forked from wazuh/wazuh-docker
@@ -1,7 +1,7 @@
|
|||||||
WAZUH_IMAGE_VERSION=4.8.0
|
WAZUH_IMAGE_VERSION=4.8.0
|
||||||
WAZUH_VERSION=$(echo $WAZUH_IMAGE_VERSION | sed -e 's/\.//g')
|
WAZUH_VERSION=$(echo $WAZUH_IMAGE_VERSION | sed -e 's/\.//g')
|
||||||
WAZUH_TAG_REVISION=1
|
WAZUH_TAG_REVISION=1
|
||||||
WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g')
|
WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '["]tag_name["]:' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g')
|
||||||
IMAGE_VERSION=${WAZUH_IMAGE_VERSION}
|
IMAGE_VERSION=${WAZUH_IMAGE_VERSION}
|
||||||
|
|
||||||
# Wazuh package generator
|
# Wazuh package generator
|
||||||
|
|||||||
@@ -28,12 +28,12 @@ RUN bash /install_wazuh_app.sh
|
|||||||
# Copy and set permissions to config files
|
# Copy and set permissions to config files
|
||||||
COPY config/opensearch_dashboards.yml $INSTALL_DIR/config/
|
COPY config/opensearch_dashboards.yml $INSTALL_DIR/config/
|
||||||
COPY config/wazuh.yml $INSTALL_DIR/data/wazuh/config/
|
COPY config/wazuh.yml $INSTALL_DIR/data/wazuh/config/
|
||||||
RUN chown 101:101 $INSTALL_DIR/config/opensearch_dashboards.yml && chmod 664 $INSTALL_DIR/config/opensearch_dashboards.yml
|
RUN chmod 664 $INSTALL_DIR/config/opensearch_dashboards.yml
|
||||||
|
|
||||||
# Create and set permissions to data directories
|
# Create and set permissions to data directories
|
||||||
RUN mkdir -p $INSTALL_DIR/data/wazuh && chown -R 101:101 $INSTALL_DIR/data/wazuh && chmod -R 775 $INSTALL_DIR/data/wazuh
|
RUN mkdir -p $INSTALL_DIR/data/wazuh && chmod -R 775 $INSTALL_DIR/data/wazuh
|
||||||
RUN mkdir -p $INSTALL_DIR/data/wazuh/config && chown -R 101:101 $INSTALL_DIR/data/wazuh/config && chmod -R 775 $INSTALL_DIR/data/wazuh/config
|
RUN mkdir -p $INSTALL_DIR/data/wazuh/config && chmod -R 775 $INSTALL_DIR/data/wazuh/config
|
||||||
RUN mkdir -p $INSTALL_DIR/data/wazuh/logs && chown -R 101:101 $INSTALL_DIR/data/wazuh/logs && chmod -R 775 $INSTALL_DIR/data/wazuh/logs
|
RUN mkdir -p $INSTALL_DIR/data/wazuh/logs && chmod -R 775 $INSTALL_DIR/data/wazuh/logs
|
||||||
|
|
||||||
################################################################################
|
################################################################################
|
||||||
# Build stage 1 (the current Wazuh dashboard image):
|
# Build stage 1 (the current Wazuh dashboard image):
|
||||||
|
|||||||
@@ -2,7 +2,7 @@
|
|||||||
APT_KEY=https://packages.wazuh.com/key/GPG-KEY-WAZUH
|
APT_KEY=https://packages.wazuh.com/key/GPG-KEY-WAZUH
|
||||||
GPG_SIGN="gpgcheck=1\ngpgkey=${APT_KEY}]"
|
GPG_SIGN="gpgcheck=1\ngpgkey=${APT_KEY}]"
|
||||||
REPOSITORY="[wazuh]\n${GPG_SIGN}\nenabled=1\nname=EL-\$releasever - Wazuh\nbaseurl=https://packages.wazuh.com/4.x/yum/\nprotect=1"
|
REPOSITORY="[wazuh]\n${GPG_SIGN}\nenabled=1\nname=EL-\$releasever - Wazuh\nbaseurl=https://packages.wazuh.com/4.x/yum/\nprotect=1"
|
||||||
WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2-)
|
WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '["]tag_name["]:' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2-)
|
||||||
MAJOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f1)
|
MAJOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f1)
|
||||||
MID_BUILD=$(echo $WAZUH_VERSION | cut -d. -f2)
|
MID_BUILD=$(echo $WAZUH_VERSION | cut -d. -f2)
|
||||||
MINOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f3)
|
MINOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f3)
|
||||||
|
|||||||
@@ -51,11 +51,12 @@ chown 1000:1000 /certificates/*
|
|||||||
echo "Setting UID for wazuh manager and worker"
|
echo "Setting UID for wazuh manager and worker"
|
||||||
cp /certificates/root-ca.pem /certificates/root-ca-manager.pem
|
cp /certificates/root-ca.pem /certificates/root-ca-manager.pem
|
||||||
cp /certificates/root-ca.key /certificates/root-ca-manager.key
|
cp /certificates/root-ca.key /certificates/root-ca-manager.key
|
||||||
chown 101:101 /certificates/root-ca-manager.pem
|
chown 999:999 /certificates/root-ca-manager.pem
|
||||||
chown 101:101 /certificates/root-ca-manager.key
|
chown 999:999 /certificates/root-ca-manager.key
|
||||||
|
|
||||||
for i in ${node_names[@]};
|
for i in ${node_names[@]};
|
||||||
do
|
do
|
||||||
chown 101:101 "/certificates/${i}.pem"
|
chown 999:999 "/certificates/${i}.pem"
|
||||||
chown 101:101 "/certificates/${i}-key.pem"
|
chown 999:999 "/certificates/${i}-key.pem"
|
||||||
done
|
done
|
||||||
|
|
||||||
|
|||||||
@@ -3,7 +3,7 @@ version: '3'
|
|||||||
|
|
||||||
services:
|
services:
|
||||||
generator:
|
generator:
|
||||||
image: wazuh/wazuh-certs-generator:0.0.1
|
image: wazuh/wazuh-certs-generator:0.0.2
|
||||||
hostname: wazuh-certs-generator
|
hostname: wazuh-certs-generator
|
||||||
volumes:
|
volumes:
|
||||||
- ./config/wazuh_indexer_ssl_certs/:/certificates/
|
- ./config/wazuh_indexer_ssl_certs/:/certificates/
|
||||||
|
|||||||
@@ -3,7 +3,7 @@ version: '3'
|
|||||||
|
|
||||||
services:
|
services:
|
||||||
generator:
|
generator:
|
||||||
image: wazuh/wazuh-certs-generator:0.0.1
|
image: wazuh/wazuh-certs-generator:0.0.2
|
||||||
hostname: wazuh-certs-generator
|
hostname: wazuh-certs-generator
|
||||||
volumes:
|
volumes:
|
||||||
- ./config/wazuh_indexer_ssl_certs/:/certificates/
|
- ./config/wazuh_indexer_ssl_certs/:/certificates/
|
||||||
|
|||||||
Reference in New Issue
Block a user