diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml index ec83402f..4637f903 100644 --- a/.github/workflows/push.yml +++ b/.github/workflows/push.yml @@ -6,9 +6,31 @@ jobs: build-stack: runs-on: ubuntu-latest steps: + - name: Check out code uses: actions/checkout@v2 + - name: Build the docker-compose stack run: docker-compose -f build-from-sources.yml up -d --build + - name: Check running containers run: docker ps -a + + - name: Shutdown the stack + run: docker-compose -f build-from-sources.yml kill + + - name: Install Goss + uses: e1himself/goss-installation-action@v1.0.3 + with: + version: v0.3.16 + + - name: Execute Goss tests (wazuh-odfe) + run: dgoss run wazuh/wazuh-odfe:dev-version + env: + GOSS_SLEEP: 30 + GOSS_FILE: .goss.yaml + + - name: Execute Goss tests (wazuh-kibana-odfe) + run: dgoss run wazuh/wazuh-kibana-odfe:dev-version + env: + GOSS_FILE: .goss.kibana.yaml diff --git a/.goss.kibana.yaml b/.goss.kibana.yaml new file mode 100644 index 00000000..b5c0ea6b --- /dev/null +++ b/.goss.kibana.yaml @@ -0,0 +1,53 @@ +file: + /usr/share/kibana/config/kibana.yml: + exists: true + mode: "0664" + owner: kibana + group: root + filetype: file + contains: [] + /usr/share/kibana/optimize/bundles/light_theme.style.css: + exists: true + mode: "0664" + owner: kibana + group: root + filetype: file + contains: [] + /usr/share/kibana/optimize/bundles/wazuh_logo_circle.svg: + exists: true + mode: "0644" + owner: kibana + group: root + filetype: file + contains: [] + /usr/share/kibana/optimize/bundles/wazuh_wazuh_bg.svg: + exists: true + mode: "0644" + owner: kibana + group: root + filetype: file + contains: [] + /usr/share/kibana/optimize/wazuh/config/wazuh.yml: + exists: true + mode: "0644" + owner: kibana + group: kibana + filetype: file + contains: [] + /usr/share/kibana/src/legacy/ui/ui_render/bootstrap/template.js.hbs: + exists: true + mode: "0664" + owner: kibana + group: root + filetype: file + contains: [] +user: + kibana: + exists: true + groups: + - kibana + home: /usr/share/kibana + shell: /bin/bash +group: + kibana: + exists: true diff --git a/.goss.yaml b/.goss.yaml new file mode 100644 index 00000000..cabb680b --- /dev/null +++ b/.goss.yaml @@ -0,0 +1,115 @@ +file: + /etc/filebeat/filebeat.yml: + exists: true + mode: "0644" + owner: root + group: root + filetype: file + contains: [] + /var/ossec/bin/ossec-control: + exists: true + mode: "0750" + owner: root + group: root + filetype: file + contains: [] + /var/ossec/etc/lists/audit-keys: + exists: true + mode: "0660" + owner: ossec + group: ossec + filetype: file + contains: [] + /var/ossec/etc/ossec.conf: + exists: true + mode: "0660" + owner: root + group: ossec + filetype: file + contains: [] + /var/ossec/etc/rules/local_rules.xml: + exists: true + mode: "0660" + owner: ossec + group: ossec + filetype: file + contains: [] + /var/ossec/etc/sslmanager.cert: + exists: true + mode: "0640" + owner: root + group: root + filetype: file + contains: [] + /var/ossec/etc/sslmanager.key: + exists: true + mode: "0640" + owner: root + group: root + filetype: file + contains: [] +package: + filebeat: + installed: true + versions: + - 7.9.1 + wazuh-manager: + installed: true + versions: + - 4.0.3 +port: + tcp:1514: + listening: true + ip: + - 0.0.0.0 + tcp:1515: + listening: true + ip: + - 0.0.0.0 + tcp:55000: + listening: true + ip: + - 0.0.0.0 +user: + ossec: + exists: true + groups: + - ossec + home: /var/ossec + shell: /sbin/nologin + ossecm: + exists: true + groups: + - ossec + home: /var/ossec + shell: /sbin/nologin + ossecr: + exists: true + groups: + - ossec + home: /var/ossec + shell: /sbin/nologin +group: + ossec: + exists: true +process: + filebeat: + running: true + ossec-analysisd: + running: true + ossec-authd: + running: true + ossec-execd: + running: true + ossec-monitord: + running: true + ossec-remoted: + running: true + ossec-syscheckd: + running: true + s6-supervise: + running: true + wazuh-db: + running: true + wazuh-modulesd: + running: true