.yml +++ b/single-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.manager: - image: wazuh/wazuh-manager:4.14.7 + image: wazuh/wazuh-manager:4.14.7-rc1 hostname: wazuh.manager restart: always ulimits: @@ -44,7 +44,7 @@ services: - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf wazuh.indexer: - image: wazuh/wazuh-indexer:4.14.7 + image: wazuh/wazuh-indexer:4.14.7-rc1 hostname: wazuh.indexer restart: always ports: @@ -69,7 +69,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh.dashboard: - image: wazuh/wazuh-dashboard:4.14.7 + image: wazuh/wazuh-dashboard:4.14.7-rc1 hostname: wazuh.dashboard restart: always ports: diff --git a/wazuh-agent/docker-compose.yml b/wazuh-agent/docker-compose.yml index e5785236..4e3e9662 100644 --- a/wazuh-agent/docker-compose.yml +++ b/wazuh-agent/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.agent: - image: wazuh/wazuh-agent:4.14.7 + image: wazuh/wazuh-agent:4.14.7-rc1 restart: always environment: - WAZUH_MANAGER_SERVER= From 6edf9cf5988c22fefa9099cd17cb1acc26afe2d9 Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Wed, 8 Jul 2026 14:19:47 -0300 Subject: [PATCH 13/25] Add new WF for changelog check --- .github/workflows/5_changelog_check.yml | 62 +++++++++++++++++++++++++ CHANGELOG.md | 3 -- 2 files changed, 62 insertions(+), 3 deletions(-) create mode 100644 .github/workflows/5_changelog_check.yml diff --git a/.github/workflows/5_changelog_check.yml b/.github/workflows/5_changelog_check.yml new file mode 100644 index 00000000..938cada5 --- /dev/null +++ b/.github/workflows/5_changelog_check.yml @@ -0,0 +1,62 @@ +name: 5.x Changelog check + +on: + pull_request: + types: [opened, synchronize, reopened, ready_for_review, labeled, unlabeled] + +jobs: + changelog_check: + runs-on: codebuild-github-actions-codebuild-runner-devops-amd-${{ github.run_id }}-${{ github.run_attempt }} + if: ${{ github.event_name == 'pull_request' && !github.event.pull_request.draft && !contains(github.event.pull_request.labels.*.name, 'no-changelog') }} + + permissions: + contents: read + + steps: + - name: Checkout repository + uses: actions/checkout@v6 + with: + fetch-depth: 0 + + - name: Validate CHANGELOG.md changes + env: + BASE_REF: ${{ github.base_ref }} + run: | + UPDATED="✅" FORMAT="—" INVALID="" + + ADDED=$(git diff -U0 "origin/${BASE_REF}...HEAD" -- CHANGELOG.md | grep -E '^\+[^+]' | sed 's/^+//' || true) + if [ -z "$ADDED" ]; then + UPDATED="❌" + echo "::error::CHANGELOG.md was not updated with new entries. Add one or add the 'no-changelog' label to skip this check." + else + FORMAT="✅" + + ENTRY_REGEX='^- .+ \(\[#[0-9]+\]\(https://github\.com/[^)]+/(issues|pull)/[0-9]+\)\)$' + INVALID=$(echo "$ADDED" | grep -E '^- ' | grep -vx -- '- None' | grep -vE "$ENTRY_REGEX" || true) + if [ -n "$INVALID" ]; then + FORMAT="❌" + echo "::error::Invalid CHANGELOG.md entries. Expected format: '- Description ([#123](https://github.com///issues/123))'. Offending lines:" + echo "$INVALID" + fi + fi + + { + echo "## Changelog check" + echo "" + echo "| Check | Result |" + echo "|---|---|" + echo "| CHANGELOG.md has new entries | $UPDATED |" + echo "| Entry format | $FORMAT |" + if [ -n "$INVALID" ]; then + echo "" + echo "Offending lines:" + echo '```' + echo "$INVALID" + echo '```' + fi + } >> "$GITHUB_STEP_SUMMARY" + + if [ "$UPDATED" != "✅" ] || [ "$FORMAT" != "✅" ]; then + exit 1 + fi + echo "CHANGELOG.md update is valid." diff --git a/CHANGELOG.md b/CHANGELOG.md index d7a7da87..cdeb2413 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,3 @@ -# Change Log -All notable changes to this project will be documented in this file. - ## [v5.0.0] ### Added From 031c66c67109504c3c350072bbea4cdf5217b955 Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Wed, 8 Jul 2026 14:30:59 -0300 Subject: [PATCH 14/25] Update CHANGELOG.md --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index cdeb2413..2b823208 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -12,6 +12,7 @@ ### Changed +- Add new WF for changelog check ([#2539](https://github.com/wazuh/wazuh-docker/pull/2539)) - Change artifact upload and download ([#2502](https://github.com/wazuh/wazuh-docker/issues/2502)) - Change runners on repository workflows 5.x ([#2471](https://github.com/wazuh/wazuh-docker/issues/2471)) - PR revamp modifications 5.x ([#2446](https://github.com/wazuh/wazuh-docker/issues/2446)) From ecea95427b879b0e1629aa3cb402010c16edc2e7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Carlos=20Anguita=20L=C3=B3pez?= Date: Thu, 9 Jul 2026 12:03:51 +0200 Subject: [PATCH 15/25] revert image tag --- multi-node/docker-compose.yml | 12 ++++++------ single-node/docker-compose.yml | 6 +++--- wazuh-agent/docker-compose.yml | 2 +- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/multi-node/docker-compose.yml b/multi-node/docker-compose.yml index 376cd27d..ace50751 100644 --- a/multi-node/docker-compose.yml +++ b/multi-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.master: - image: wazuh/wazuh-manager:4.14.7-rc1 + image: wazuh/wazuh-manager:4.14.7 hostname: wazuh.master restart: always ulimits: @@ -43,7 +43,7 @@ services: - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf wazuh.worker: - image: wazuh/wazuh-manager:4.14.7-rc1 + image: wazuh/wazuh-manager:4.14.7 hostname: wazuh.worker restart: always ulimits: @@ -79,7 +79,7 @@ services: - ./config/wazuh_cluster/wazuh_worker.conf:/wazuh-config-mount/etc/ossec.conf wazuh1.indexer: - image: wazuh/wazuh-indexer:4.14.7-rc1 + image: wazuh/wazuh-indexer:4.14.7 hostname: wazuh1.indexer restart: always ports: @@ -105,7 +105,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh2.indexer: - image: wazuh/wazuh-indexer:4.14.7-rc1 + image: wazuh/wazuh-indexer:4.14.7 hostname: wazuh2.indexer restart: always environment: @@ -127,7 +127,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh3.indexer: - image: wazuh/wazuh-indexer:4.14.7-rc1 + image: wazuh/wazuh-indexer:4.14.7 hostname: wazuh3.indexer restart: always environment: @@ -149,7 +149,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh.dashboard: - image: wazuh/wazuh-dashboard:4.14.7-rc1 + image: wazuh/wazuh-dashboard:4.14.7 hostname: wazuh.dashboard restart: always ports: diff --git a/single-node/docker-compose.yml b/single-node/docker-compose.yml index 97a6e8cd..5f1a7b07 100644 --- a/single-node/docker-compose.yml +++ b/single-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.manager: - image: wazuh/wazuh-manager:4.14.7-rc1 + image: wazuh/wazuh-manager:4.14.7 hostname: wazuh.manager restart: always ulimits: @@ -44,7 +44,7 @@ services: - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf wazuh.indexer: - image: wazuh/wazuh-indexer:4.14.7-rc1 + image: wazuh/wazuh-indexer:4.14.7 hostname: wazuh.indexer restart: always ports: @@ -69,7 +69,7 @@ services: - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml wazuh.dashboard: - image: wazuh/wazuh-dashboard:4.14.7-rc1 + image: wazuh/wazuh-dashboard:4.14.7 hostname: wazuh.dashboard restart: always ports: diff --git a/wazuh-agent/docker-compose.yml b/wazuh-agent/docker-compose.yml index 4e3e9662..e5785236 100644 --- a/wazuh-agent/docker-compose.yml +++ b/wazuh-agent/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.agent: - image: wazuh/wazuh-agent:4.14.7-rc1 + image: wazuh/wazuh-agent:4.14.7 restart: always environment: - WAZUH_MANAGER_SERVER= From a575cb71d5d775128ecf14c943c17114b54f61ee Mon Sep 17 00:00:00 2001 From: wazuhci <22834044+wazuhci@users.noreply.github.com> Date: Fri, 10 Jul 2026 12:28:51 +0000 Subject: [PATCH 16/25] feat: bump 5.0.1 --- .github/workflows/5_build_and_push_images.yml | 4 ++-- .github/workflows/5_check_integration_tools.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/5_build_and_push_images.yml b/.github/workflows/5_build_and_push_images.yml index d6329abf..90473b59 100644 --- a/.github/workflows/5_build_and_push_images.yml +++ b/.github/workflows/5_build_and_push_images.yml @@ -14,7 +14,7 @@ on: wazuh_automation_reference: description: 'Branch or tag of the wazuh-automation repository' required: false - default: 'main' + default: '5.0.1' products: description: 'Comma-separated list of the image names to build and push' default: 'wazuh-manager,wazuh-dashboard,wazuh-indexer,wazuh-agent' @@ -52,7 +52,7 @@ on: wazuh_automation_reference: description: 'Branch or tag of the wazuh-automation repository' required: false - default: 'main' + default: '5.0.1' type: string products: description: 'Comma-separated list of the image names to build and push' diff --git a/.github/workflows/5_check_integration_tools.yml b/.github/workflows/5_check_integration_tools.yml index b25b566b..ac9b9b81 100644 --- a/.github/workflows/5_check_integration_tools.yml +++ b/.github/workflows/5_check_integration_tools.yml @@ -16,7 +16,7 @@ on: automation_reference: description: 'Branch of wazuh-automation to use' required: false - default: 'main' + default: '5.0.1' type: string deployment_type: description: 'Deployment type to test' From 76be72bc0866e5d0953f4ac66741e59b6914eba9 Mon Sep 17 00:00:00 2001 From: Victor Carlos Erenu Date: Wed, 15 Jul 2026 17:40:17 +0700 Subject: [PATCH 17/25] Change admin user on IndexerConnector configuration --- CHANGELOG.md | 1 + docs/ref/configuration/environment-variables.md | 10 +++++----- multi-node/docker-compose.yml | 10 ++++------ single-node/docker-compose.yml | 6 ++---- 4 files changed, 12 insertions(+), 15 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2b823208..2e7de109 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -12,6 +12,7 @@ ### Changed +- Update deployment for Wazuh Indexer 5.0.0 RBAC ([#2537](https://github.com/wazuh/wazuh-docker/issues/2537)) - Add new WF for changelog check ([#2539](https://github.com/wazuh/wazuh-docker/pull/2539)) - Change artifact upload and download ([#2502](https://github.com/wazuh/wazuh-docker/issues/2502)) - Change runners on repository workflows 5.x ([#2471](https://github.com/wazuh/wazuh-docker/issues/2471)) diff --git a/docs/ref/configuration/environment-variables.md b/docs/ref/configuration/environment-variables.md index 4c124fdf..f0b3b45a 100644 --- a/docs/ref/configuration/environment-variables.md +++ b/docs/ref/configuration/environment-variables.md @@ -21,8 +21,8 @@ The Wazuh Manager container accepts the following environment variables, which c ```yaml environment: - - INDEXER_USERNAME=admin - - INDEXER_PASSWORD=SecretPassword + - INDEXER_USERNAME=wazuh-manager + - INDEXER_PASSWORD=wazuh-manager - WAZUH_API_URL=https://wazuh.manager - DASHBOARD_USERNAME=kibanaserver - DASHBOARD_PASSWORD=kibanaserver @@ -30,7 +30,7 @@ environment: **Variable Descriptions:** -- `INDEXER_USERNAME` / `INDEXER_PASSWORD`: Credentials for accessing the Wazuh Indexer with `admin` user or a user with the same permissions. +- `INDEXER_USERNAME` / `INDEXER_PASSWORD`: Credentials for accessing the Wazuh Indexer with `wazuh-manager` user or a user with the same permissions. - `WAZUH_API_URL`: URL of the Wazuh API, used by other services for communication. - `DASHBOARD_USERNAME` / `DASHBOARD_PASSWORD`: Credentials for the Wazuh Dashboard to authenticate with the Indexer. @@ -57,8 +57,8 @@ The Wazuh Dashboard container accepts the following environment variables, which ```yaml environment: - - INDEXER_USERNAME=admin - - INDEXER_PASSWORD=SecretPassword + - INDEXER_USERNAME=wazuh-admin + - INDEXER_PASSWORD=wazuh-admin - WAZUH_API_URL=https://wazuh.manager - DASHBOARD_USERNAME=kibanaserver - DASHBOARD_PASSWORD=kibanaserver diff --git a/multi-node/docker-compose.yml b/multi-node/docker-compose.yml index 4fa8d8bf..b592f6e8 100644 --- a/multi-node/docker-compose.yml +++ b/multi-node/docker-compose.yml @@ -31,8 +31,8 @@ services: - WAZUH_NODE_TYPE=master - WAZUH_CLUSTER_BIND_ADDR=0.0.0.0 - WAZUH_CLUSTER_NODES=wazuh.master - - INDEXER_USERNAME=admin - - INDEXER_PASSWORD=admin + - INDEXER_USERNAME=wazuh-manager + - INDEXER_PASSWORD=wazuh-manager volumes: - master-wazuh-api-configuration:/var/wazuh-manager/api/configuration - master-wazuh-etc:/var/wazuh-manager/etc @@ -70,8 +70,8 @@ services: - WAZUH_NODE_TYPE=worker - WAZUH_CLUSTER_BIND_ADDR=0.0.0.0 - WAZUH_CLUSTER_NODES=wazuh.master - - INDEXER_USERNAME=admin - - INDEXER_PASSWORD=admin + - INDEXER_USERNAME=wazuh-manager + - INDEXER_PASSWORD=wazuh-manager volumes: - worker-wazuh-api-configuration:/var/wazuh-manager/api/configuration - worker-wazuh-etc:/var/wazuh-manager/etc @@ -213,8 +213,6 @@ services: - SERVER_PORT=5601 - SERVER_HOST=0.0.0.0 - OPENSEARCH_HOSTS=["https://wazuh1.indexer:9200","https://wazuh2.indexer:9200","https://wazuh3.indexer:9200"] - - INDEXER_USERNAME=admin - - INDEXER_PASSWORD=admin - WAZUH_API_URL=https://wazuh.master - DASHBOARD_USERNAME=kibanaserver - DASHBOARD_PASSWORD=kibanaserver diff --git a/single-node/docker-compose.yml b/single-node/docker-compose.yml index 042162cb..e2216e35 100644 --- a/single-node/docker-compose.yml +++ b/single-node/docker-compose.yml @@ -31,8 +31,8 @@ services: - WAZUH_NODE_NAME=manager - WAZUH_CLUSTER_NODES=wazuh.manager - WAZUH_CLUSTER_BIND_ADDR=wazuh.manager - - INDEXER_USERNAME=admin - - INDEXER_PASSWORD=admin + - INDEXER_USERNAME=wazuh-manager + - INDEXER_PASSWORD=wazuh-manager volumes: - wazuh_api_configuration:/var/wazuh-manager/api/configuration - wazuh_etc:/var/wazuh-manager/etc @@ -97,8 +97,6 @@ services: - SERVER_PORT=5601 - SERVER_HOST=0.0.0.0 - OPENSEARCH_HOSTS=https://wazuh.indexer:9200 - - INDEXER_USERNAME=admin - - INDEXER_PASSWORD=admin - WAZUH_API_URL=https://wazuh.manager - DASHBOARD_USERNAME=kibanaserver - DASHBOARD_PASSWORD=kibanaserver From fb20a0d1ba4a69a975b51c9895a91cfe2a422ad4 Mon Sep 17 00:00:00 2001 From: Victor Carlos Erenu Date: Wed, 15 Jul 2026 17:42:58 +0700 Subject: [PATCH 18/25] Change admin user on IndexerConnector configuration --- docs/ref/configuration/environment-variables.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/ref/configuration/environment-variables.md b/docs/ref/configuration/environment-variables.md index f0b3b45a..313db3a3 100644 --- a/docs/ref/configuration/environment-variables.md +++ b/docs/ref/configuration/environment-variables.md @@ -57,8 +57,8 @@ The Wazuh Dashboard container accepts the following environment variables, which ```yaml environment: - - INDEXER_USERNAME=wazuh-admin - - INDEXER_PASSWORD=wazuh-admin + - INDEXER_USERNAME=wazuh-manager + - INDEXER_PASSWORD=wazuh-manager - WAZUH_API_URL=https://wazuh.manager - DASHBOARD_USERNAME=kibanaserver - DASHBOARD_PASSWORD=kibanaserver From d2971cb198447c51b911a8c03d7a7c43d6791024 Mon Sep 17 00:00:00 2001 From: Victor Carlos Erenu Date: Wed, 15 Jul 2026 20:24:22 +0700 Subject: [PATCH 19/25] Change fix user functionnn --- .../wazuh-manager/config/etc/cont-init.d/0-wazuh-init | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/build-docker-images/wazuh-manager/config/etc/cont-init.d/0-wazuh-init b/build-docker-images/wazuh-manager/config/etc/cont-init.d/0-wazuh-init index 6721da43..fa501081 100644 --- a/build-docker-images/wazuh-manager/config/etc/cont-init.d/0-wazuh-init +++ b/build-docker-images/wazuh-manager/config/etc/cont-init.d/0-wazuh-init @@ -252,9 +252,9 @@ configure_permissions() { ############################################################################## set_correct_permOwner() { - find /var/wazuh-manager/ -group 997 -exec chown :101 {} +; - find /var/wazuh-manager/ -group 999 -exec chown :101 {} +; - find /var/wazuh-manager/ -user 999 -exec chown 101:{} +; + find /var/wazuh-manager/ -group 997 -exec chown :101 {} + + find /var/wazuh-manager/ -group 999 -exec chown :101 {} + + find /var/wazuh-manager/ -user 999 -exec chown 101 {} + } ############################################################################## From 2a8d2d963d56569a601336ee439a50ef6b71a79f Mon Sep 17 00:00:00 2001 From: wazuhci <22834044+wazuhci@users.noreply.github.com> Date: Tue, 21 Jul 2026 11:01:34 +0000 Subject: [PATCH 20/25] feat: bump 5.0.0 --- .github/workflows/5_build_and_push_images.yml | 8 ++++---- .../workflows/5_check_integration_tools.yml | 2 +- docs/ref/upgrade.md | 18 +++++++++--------- multi-node/docker-compose.yml | 12 ++++++------ single-node/docker-compose.yml | 6 +++--- wazuh-agent/docker-compose.yml | 2 +- 6 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/5_build_and_push_images.yml b/.github/workflows/5_build_and_push_images.yml index d0eebded..eaf1349d 100644 --- a/.github/workflows/5_build_and_push_images.yml +++ b/.github/workflows/5_build_and_push_images.yml @@ -6,7 +6,7 @@ on: inputs: image_tag: description: 'Docker image tag' - default: '5.0.0' + default: 'v5.0.0-beta4' required: true docker_reference: description: 'wazuh-docker reference' @@ -14,7 +14,7 @@ on: wazuh_automation_reference: description: 'Branch or tag of the wazuh-automation repository' required: false - default: '5.0.0' + default: 'v5.0.0-beta4' products: description: 'Comma-separated list of the image names to build and push' default: 'wazuh-manager,wazuh-dashboard,wazuh-indexer,wazuh-agent' @@ -42,7 +42,7 @@ on: inputs: image_tag: description: 'Docker image tag' - default: '5.0.0' + default: 'v5.0.0-beta4' required: true type: string docker_reference: @@ -52,7 +52,7 @@ on: wazuh_automation_reference: description: 'Branch or tag of the wazuh-automation repository' required: false - default: '5.0.0' + default: 'v5.0.0-beta4' type: string products: description: 'Comma-separated list of the image names to build and push' diff --git a/.github/workflows/5_check_integration_tools.yml b/.github/workflows/5_check_integration_tools.yml index 4f42c83c..93cb3dc3 100644 --- a/.github/workflows/5_check_integration_tools.yml +++ b/.github/workflows/5_check_integration_tools.yml @@ -16,7 +16,7 @@ on: automation_reference: description: 'Branch of wazuh-automation to use' required: false - default: '5.0.0' + default: 'v5.0.0-beta4' type: string deployment_type: description: 'Deployment type to test' diff --git a/docs/ref/upgrade.md b/docs/ref/upgrade.md index 7e15c983..b753d9fc 100644 --- a/docs/ref/upgrade.md +++ b/docs/ref/upgrade.md @@ -24,15 +24,15 @@ Below is a step-by-step example of how to perform this update: ```yaml services: wazuh.manager: - image: wazuh/wazuh-manager:5.0.0 + image: wazuh/wazuh-manager:5.0.0-beta4 ... wazuh.indexer: - image: wazuh/wazuh-indexer:5.0.0 + image: wazuh/wazuh-indexer:5.0.0-beta4 ... wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0 + image: wazuh/wazuh-dashboard:5.0.0-beta4 ... ``` @@ -48,27 +48,27 @@ Below is a step-by-step example of how to perform this update: ```yaml services: wazuh.master: - image: wazuh/wazuh-manager:5.0.0 + image: wazuh/wazuh-manager:5.0.0-beta4 ... wazuh.worker: - image: wazuh/wazuh-manager:5.0.0 + image: wazuh/wazuh-manager:5.0.0-beta4 ... wazuh1.indexer: - image: wazuh/wazuh-indexer:5.0.0 + image: wazuh/wazuh-indexer:5.0.0-beta4 ... wazuh2.indexer: - image: wazuh/wazuh-indexer:5.0.0 + image: wazuh/wazuh-indexer:5.0.0-beta4 ... wazuh3.indexer: - image: wazuh/wazuh-indexer:5.0.0 + image: wazuh/wazuh-indexer:5.0.0-beta4 ... wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0 + image: wazuh/wazuh-dashboard:5.0.0-beta4 ... ``` diff --git a/multi-node/docker-compose.yml b/multi-node/docker-compose.yml index b592f6e8..593bbe2a 100644 --- a/multi-node/docker-compose.yml +++ b/multi-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.master: - image: wazuh/wazuh-manager:5.0.0 + image: wazuh/wazuh-manager:5.0.0-beta4 hostname: wazuh.master container_name: multi-node-wazuh.master restart: always @@ -44,7 +44,7 @@ services: - ./config/wazuh_master/certs/wazuh.master-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem wazuh.worker: - image: wazuh/wazuh-manager:5.0.0 + image: wazuh/wazuh-manager:5.0.0-beta4 hostname: wazuh.worker container_name: multi-node-wazuh.worker restart: always @@ -83,7 +83,7 @@ services: - ./config/wazuh_worker/certs/wazuh.worker-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem wazuh1.indexer: - image: wazuh/wazuh-indexer:5.0.0 + image: wazuh/wazuh-indexer:5.0.0-beta4 hostname: wazuh1.indexer container_name: multi-node-wazuh1.indexer restart: always @@ -121,7 +121,7 @@ services: - ./config/wazuh1_indexer/certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem wazuh2.indexer: - image: wazuh/wazuh-indexer:5.0.0 + image: wazuh/wazuh-indexer:5.0.0-beta4 hostname: wazuh2.indexer container_name: multi-node-wazuh2.indexer restart: always @@ -159,7 +159,7 @@ services: - ./config/wazuh2_indexer/certs/wazuh2.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem wazuh3.indexer: - image: wazuh/wazuh-indexer:5.0.0 + image: wazuh/wazuh-indexer:5.0.0-beta4 hostname: wazuh3.indexer container_name: multi-node-wazuh3.indexer restart: always @@ -197,7 +197,7 @@ services: - ./config/wazuh3_indexer/certs/wazuh3.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0 + image: wazuh/wazuh-dashboard:5.0.0-beta4 hostname: wazuh.dashboard container_name: multi-node-wazuh.dashboard restart: always diff --git a/single-node/docker-compose.yml b/single-node/docker-compose.yml index e2216e35..2bfbac00 100644 --- a/single-node/docker-compose.yml +++ b/single-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.manager: - image: wazuh/wazuh-manager:5.0.0 + image: wazuh/wazuh-manager:5.0.0-beta4 hostname: wazuh.manager container_name: single-node-wazuh.manager restart: always @@ -44,7 +44,7 @@ services: - ./config/wazuh_manager/certs/wazuh.manager-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem wazuh.indexer: - image: wazuh/wazuh-indexer:5.0.0 + image: wazuh/wazuh-indexer:5.0.0-beta4 hostname: wazuh.indexer container_name: single-node-wazuh.indexer restart: always @@ -81,7 +81,7 @@ services: - ./config/wazuh_indexer/certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0 + image: wazuh/wazuh-dashboard:5.0.0-beta4 hostname: wazuh.dashboard container_name: single-node-wazuh.dashboard restart: always diff --git a/wazuh-agent/docker-compose.yml b/wazuh-agent/docker-compose.yml index 303f1ca3..79e4e12b 100644 --- a/wazuh-agent/docker-compose.yml +++ b/wazuh-agent/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.agent: - image: wazuh/wazuh-agent:5.0.0 + image: wazuh/wazuh-agent:5.0.0-beta4 restart: always environment: - WAZUH_MANAGER_SERVER= From 04a4cdbd1e915fc0a6df5ae7670640b8839736b9 Mon Sep 17 00:00:00 2001 From: wazuhci <22834044+wazuhci@users.noreply.github.com> Date: Tue, 21 Jul 2026 12:32:12 +0000 Subject: [PATCH 21/25] feat: revert 5.0.0 references --- .github/workflows/5_build_and_push_images.yml | 8 ++++---- .../workflows/5_check_integration_tools.yml | 2 +- docs/ref/upgrade.md | 18 +++++++++--------- multi-node/docker-compose.yml | 12 ++++++------ single-node/docker-compose.yml | 6 +++--- wazuh-agent/docker-compose.yml | 2 +- 6 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/5_build_and_push_images.yml b/.github/workflows/5_build_and_push_images.yml index eaf1349d..d0eebded 100644 --- a/.github/workflows/5_build_and_push_images.yml +++ b/.github/workflows/5_build_and_push_images.yml @@ -6,7 +6,7 @@ on: inputs: image_tag: description: 'Docker image tag' - default: 'v5.0.0-beta4' + default: '5.0.0' required: true docker_reference: description: 'wazuh-docker reference' @@ -14,7 +14,7 @@ on: wazuh_automation_reference: description: 'Branch or tag of the wazuh-automation repository' required: false - default: 'v5.0.0-beta4' + default: '5.0.0' products: description: 'Comma-separated list of the image names to build and push' default: 'wazuh-manager,wazuh-dashboard,wazuh-indexer,wazuh-agent' @@ -42,7 +42,7 @@ on: inputs: image_tag: description: 'Docker image tag' - default: 'v5.0.0-beta4' + default: '5.0.0' required: true type: string docker_reference: @@ -52,7 +52,7 @@ on: wazuh_automation_reference: description: 'Branch or tag of the wazuh-automation repository' required: false - default: 'v5.0.0-beta4' + default: '5.0.0' type: string products: description: 'Comma-separated list of the image names to build and push' diff --git a/.github/workflows/5_check_integration_tools.yml b/.github/workflows/5_check_integration_tools.yml index 93cb3dc3..4f42c83c 100644 --- a/.github/workflows/5_check_integration_tools.yml +++ b/.github/workflows/5_check_integration_tools.yml @@ -16,7 +16,7 @@ on: automation_reference: description: 'Branch of wazuh-automation to use' required: false - default: 'v5.0.0-beta4' + default: '5.0.0' type: string deployment_type: description: 'Deployment type to test' diff --git a/docs/ref/upgrade.md b/docs/ref/upgrade.md index b753d9fc..7e15c983 100644 --- a/docs/ref/upgrade.md +++ b/docs/ref/upgrade.md @@ -24,15 +24,15 @@ Below is a step-by-step example of how to perform this update: ```yaml services: wazuh.manager: - image: wazuh/wazuh-manager:5.0.0-beta4 + image: wazuh/wazuh-manager:5.0.0 ... wazuh.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta4 + image: wazuh/wazuh-indexer:5.0.0 ... wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0-beta4 + image: wazuh/wazuh-dashboard:5.0.0 ... ``` @@ -48,27 +48,27 @@ Below is a step-by-step example of how to perform this update: ```yaml services: wazuh.master: - image: wazuh/wazuh-manager:5.0.0-beta4 + image: wazuh/wazuh-manager:5.0.0 ... wazuh.worker: - image: wazuh/wazuh-manager:5.0.0-beta4 + image: wazuh/wazuh-manager:5.0.0 ... wazuh1.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta4 + image: wazuh/wazuh-indexer:5.0.0 ... wazuh2.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta4 + image: wazuh/wazuh-indexer:5.0.0 ... wazuh3.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta4 + image: wazuh/wazuh-indexer:5.0.0 ... wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0-beta4 + image: wazuh/wazuh-dashboard:5.0.0 ... ``` diff --git a/multi-node/docker-compose.yml b/multi-node/docker-compose.yml index 593bbe2a..b592f6e8 100644 --- a/multi-node/docker-compose.yml +++ b/multi-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.master: - image: wazuh/wazuh-manager:5.0.0-beta4 + image: wazuh/wazuh-manager:5.0.0 hostname: wazuh.master container_name: multi-node-wazuh.master restart: always @@ -44,7 +44,7 @@ services: - ./config/wazuh_master/certs/wazuh.master-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem wazuh.worker: - image: wazuh/wazuh-manager:5.0.0-beta4 + image: wazuh/wazuh-manager:5.0.0 hostname: wazuh.worker container_name: multi-node-wazuh.worker restart: always @@ -83,7 +83,7 @@ services: - ./config/wazuh_worker/certs/wazuh.worker-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem wazuh1.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta4 + image: wazuh/wazuh-indexer:5.0.0 hostname: wazuh1.indexer container_name: multi-node-wazuh1.indexer restart: always @@ -121,7 +121,7 @@ services: - ./config/wazuh1_indexer/certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem wazuh2.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta4 + image: wazuh/wazuh-indexer:5.0.0 hostname: wazuh2.indexer container_name: multi-node-wazuh2.indexer restart: always @@ -159,7 +159,7 @@ services: - ./config/wazuh2_indexer/certs/wazuh2.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem wazuh3.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta4 + image: wazuh/wazuh-indexer:5.0.0 hostname: wazuh3.indexer container_name: multi-node-wazuh3.indexer restart: always @@ -197,7 +197,7 @@ services: - ./config/wazuh3_indexer/certs/wazuh3.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0-beta4 + image: wazuh/wazuh-dashboard:5.0.0 hostname: wazuh.dashboard container_name: multi-node-wazuh.dashboard restart: always diff --git a/single-node/docker-compose.yml b/single-node/docker-compose.yml index 2bfbac00..e2216e35 100644 --- a/single-node/docker-compose.yml +++ b/single-node/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.manager: - image: wazuh/wazuh-manager:5.0.0-beta4 + image: wazuh/wazuh-manager:5.0.0 hostname: wazuh.manager container_name: single-node-wazuh.manager restart: always @@ -44,7 +44,7 @@ services: - ./config/wazuh_manager/certs/wazuh.manager-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem wazuh.indexer: - image: wazuh/wazuh-indexer:5.0.0-beta4 + image: wazuh/wazuh-indexer:5.0.0 hostname: wazuh.indexer container_name: single-node-wazuh.indexer restart: always @@ -81,7 +81,7 @@ services: - ./config/wazuh_indexer/certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem wazuh.dashboard: - image: wazuh/wazuh-dashboard:5.0.0-beta4 + image: wazuh/wazuh-dashboard:5.0.0 hostname: wazuh.dashboard container_name: single-node-wazuh.dashboard restart: always diff --git a/wazuh-agent/docker-compose.yml b/wazuh-agent/docker-compose.yml index 79e4e12b..303f1ca3 100644 --- a/wazuh-agent/docker-compose.yml +++ b/wazuh-agent/docker-compose.yml @@ -1,7 +1,7 @@ # Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2) services: wazuh.agent: - image: wazuh/wazuh-agent:5.0.0-beta4 + image: wazuh/wazuh-agent:5.0.0 restart: always environment: - WAZUH_MANAGER_SERVER= From 68f81a6f6fabf1da4a629b8cd38a83b50875c8b2 Mon Sep 17 00:00:00 2001 From: wazuhci <22834044+wazuhci@users.noreply.github.com> Date: Wed, 22 Jul 2026 13:58:15 +0000 Subject: [PATCH 22/25] feat: bump 5.0.0 --- VERSION.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION.json b/VERSION.json index f7d92283..788ed0a9 100644 --- a/VERSION.json +++ b/VERSION.json @@ -1,4 +1,4 @@ { "version": "5.0.0", - "stage": "beta4" + "stage": "rc1" } From 544fd8e11105b079216e8d9b5c1e748d558ccf54 Mon Sep 17 00:00:00 2001 From: Victor Carlos Erenu Date: Fri, 24 Jul 2026 22:04:33 +0700 Subject: [PATCH 23/25] Resoliving conflicts --- build-docker-images/README.md | 40 ----------------------------------- 1 file changed, 40 deletions(-) delete mode 100644 build-docker-images/README.md diff --git a/build-docker-images/README.md b/build-docker-images/README.md deleted file mode 100644 index 296f837d..00000000 --- a/build-docker-images/README.md +++ /dev/null @@ -1,40 +0,0 @@ -# Wazuh Docker Image Builder - -The creation of the images for the Wazuh stack deployment in Docker is done with the `build-docker-images/build-images.sh` script - -This script initializes the environment variables needed to build each of the images. - -To execute it, make sure to be in the `build-docker-images` directory: - -```bash -cd build-docker-images -``` - -Then execute: - -```bash -./build-images.sh -``` - -The script also allows to build images from other versions of Wazuh by using the `-v` or `--version` argument: - -```bash -./build-images.sh -v 4.14.8 -``` - -To get all the available script options use the -h or --help option: - -```bash -./build-images.sh -h - -Usage: ./build-images.sh [OPTIONS] - - -d, --dev [Optional] Set the development stage you want to build, example rc1 or beta1, not used by default. - -f, --filebeat-module [Optional] Set Filebeat module version. By default 0.5. - -r, --revision [Optional] Package revision. By default 1 - -rg, --registry [Optional] Set the Docker registry to push the images. - -v, --version [Optional] Set the Wazuh version should be builded. By default, 4.14.8. - -m, --multiarch [Optional] Enable multi-architecture builds. - -h, --help Show this help. - -``` \ No newline at end of file From a55fba80e4a71bf918664db40709d61ccc9bf767 Mon Sep 17 00:00:00 2001 From: Victor Carlos Erenu Date: Sat, 25 Jul 2026 01:37:44 +0700 Subject: [PATCH 24/25] Resoliving conflicts --- .github/workflows/5_build_and_push_images.yml | 4 ++-- .../workflows/5_check_integration_tools.yml | 2 +- CHANGELOG.md | 22 +------------------ 3 files changed, 4 insertions(+), 24 deletions(-) diff --git a/.github/workflows/5_build_and_push_images.yml b/.github/workflows/5_build_and_push_images.yml index a2a15253..01eac917 100644 --- a/.github/workflows/5_build_and_push_images.yml +++ b/.github/workflows/5_build_and_push_images.yml @@ -14,7 +14,7 @@ on: wazuh_automation_reference: description: 'Branch or tag of the wazuh-automation repository' required: false - default: '5.0.1' + default: 'main' products: description: 'Comma-separated list of the image names to build and push' default: 'wazuh-manager,wazuh-dashboard,wazuh-indexer,wazuh-agent' @@ -52,7 +52,7 @@ on: wazuh_automation_reference: description: 'Branch or tag of the wazuh-automation repository' required: false - default: '5.0.1' + default: 'main' type: string products: description: 'Comma-separated list of the image names to build and push' diff --git a/.github/workflows/5_check_integration_tools.yml b/.github/workflows/5_check_integration_tools.yml index bcfdf515..5d7a4613 100644 --- a/.github/workflows/5_check_integration_tools.yml +++ b/.github/workflows/5_check_integration_tools.yml @@ -16,7 +16,7 @@ on: automation_reference: description: 'Branch of wazuh-automation to use' required: false - default: '5.0.1' + default: 'main' type: string deployment_type: description: 'Deployment type to test' diff --git a/CHANGELOG.md b/CHANGELOG.md index 07a249bb..2dbcc387 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -19,24 +19,4 @@ All notable changes to this project will be documented in this file. - None -## [v5.0.1] - -### Added - -- None - -### Changed - -- None - -### Removed - -- None - -### Fixed - -- None - -## Prior version - -- [v5.0.0](https://github.com/wazuh/wazuh-docker/blob/v5.0.0/CHANGELOG.md) +- [v5.0.1](https://github.com/wazuh/wazuh-docker/blob/v5.0.1/CHANGELOG.md) From f471a39e8ec515adc5188eca1d67d184018de08c Mon Sep 17 00:00:00 2001 From: Victor Carlos Erenu Date: Sat, 25 Jul 2026 01:50:28 +0700 Subject: [PATCH 25/25] Update changelog --- CHANGELOG.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2dbcc387..c75fff12 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -19,4 +19,7 @@ All notable changes to this project will be documented in this file. - None +## Prior version + - [v5.0.1](https://github.com/wazuh/wazuh-docker/blob/v5.0.1/CHANGELOG.md) +- [v5.0.0](https://github.com/wazuh/wazuh-docker/blob/v5.0.0/CHANGELOG.md)