diff --git a/generate-indexer-certs.yml b/generate-indexer-certs.yml index 01503c55..62386d62 100644 --- a/generate-indexer-certs.yml +++ b/generate-indexer-certs.yml @@ -3,8 +3,8 @@ version: '3' services: generator: - image: wazuh/opendistro-certs-generator:0.1 - hostname: opendistro-certs-generator + image: wazuh/wazuh-certs-generator:0.0.1 + hostname: wazuh-certs-generator volumes: - - ./production_cluster/wazuh_indexer_ssl_certs/certs.yml:/usr/src/config/myconf.yml - - ./production_cluster/wazuh_indexer_ssl_certs/:/usr/src/certs/out/ \ No newline at end of file + - ./production_cluster/wazuh_indexer_ssl_certs/certs.yml:/unattended_installer/install_functions/config.yml + - ./production_cluster/wazuh_indexer_ssl_certs/:/unattended_installer/install_functions/certificates/ \ No newline at end of file diff --git a/indexer_certs_creator/Dockerfile b/indexer_certs_creator/Dockerfile index bd770c39..1a1d00dd 100644 --- a/indexer_certs_creator/Dockerfile +++ b/indexer_certs_creator/Dockerfile @@ -1,21 +1,16 @@ # Wazuh Docker Copyright (C) 2021 Wazuh Inc. (License GPLv2) -FROM ubuntu:20.04 +FROM wazuh/wazuh-indexer:4.3.0 -ARG WAZUH_VERSION=4.3.0-1 +RUN apt-get update && apt-get install openssl -y -RUN apt-get update && apt install curl -y +WORKDIR / -RUN curl https://packages-dev.wazuh.com/pre-release/apt/pool/main/w/wazuh-indexer/wazuh-indexer_${WAZUH_VERSION}_amd64.deb --output wazuh-indexer_${WAZUH_VERSION}_amd64.deb && \ - dpkg -i wazuh-indexer_${WAZUH_VERSION}_amd64.deb - -WORKDIR /usr/share/wazuh-indexer/plugins/opensearch-security/tools/ - -RUN rm wazuh-cert-tool.sh && \ - curl -sO https://packages-dev.wazuh.com/resources/4.3/install_functions/opendistro/wazuh-cert-tool.sh &&\ - chmod 750 wazuh-cert-tool.sh +COPY config/unattended_installer.tar.gz / COPY config/entrypoint.sh / -RUN chmod 700 /entrypoint.sh +RUN tar -xzvf /unattended_installer.tar.gz -ENTRYPOINT [ "/entrypoint.sh" ] \ No newline at end of file +RUN chmod 700 /entrypoint.sh && chmod -R 700 unattended_installer + +ENTRYPOINT ["/entrypoint.sh"] \ No newline at end of file diff --git a/indexer_certs_creator/config/entrypoint.sh b/indexer_certs_creator/config/entrypoint.sh index 9f24ba39..5dbd5576 100644 --- a/indexer_certs_creator/config/entrypoint.sh +++ b/indexer_certs_creator/config/entrypoint.sh @@ -5,4 +5,7 @@ # Start Wazuh indexer ############################################################################## -/usr/share/wazuh-indexer/plugins/opensearch-security/tools/wazuh-cert-tool.sh +/unattended_installer/install_functions/wazuh-cert-tool.sh +mkdir -p /unattended_installer/install_functions/certificates/ +cp /unattended_installer/install_functions/certs/* /unattended_installer/install_functions/certificates/ +chmod -R 664 /unattended_installer/install_functions/certificates/* diff --git a/indexer_certs_creator/config/unattended_installer.tar.gz b/indexer_certs_creator/config/unattended_installer.tar.gz new file mode 100644 index 00000000..04d24f9e Binary files /dev/null and b/indexer_certs_creator/config/unattended_installer.tar.gz differ diff --git a/indexer_certs_creator/config/unattended_installer/config/opensearch/certificate/config_aio.yml b/indexer_certs_creator/config/unattended_installer/config/opensearch/certificate/config_aio.yml new file mode 100755 index 00000000..8c3e67a0 --- /dev/null +++ b/indexer_certs_creator/config/unattended_installer/config/opensearch/certificate/config_aio.yml @@ -0,0 +1,10 @@ +nodes: + elasticsearch: + name: elasticsearch + ip: 127.0.0.1 + wazuh_servers: + name: filebeat + ip: 127.0.0.1 + kibana: + name: kibana + ip: 127.0.0.1 diff --git a/indexer_certs_creator/config/unattended_installer/config/opensearch/roles/internal_users.yml b/indexer_certs_creator/config/unattended_installer/config/opensearch/roles/internal_users.yml new file mode 100755 index 00000000..40fcb9cd --- /dev/null +++ b/indexer_certs_creator/config/unattended_installer/config/opensearch/roles/internal_users.yml @@ -0,0 +1,74 @@ +--- +# This is the internal user database +# The hash value is a bcrypt hash and can be generated with plugin/tools/hash.sh + +_meta: + type: "internalusers" + config_version: 2 + +# Define your internal users here + +## Demo users + +admin: + hash: "$2a$12$VcCDgh2NDk07JGN0rjGbM.Ad41qVR/YFJcgHp0UGns5JDymv..TOG" + reserved: true + backend_roles: + - "admin" + description: "Demo admin user" + +kibanaserver: + hash: "$2a$12$4AcgAt3xwOWadA5s5blL6ev39OXDNhmOesEoo33eZtrq2N0YrU3H." + reserved: true + description: "Demo kibanaserver user" + +kibanaro: + hash: "$2a$12$JJSXNfTowz7Uu5ttXfeYpeYE0arACvcwlPBStB1F.MI7f0U9Z4DGC" + reserved: false + backend_roles: + - "kibanauser" + - "readall" + attributes: + attribute1: "value1" + attribute2: "value2" + attribute3: "value3" + description: "Demo kibanaro user" + +logstash: + hash: "$2a$12$u1ShR4l4uBS3Uv59Pa2y5.1uQuZBrZtmNfqB3iM/.jL0XoV9sghS2" + reserved: false + backend_roles: + - "logstash" + description: "Demo logstash user" + +readall: + hash: "$2a$12$ae4ycwzwvLtZxwZ82RmiEunBbIPiAmGZduBAjKN0TXdwQFtCwARz2" + reserved: false + backend_roles: + - "readall" + description: "Demo readall user" + +snapshotrestore: + hash: "$2y$12$DpwmetHKwgYnorbgdvORCenv4NAK8cPUg8AI6pxLCuWf/ALc0.v7W" + reserved: false + backend_roles: + - "snapshotrestore" + description: "Demo snapshotrestore user" + +wazuh_admin: + hash: "$2y$12$d2awHiOYvZjI88VfsDON.u6buoBol0gYPJEgdG1ArKVE0OMxViFfu" + reserved: true + hidden: false + backend_roles: [] + attributes: {} + opendistro_security_roles: [] + static: false + +wazuh_user: + hash: "$2y$12$BQixeoQdRubZdVf/7sq1suHwiVRnSst1.lPI2M0.GPZms4bq2D9vO" + reserved: true + hidden: false + backend_roles: [] + attributes: {} + opendistro_security_roles: [] + static: false \ No newline at end of file diff --git a/indexer_certs_creator/config/unattended_installer/config/opensearch/roles/roles.yml b/indexer_certs_creator/config/unattended_installer/config/opensearch/roles/roles.yml new file mode 100755 index 00000000..3afa9ee4 --- /dev/null +++ b/indexer_certs_creator/config/unattended_installer/config/opensearch/roles/roles.yml @@ -0,0 +1,163 @@ +_meta: + type: "roles" + config_version: 2 + +# Restrict users so they can only view visualization and dashboard on kibana +kibana_read_only: + reserved: true + +# The security REST API access role is used to assign specific users access to change the security settings through the REST API. +security_rest_api_access: + reserved: true + +# Allows users to view monitors, destinations and alerts +alerting_read_access: + reserved: true + cluster_permissions: + - 'cluster:admin/opendistro/alerting/alerts/get' + - 'cluster:admin/opendistro/alerting/destination/get' + - 'cluster:admin/opendistro/alerting/monitor/get' + - 'cluster:admin/opendistro/alerting/monitor/search' + +# Allows users to view and acknowledge alerts +alerting_ack_alerts: + reserved: true + cluster_permissions: + - 'cluster:admin/opendistro/alerting/alerts/*' + +# Allows users to use all alerting functionality +alerting_full_access: + reserved: true + cluster_permissions: + - 'cluster_monitor' + - 'cluster:admin/opendistro/alerting/*' + index_permissions: + - index_patterns: + - '*' + allowed_actions: + - 'indices_monitor' + - 'indices:admin/aliases/get' + - 'indices:admin/mappings/get' + +# Allow users to read Anomaly Detection detectors and results +anomaly_read_access: + reserved: true + cluster_permissions: + - 'cluster:admin/opendistro/ad/detector/info' + - 'cluster:admin/opendistro/ad/detector/search' + - 'cluster:admin/opendistro/ad/detectors/get' + - 'cluster:admin/opendistro/ad/result/search' + - 'cluster:admin/opendistro/ad/tasks/search' + +# Allows users to use all Anomaly Detection functionality +anomaly_full_access: + reserved: true + cluster_permissions: + - 'cluster_monitor' + - 'cluster:admin/opendistro/ad/*' + index_permissions: + - index_patterns: + - '*' + allowed_actions: + - 'indices_monitor' + - 'indices:admin/aliases/get' + - 'indices:admin/mappings/get' + +# Allows users to read Notebooks +notebooks_read_access: + reserved: true + cluster_permissions: + - 'cluster:admin/opendistro/notebooks/list' + - 'cluster:admin/opendistro/notebooks/get' + +# Allows users to all Notebooks functionality +notebooks_full_access: + reserved: true + cluster_permissions: + - 'cluster:admin/opendistro/notebooks/create' + - 'cluster:admin/opendistro/notebooks/update' + - 'cluster:admin/opendistro/notebooks/delete' + - 'cluster:admin/opendistro/notebooks/get' + - 'cluster:admin/opendistro/notebooks/list' + +# Allows users to read and download Reports +reports_instances_read_access: + reserved: true + cluster_permissions: + - 'cluster:admin/opendistro/reports/instance/list' + - 'cluster:admin/opendistro/reports/instance/get' + - 'cluster:admin/opendistro/reports/menu/download' + +# Allows users to read and download Reports and Report-definitions +reports_read_access: + reserved: true + cluster_permissions: + - 'cluster:admin/opendistro/reports/definition/get' + - 'cluster:admin/opendistro/reports/definition/list' + - 'cluster:admin/opendistro/reports/instance/list' + - 'cluster:admin/opendistro/reports/instance/get' + - 'cluster:admin/opendistro/reports/menu/download' + +# Allows users to all Reports functionality +reports_full_access: + reserved: true + cluster_permissions: + - 'cluster:admin/opendistro/reports/definition/create' + - 'cluster:admin/opendistro/reports/definition/update' + - 'cluster:admin/opendistro/reports/definition/on_demand' + - 'cluster:admin/opendistro/reports/definition/delete' + - 'cluster:admin/opendistro/reports/definition/get' + - 'cluster:admin/opendistro/reports/definition/list' + - 'cluster:admin/opendistro/reports/instance/list' + - 'cluster:admin/opendistro/reports/instance/get' + - 'cluster:admin/opendistro/reports/menu/download' + +# Allows users to use all asynchronous-search functionality +asynchronous_search_full_access: + reserved: true + cluster_permissions: + - 'cluster:admin/opendistro/asynchronous_search/*' + index_permissions: + - index_patterns: + - '*' + allowed_actions: + - 'indices:data/read/search*' + +# Allows users to read stored asynchronous-search results +asynchronous_search_read_access: + reserved: true + cluster_permissions: + - 'cluster:admin/opendistro/asynchronous_search/get' + +wazuh_ui_user: + reserved: true + hidden: false + cluster_permissions: [] + index_permissions: + - index_patterns: + - "wazuh-*" + dls: "" + fls: [] + masked_fields: [] + allowed_actions: + - "read" + tenant_permissions: [] + static: false + +wazuh_ui_admin: + reserved: true + hidden: false + cluster_permissions: [] + index_permissions: + - index_patterns: + - "wazuh-*" + dls: "" + fls: [] + masked_fields: [] + allowed_actions: + - "read" + - "delete" + - "manage" + - "index" + tenant_permissions: [] + static: false \ No newline at end of file diff --git a/indexer_certs_creator/config/unattended_installer/config/opensearch/roles/roles_mapping.yml b/indexer_certs_creator/config/unattended_installer/config/opensearch/roles/roles_mapping.yml new file mode 100755 index 00000000..7d8429cb --- /dev/null +++ b/indexer_certs_creator/config/unattended_installer/config/opensearch/roles/roles_mapping.yml @@ -0,0 +1,71 @@ +--- +# In this file users, backendroles and hosts can be mapped to Open Distro Security roles. +# Permissions for Opendistro roles are configured in roles.yml + +_meta: + type: "rolesmapping" + config_version: 2 + +# Define your roles mapping here + +## Demo roles mapping + +all_access: + reserved: false + backend_roles: + - "admin" + description: "Maps admin to all_access" + +own_index: + reserved: false + users: + - "*" + description: "Allow full access to an index named like the username" + +logstash: + reserved: false + backend_roles: + - "logstash" + +kibana_user: + reserved: false + backend_roles: + - "kibanauser" + users: + - "wazuh_user" + - "wazuh_admin" + description: "Maps kibanauser to kibana_user" + +readall: + reserved: false + backend_roles: + - "readall" + +manage_snapshots: + reserved: false + backend_roles: + - "snapshotrestore" + +kibana_server: + reserved: true + users: + - "kibanaserver" + +wazuh_ui_admin: + reserved: true + hidden: false + backend_roles: [] + hosts: [] + users: + - "wazuh_admin" + - "kibanaserver" + and_backend_roles: [] + +wazuh_ui_user: + reserved: true + hidden: false + backend_roles: [] + hosts: [] + users: + - "wazuh_user" + and_backend_roles: [] \ No newline at end of file diff --git a/indexer_certs_creator/config/unattended_installer/install_functions/wazuh-cert-tool.sh b/indexer_certs_creator/config/unattended_installer/install_functions/wazuh-cert-tool.sh new file mode 100755 index 00000000..1c7f7c23 --- /dev/null +++ b/indexer_certs_creator/config/unattended_installer/install_functions/wazuh-cert-tool.sh @@ -0,0 +1,433 @@ +#!/bin/bash + +# Program to generate the certificates necessary for Wazuh installation +# Copyright (C) 2015, Wazuh Inc. +# +# This program is a free software; you can redistribute it +# and/or modify it under the terms of the GNU General Public +# License (version 2) as published by the FSF - Free Software +# Foundation. + +if [ -z "${base_path}" ]; then + base_path="$(dirname "$(readlink -f "$0")")" + config_file="${base_path}/config.yml" +fi + +if [[ -z "${logfile}" ]]; then + logfile="/var/log/wazuh-cert-tool.log" +fi + +debug_cert=">> ${logfile} 2>&1" + +function cleanFiles() { + + eval "rm -f ${base_path}/certs/*.csr ${debug_cert}" + eval "rm -f ${base_path}/certs/*.srl ${debug_cert}" + eval "rm -f ${base_path}/certs/*.conf ${debug_cert}" + eval "rm -f ${base_path}/certs/admin-key-temp.pem ${debug_cert}" + +} + +function checkOpenSSL() { + if [ -z "$(command -v openssl)" ]; then + logger_cert -e "OpenSSL not installed." + exit 1 + fi +} + +function logger_cert() { + now=$(date +'%d/%m/%Y %H:%M:%S') + mtype="INFO:" + debugLogger= + disableHeader= + if [ -n "${1}" ]; then + while [ -n "${1}" ]; do + case ${1} in + "-e") + mtype="ERROR:" + shift 1 + ;; + "-w") + mtype="WARNING:" + shift 1 + ;; + "-dh") + disableHeader=1 + shift 1 + ;; + "-d") + debugLogger=1 + shift 1 + ;; + *) + message="${1}" + shift 1 + ;; + esac + done + fi + + if [ -z "${debugLogger}" ] || ( [ -n "${debugLogger}" ] && [ -n "${debugEnabled}" ] ); then + if [ -n "${disableHeader}" ]; then + echo "${message}" | tee -a ${logfile} + else + echo "${now} ${mtype} ${message}" | tee -a ${logfile} + fi + fi +} + +function generateAdmincertificate() { + + eval "openssl genrsa -out ${base_path}/certs/admin-key-temp.pem 2048 ${debug_cert}" + eval "openssl pkcs8 -inform PEM -outform PEM -in ${base_path}/certs/admin-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out ${base_path}/certs/admin-key.pem ${debug_cert}" + eval "openssl req -new -key ${base_path}/certs/admin-key.pem -out ${base_path}/certs/admin.csr -batch -subj '/C=US/L=California/O=Wazuh/OU=Docu/CN=admin' ${debug_cert}" + eval "openssl x509 -days 3650 -req -in ${base_path}/certs/admin.csr -CA ${base_path}/certs/root-ca.pem -CAkey ${base_path}/certs/root-ca.key -CAcreateserial -sha256 -out ${base_path}/certs/admin.pem ${debug_cert}" + +} + +function generateCertificateconfiguration() { + + cat > "${base_path}/certs/${1}.conf" <<- EOF + [ req ] + prompt = no + default_bits = 2048 + default_md = sha256 + distinguished_name = req_distinguished_name + x509_extensions = v3_req + + [req_distinguished_name] + C = US + L = California + O = Wazuh + OU = Docu + CN = cname + + [ v3_req ] + authorityKeyIdentifier=keyid,issuer + basicConstraints = CA:FALSE + keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment + subjectAltName = @alt_names + + [alt_names] + IP.1 = cip + EOF + + conf="$(awk '{sub("CN = cname", "CN = '${1}'")}1' "${base_path}/certs/${1}.conf")" + echo "${conf}" > "${base_path}/certs/${1}.conf" + + isIP=$(echo "${2}" | grep -P "^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$") + isDNS=$(echo "${2}" | grep -P "^[a-zA-Z0-9][a-zA-Z0-9-]{1,61}[a-zA-Z0-9](?:\.[a-zA-Z]{2,})+$" ) + + if [[ -n "${isIP}" ]]; then + conf="$(awk '{sub("IP.1 = cip", "IP.1 = '${2}'")}1' "${base_path}/certs/${1}.conf")" + echo "${conf}" > "${base_path}/certs/${1}.conf" + elif [[ -n "${isDNS}" ]]; then + conf="$(awk '{sub("CN = cname", "CN = '${2}'")}1' "${base_path}/certs/${1}.conf")" + echo "${conf}" > "${base_path}/certs/${1}.conf" + conf="$(awk '{sub("IP.1 = cip", "DNS.1 = '${2}'")}1' "${base_path}/certs/${1}.conf")" + echo "${conf}" > "${base_path}/certs/${1}.conf" + else + logger_cert -e "The given information does not match with an IP address or a DNS." + exit 1 + fi + +} + +function generateElasticsearchcertificates() { + + if [ ${#elasticsearch_node_names[@]} -gt 0 ]; then + logger_cert "Creating the Elasticsearch certificates." + + for i in "${!elasticsearch_node_names[@]}"; do + generateCertificateconfiguration "${elasticsearch_node_names[i]}" "${elasticsearch_node_ips[i]}" + eval "openssl req -new -nodes -newkey rsa:2048 -keyout ${base_path}/certs/${elasticsearch_node_names[i]}-key.pem -out ${base_path}/certs/${elasticsearch_node_names[i]}.csr -config ${base_path}/certs/${elasticsearch_node_names[i]}.conf -days 3650 ${debug_cert}" + eval "openssl x509 -req -in ${base_path}/certs/${elasticsearch_node_names[i]}.csr -CA ${base_path}/certs/root-ca.pem -CAkey ${base_path}/certs/root-ca.key -CAcreateserial -out ${base_path}/certs/${elasticsearch_node_names[i]}.pem -extfile ${base_path}/certs/${elasticsearch_node_names[i]}.conf -extensions v3_req -days 3650 ${debug_cert}" + eval "chmod 444 ${base_path}/certs/${elasticsearch_node_names[i]}-key.pem ${debug_cert}" + done + fi + +} + +function generateFilebeatcertificates() { + + if [ ${#wazuh_servers_node_names[@]} -gt 0 ]; then + logger_cert "Creating the Wazuh server certificates." + + for i in "${!wazuh_servers_node_names[@]}"; do + generateCertificateconfiguration "${wazuh_servers_node_names[i]}" "${wazuh_servers_node_ips[i]}" + eval "openssl req -new -nodes -newkey rsa:2048 -keyout ${base_path}/certs/${wazuh_servers_node_names[i]}-key.pem -out ${base_path}/certs/${wazuh_servers_node_names[i]}.csr -config ${base_path}/certs/${wazuh_servers_node_names[i]}.conf -days 3650 ${debug_cert}" + eval "openssl x509 -req -in ${base_path}/certs/${wazuh_servers_node_names[i]}.csr -CA ${base_path}/certs/root-ca.pem -CAkey ${base_path}/certs/root-ca.key -CAcreateserial -out ${base_path}/certs/${wazuh_servers_node_names[i]}.pem -extfile ${base_path}/certs/${wazuh_servers_node_names[i]}.conf -extensions v3_req -days 3650 ${debug_cert}" + done + fi + +} + +function generateKibanacertificates() { + + if [ ${#kibana_node_names[@]} -gt 0 ]; then + logger_cert "Creating the Kibana certificate." + + for i in "${!kibana_node_names[@]}"; do + generateCertificateconfiguration "${kibana_node_names[i]}" "${kibana_node_ips[i]}" + eval "openssl req -new -nodes -newkey rsa:2048 -keyout ${base_path}/certs/${kibana_node_names[i]}-key.pem -out ${base_path}/certs/${kibana_node_names[i]}.csr -config ${base_path}/certs/${kibana_node_names[i]}.conf -days 3650 ${debug_cert}" + eval "openssl x509 -req -in ${base_path}/certs/${kibana_node_names[i]}.csr -CA ${base_path}/certs/root-ca.pem -CAkey ${base_path}/certs/root-ca.key -CAcreateserial -out ${base_path}/certs/${kibana_node_names[i]}.pem -extfile ${base_path}/certs/${kibana_node_names[i]}.conf -extensions v3_req -days 3650 ${debug_cert}" + eval "chmod 444 ${base_path}/certs/${kibana_node_names[i]}-key.pem ${debug_cert}" + done + fi + +} + +function generateRootCAcertificate() { + + logger_cert "Creating the root certificate." + + eval "openssl req -x509 -new -nodes -newkey rsa:2048 -keyout ${base_path}/certs/root-ca.key -out ${base_path}/certs/root-ca.pem -batch -subj '/OU=Docu/O=Wazuh/L=California/' -days 3650 ${debug_cert}" + +} + +function getHelp() { + + echo -e "" + echo -e "NAME" + echo -e " wazuh-cert-tool.sh - Manages the creation of certificates of the Wazuh components." + echo -e "" + echo -e "SYNOPSIS" + echo -e " wazuh-cert-tool.sh [OPTIONS]" + echo -e "" + echo -e "DESCRIPTION" + echo -e " -a, --admin-certificates" + echo -e " Creates the admin certificates." + echo -e "" + echo -e " -ca, --root-ca-certificates" + echo -e " Creates the root-ca certificates." + echo -e "" + echo -e " -e, --elasticsearch-certificates" + echo -e " Creates the Elasticsearch certificates." + echo -e "" + echo -e " -k, --kibana-certificates" + echo -e " Creates the Kibana certificates." + echo -e "" + echo -e " -v, --verbose" + echo -e " Enables verbose mode." + echo -e "" + echo -e " -w, --wazuh-certificates" + echo -e " Creates the Wazuh server certificates." + + exit 1 + +} + +function main() { + + if [ "$EUID" -ne 0 ]; then + logger_cert -e "This script must be run as root." + exit 1 + fi + + checkOpenSSL + + if [[ -d ${base_path}/certs ]]; then + logger_cert -e "Folder ${base_path}/certs already exists. Please, remove the /certs folder to create new certificates." + exit 1 + else + mkdir "${base_path}/certs" + fi + + if [ -n "${1}" ]; then + while [ -n "${1}" ] + do + case "${1}" in + "-a"|"--admin-certificates") + cadmin=1 + shift 1 + ;; + "-ca"|"--root-ca-certificate") + ca=1 + shift 1 + ;; + "-e"|"--elasticsearch-certificates") + celasticsearch=1 + shift 1 + ;; + "-w"|"--wazuh-certificates") + cwazuh=1 + shift 1 + ;; + "-k"|"--kibana-certificates") + ckibana=1 + shift 1 + ;; + "-v"|"--verbose") + debugEnabled=1 + shift 1 + ;; + "-h"|"--help") + getHelp + ;; + *) + getHelp + esac + done + + readConfig + + if [ -n "${debugEnabled}" ]; then + debug_cert="2>&1 | tee -a ${logfile}" + fi + + if [[ -n "${cadmin}" ]]; then + generateAdmincertificate + logger_cert "Admin certificates created." + fi + + if [[ -n "${ca}" ]]; then + generateRootCAcertificate + logger_cert "Authority certificates created." + fi + + if [[ -n "${celasticsearch}" ]]; then + generateElasticsearchcertificates + logger_cert "Elasticsearch certificates created." + fi + + if [[ -n "${cwazuh}" ]]; then + generateFilebeatcertificates + logger_cert "Wazuh server certificates created." + fi + + if [[ -n "${ckibana}" ]]; then + generateKibanacertificates + logger_cert "Kibana certificates created." + fi + + else + readConfig + generateRootCAcertificate + generateAdmincertificate + generateElasticsearchcertificates + generateFilebeatcertificates + generateKibanacertificates + cleanFiles + fi + +} + +function parse_yaml() { + + local prefix=${2} + local s='[[:space:]]*' + local w='[a-zA-Z0-9_]*' + local fs=$(echo @|tr @ '\034') + sed -ne "s|^\($s\):|\1|" \ + -e "s|^\($s\)\($w\)$s:$s[\"']\(.*\)[\"']$s\$|\1$fs\2$fs\3|p" \ + -e "s|^\($s\)\($w\)$s:$s\(.*\)$s\$|\1$fs\2$fs\3|p" ${1} | + awk -F$fs '{ + indent = length($1)/2; + vname[indent] = $2; + for (i in vname) {if (i > indent) {delete vname[i]}} + if (length($3) > 0) { + vn=""; for (i=0; i /dev/null; then - useradd --system \ - --uid 1000 \ - --no-create-home \ - --home-dir $INSTALL_DIR \ - --gid $GROUP \ - --shell /sbin/nologin \ - --comment "$USER user" \ - $USER -fi +curl -o ${INDEXER_FILE} https://s3.amazonaws.com/warehouse.wazuh.com/indexer/${INDEXER_FILE} +tar -zvxf ${INDEXER_FILE} -# Create directories -mkdir -p ${INSTALL_DIR} -mkdir -p /etc -mkdir -p ${LOG_DIR} -mkdir -p ${LIB_DIR} -mkdir -p ${SYS_DIR} - -# Download required sources -curl -kOL https://s3.amazonaws.com/warehouse.wazuh.com/stack/indexer/wazuh-indexer-base-linux-x64.tar.gz -tar -xzf wazuh-indexer-*.tar.gz && rm -f wazuh-indexer-*.tar.gz -chown -R ${USER}:${GROUP} wazuh-indexer-*/* - -# Copy base files into directories -cp -rf wazuh-indexer-*/etc/wazuh.indexer /etc/ -cp -rf wazuh-indexer-*/etc/init.d/* /etc/init.d/ -cp -rf wazuh-indexer-*/etc/sysconfig/* /etc/sysconfig/ -cp -rf wazuh-indexer-*${SYS_DIR}/* ${SYS_DIR}/ -#rm -rf wazuh-indexer-*/etc -#rm -rf wazuh-indexer-*/usr -cp -pr wazuh-indexer-*/* ${INSTALL_DIR}/ - -# Download demo certificates -curl -kOL https://s3.amazonaws.com/warehouse.wazuh.com/stack/demo-certs.tar.gz -tar xzf demo-certs.tar.gz && rm -f demo-certs.tar.gz -chown -R ${USER}:${GROUP} certs -mkdir -p ${CONFIG_DIR}/certs/ -cp certs/admin.pem ${CONFIG_DIR}/certs/ -cp certs/admin-key.pem ${CONFIG_DIR}/certs/ -cp certs/demo-indexer.pem ${CONFIG_DIR}/certs/ -cp certs/demo-indexer-key.pem ${CONFIG_DIR}/certs/ -cp certs/root-ca.pem ${CONFIG_DIR}/certs/ - -#cp ${REPO_DIR}/install_functions/wazuh-cert-tool.sh ${INSTALL_DIR}/plugins/opensearch-security/tools/ -#cp ${REPO_DIR}/install_functions/wazuh-passwords-tool.sh ${INSTALL_DIR}/plugins/opensearch-security/tools/ -#cp ${REPO_DIR}/config/opensearch/certificate/config_aio.yml ${INSTALL_DIR}/plugins/opensearch-security/tools/config.yml - -#cp ${REPO_DIR}/config/opensearch/roles/internal_users.yml ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/ -#cp ${REPO_DIR}/config/opensearch/roles/roles.yml ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/ -#cp ${REPO_DIR}/config/opensearch/roles/roles_mapping.yml ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/ - -chmod 0660 "/etc/sysconfig/${NAME}" && chown root:${GROUP} "/etc/sysconfig/${NAME}" -chmod 400 ${CONFIG_DIR}/certs/admin.pem && chown ${USER}:${GROUP} ${CONFIG_DIR}/certs/admin.pem -chmod 400 ${CONFIG_DIR}/certs/admin-key.pem && chown ${USER}:${GROUP} ${CONFIG_DIR}/certs/admin-key.pem -chmod 400 ${CONFIG_DIR}/certs/demo-indexer.pem && chown ${USER}:${GROUP} ${CONFIG_DIR}/certs/demo-indexer.pem -chmod 400 ${CONFIG_DIR}/certs/demo-indexer-key.pem && chown ${USER}:${GROUP} ${CONFIG_DIR}/certs/demo-indexer-key.pem -chmod 400 ${CONFIG_DIR}/certs/root-ca.pem && chown ${USER}:${GROUP} ${CONFIG_DIR}/certs/root-ca.pem -chmod 660 ${CONFIG_DIR}/jvm.options && chown ${USER}:${GROUP} ${CONFIG_DIR}/jvm.options -chmod 660 ${CONFIG_DIR}/opensearch.yml && chown ${USER}:${GROUP} ${CONFIG_DIR}/opensearch.yml -chmod 660 ${CONFIG_DIR}/log4j2.properties && chown ${USER}:${GROUP} ${CONFIG_DIR}/log4j2.properties -chmod 750 ${CONFIG_DIR} && chown ${USER}:${GROUP} ${CONFIG_DIR} -chmod 750 ${LIB_DIR} && chown ${USER}:${GROUP} ${LIB_DIR} -chmod 750 ${LOG_DIR} && chown ${USER}:${GROUP} ${LOG_DIR} -chmod 750 ${INSTALL_DIR}/performance-analyzer-rca/lib && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib -chmod 750 ${INSTALL_DIR} && chown ${USER}:${GROUP} ${INSTALL_DIR} -chmod 750 ${INSTALL_DIR}/performance-analyzer-rca && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca -chmod 750 ${INSTALL_DIR}/performance-analyzer-rca/bin && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/bin -chmod 750 ${INSTALL_DIR}/performance-analyzer-rca/pa_bin && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_bin -chmod 750 ${INSTALL_DIR}/performance-analyzer-rca/pa_config && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_config -chmod 750 ${INSTALL_DIR}/bin && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin -chmod 750 ${INSTALL_DIR}/lib && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib -chmod 750 ${INSTALL_DIR}/lib/tools && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools -chmod 750 ${INSTALL_DIR}/lib/tools/plugin-cli && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools/plugin-cli -chmod 750 ${INSTALL_DIR}/lib/tools/upgrade-cli && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools/upgrade-cli -chmod 750 ${INSTALL_DIR}/lib/tools/keystore-cli && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools/keystore-cli -chmod 750 ${CONFIG_DIR}/certs && chown ${USER}:${GROUP} ${CONFIG_DIR}/certs -chmod 750 ${CONFIG_DIR}/opensearch-observability && chown ${USER}:${GROUP} ${CONFIG_DIR}/opensearch-observability -chmod 750 ${CONFIG_DIR}/opensearch-reports-scheduler && chown ${USER}:${GROUP} ${CONFIG_DIR}/opensearch-reports-scheduler -chmod 750 ${CONFIG_DIR}/jvm.options.d && chown ${USER}:${GROUP} ${CONFIG_DIR}/jvm.options.d -chmod 750 ${INSTALL_DIR}/plugins && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins -chmod 750 ${INSTALL_DIR}/plugins/opensearch-observability && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-observability -chmod 750 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler -chmod 750 ${INSTALL_DIR}/plugins/opensearch-sql && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql -chmod 750 ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication -chmod 750 ${INSTALL_DIR}/plugins/opensearch-knn && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn -chmod 750 ${INSTALL_DIR}/plugins/opensearch-knn/knnlib && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/knnlib -chmod 750 ${INSTALL_DIR}/plugins/opensearch-index-management && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management -chmod 750 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer -chmod 750 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_bin && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_bin -chmod 750 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config -chmod 750 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/extensions && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/extensions -chmod 750 ${INSTALL_DIR}/plugins/opensearch-job-scheduler && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-job-scheduler -chmod 750 ${INSTALL_DIR}/plugins/opensearch-security && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security -chmod 750 ${INSTALL_DIR}/plugins/opensearch-security/securityconfig && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/securityconfig -chmod 750 ${INSTALL_DIR}/plugins/opensearch-security/tools && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/tools -chmod 750 ${INSTALL_DIR}/plugins/opensearch-asynchronous-search && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-asynchronous-search -chmod 750 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection -chmod 750 ${INSTALL_DIR}/plugins/opensearch-alerting && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting -chmod 750 ${INSTALL_DIR}/modules && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules -chmod 750 ${INSTALL_DIR}/modules/ingest-common && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-common -chmod 750 ${INSTALL_DIR}/modules/geo && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/geo -chmod 750 ${INSTALL_DIR}/modules/ingest-geoip && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-geoip -chmod 750 ${INSTALL_DIR}/modules/percolator && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/percolator -chmod 750 ${INSTALL_DIR}/modules/analysis-common && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/analysis-common -chmod 750 ${INSTALL_DIR}/modules/aggs-matrix-stats && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/aggs-matrix-stats -chmod 750 ${INSTALL_DIR}/modules/repository-url && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/repository-url -chmod 750 ${INSTALL_DIR}/modules/lang-mustache && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-mustache -chmod 750 ${INSTALL_DIR}/modules/systemd && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/systemd -chmod 750 ${INSTALL_DIR}/modules/transport-netty4 && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/transport-netty4 -chmod 750 ${INSTALL_DIR}/modules/lang-expression && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-expression -chmod 750 ${INSTALL_DIR}/modules/lang-painless && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-painless -chmod 750 ${INSTALL_DIR}/modules/rank-eval && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/rank-eval -chmod 750 ${INSTALL_DIR}/modules/opensearch-dashboards && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards -chmod 750 ${INSTALL_DIR}/modules/ingest-user-agent && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-user-agent -chmod 750 ${INSTALL_DIR}/modules/mapper-extras && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/mapper-extras -chmod 750 ${INSTALL_DIR}/modules/parent-join && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/parent-join -chmod 750 ${INSTALL_DIR}/modules/reindex && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex -chmod 750 ${INSTALL_DIR}/jdk && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk -chmod 750 ${INSTALL_DIR}/jdk/man && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man -chmod 750 ${INSTALL_DIR}/jdk/man/man1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1 -chmod 750 ${INSTALL_DIR}/jdk/bin && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin -chmod 750 ${INSTALL_DIR}/jdk/legal && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal -chmod 750 ${INSTALL_DIR}/jdk/legal/java.base && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.base -chmod 750 ${INSTALL_DIR}/jdk/legal/java.security.sasl && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.security.sasl -chmod 750 ${INSTALL_DIR}/jdk/legal/java.scripting && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.scripting -chmod 750 ${INSTALL_DIR}/jdk/legal/java.management && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.management -chmod 750 ${INSTALL_DIR}/jdk/legal/java.xml && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.xml -chmod 750 ${INSTALL_DIR}/jdk/legal/java.smartcardio && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.smartcardio -chmod 750 ${INSTALL_DIR}/jdk/legal/java.transaction.xa && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.transaction.xa -chmod 750 ${INSTALL_DIR}/jdk/legal/java.prefs && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.prefs -chmod 750 ${INSTALL_DIR}/jdk/legal/java.compiler && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.compiler -chmod 750 ${INSTALL_DIR}/jdk/legal/java.logging && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.logging -chmod 750 ${INSTALL_DIR}/jdk/legal/java.xml.crypto && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.xml.crypto -chmod 750 ${INSTALL_DIR}/jdk/legal/java.sql.rowset && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.sql.rowset -chmod 750 ${INSTALL_DIR}/jdk/legal/java.net.http && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.net.http -chmod 750 ${INSTALL_DIR}/jdk/legal/java.rmi && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.rmi -chmod 750 ${INSTALL_DIR}/jdk/legal/java.sql && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.sql -chmod 750 ${INSTALL_DIR}/jdk/legal/java.naming && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.naming -chmod 750 ${INSTALL_DIR}/jdk/legal/java.datatransfer && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.datatransfer -chmod 750 ${INSTALL_DIR}/jdk/legal/java.instrument && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.instrument -chmod 750 ${INSTALL_DIR}/jdk/legal/java.management.rmi && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.management.rmi -chmod 750 ${INSTALL_DIR}/jdk/legal/java.desktop && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.desktop -chmod 750 ${INSTALL_DIR}/jdk/lib && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib -chmod 750 ${INSTALL_DIR}/jdk/lib/server && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/server -chmod 750 ${INSTALL_DIR}/jdk/lib/jfr && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/jfr -chmod 750 ${INSTALL_DIR}/jdk/lib/security && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/security -chmod 750 ${INSTALL_DIR}/jdk/include && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/include -chmod 750 ${INSTALL_DIR}/jdk/include/linux && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/include/linux -chmod 750 ${INSTALL_DIR}/jdk/conf && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf -chmod 750 ${INSTALL_DIR}/jdk/conf/sdp && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/sdp -chmod 750 ${INSTALL_DIR}/jdk/conf/management && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/management -chmod 750 ${INSTALL_DIR}/jdk/conf/security && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security -chmod 750 ${INSTALL_DIR}/jdk/conf/security/policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security/policy -chmod 750 ${INSTALL_DIR}/jdk/conf/security/policy/limited && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security/policy/limited -chmod 750 ${INSTALL_DIR}/jdk/conf/security/policy/unlimited && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security/policy/unlimited -chmod 750 ${INSTALL_DIR}/jdk/jmods && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods -chmod 0750 /etc/init.d/${NAME} && chown root:root /etc/init.d/${NAME} -chmod 0640 ${SYS_DIR}/sysctl.d/${NAME}.conf && chown root:root ${SYS_DIR}/sysctl.d/${NAME}.conf -chmod 0640 ${SYS_DIR}/systemd/system/${NAME}.service && chown root:root ${SYS_DIR}/systemd/system/${NAME}.service -chmod 0640 ${SYS_DIR}/systemd/system/${NAME}-performance-analyzer.service && chown root:root ${SYS_DIR}/systemd/system/${NAME}-performance-analyzer.service -chmod 0640 ${SYS_DIR}/tmpfiles.d/${NAME}.conf && chown root:root ${SYS_DIR}/tmpfiles.d/${NAME}.conf -chmod 750 ${INSTALL_DIR}/performance-analyzer-rca/bin/performance-analyzer-rca && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/bin/performance-analyzer-rca -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/performance-analyzer-rca-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/performance-analyzer-rca-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/error_prone_annotations-2.3.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/error_prone_annotations-2.3.4.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/sqlite-jdbc-3.32.3.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/sqlite-jdbc-3.32.3.2.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-stub-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-stub-1.28.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/log4j-api-2.17.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/log4j-api-2.17.1.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/bcpkix-jdk15on-1.68.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/bcpkix-jdk15on-1.68.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/bcprov-jdk15on-1.68.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/bcprov-jdk15on-1.68.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/jackson-databind-2.11.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/jackson-databind-2.11.4.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/protobuf-java-3.11.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/protobuf-java-3.11.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/gson-2.8.6.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/gson-2.8.6.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/j2objc-annotations-1.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/j2objc-annotations-1.3.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/commons-lang3-3.9.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/commons-lang3-3.9.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/jsr305-3.0.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/jsr305-3.0.2.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/log4j-core-2.17.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/log4j-core-2.17.1.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/perfmark-api-0.19.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/perfmark-api-0.19.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/guava-28.2-jre.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/guava-28.2-jre.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-core-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-core-1.28.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-netty-shaded-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-netty-shaded-1.28.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-context-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-context-1.28.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/annotations-4.1.1.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/annotations-4.1.1.4.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/animal-sniffer-annotations-1.18.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/animal-sniffer-annotations-1.18.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/jackson-annotations-2.11.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/jackson-annotations-2.11.4.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/proto-google-common-protos-1.17.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/proto-google-common-protos-1.17.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/javax.annotation-api-1.3.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/javax.annotation-api-1.3.2.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/checker-qual-2.10.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/checker-qual-2.10.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/commons-io-2.7.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/commons-io-2.7.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/jooq-3.10.8.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/jooq-3.10.8.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/jackson-core-2.11.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/jackson-core-2.11.4.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-protobuf-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-protobuf-1.28.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-protobuf-lite-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-protobuf-lite-1.28.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-api-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/grpc-api-1.28.0.jar -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/lib/failureaccess-1.0.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/lib/failureaccess-1.0.1.jar -chmod 750 ${INSTALL_DIR}/performance-analyzer-rca/pa_bin/performance-analyzer-agent && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_bin/performance-analyzer-agent -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/pa_config/agent-stats-metadata && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_config/agent-stats-metadata -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/pa_config/plugin-stats-metadata && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_config/plugin-stats-metadata -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/pa_config/performance-analyzer.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_config/performance-analyzer.properties -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/pa_config/rca_master.conf && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_config/rca_master.conf -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/pa_config/rca.conf && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_config/rca.conf -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/pa_config/opensearch_security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_config/opensearch_security.policy -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/pa_config/log4j2.xml && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_config/log4j2.xml -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/pa_config/rca_idle_master.conf && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_config/rca_idle_master.conf -chmod 640 ${INSTALL_DIR}/performance-analyzer-rca/pa_config/supervisord.conf && chown ${USER}:${GROUP} ${INSTALL_DIR}/performance-analyzer-rca/pa_config/supervisord.conf -chmod 750 ${INSTALL_DIR}/bin/opensearch-shard && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin/opensearch-shard -chmod 750 ${INSTALL_DIR}/bin/opensearch-node && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin/opensearch-node -chmod 750 ${INSTALL_DIR}/bin/opensearch-keystore && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin/opensearch-keystore -chmod 750 ${INSTALL_DIR}/bin/opensearch-plugin && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin/opensearch-plugin -chmod 750 ${INSTALL_DIR}/bin/opensearch && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin/opensearch -chmod 750 ${INSTALL_DIR}/bin/opensearch-cli && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin/opensearch-cli -chmod 750 ${INSTALL_DIR}/bin/opensearch-env && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin/opensearch-env -chmod 750 ${INSTALL_DIR}/bin/performance-analyzer-agent-cli && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin/performance-analyzer-agent-cli -chmod 750 ${INSTALL_DIR}/bin/opensearch-env-from-file && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin/opensearch-env-from-file -chmod 750 ${INSTALL_DIR}/bin/opensearch-upgrade && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin/opensearch-upgrade -chmod 750 ${INSTALL_DIR}/bin/systemd-entrypoint && chown ${USER}:${GROUP} ${INSTALL_DIR}/bin/systemd-entrypoint -chmod 640 ${INSTALL_DIR}/lib/hppc-0.8.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/hppc-0.8.1.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-highlighter-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-highlighter-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/opensearch-geo-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/opensearch-geo-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-spatial-extras-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-spatial-extras-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/opensearch-cli-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/opensearch-cli-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/java-version-checker-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/java-version-checker-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-memory-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-memory-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/log4j-api-2.17.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/log4j-api-2.17.1.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-analyzers-common-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-analyzers-common-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/snakeyaml-1.26.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/snakeyaml-1.26.jar -chmod 640 ${INSTALL_DIR}/lib/joda-time-2.10.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/joda-time-2.10.4.jar -chmod 640 ${INSTALL_DIR}/lib/opensearch-x-content-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/opensearch-x-content-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-join-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-join-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/opensearch-plugin-classloader-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/opensearch-plugin-classloader-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/jna-5.5.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/jna-5.5.0.jar -chmod 640 ${INSTALL_DIR}/lib/jackson-dataformat-smile-2.12.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/jackson-dataformat-smile-2.12.5.jar -chmod 640 ${INSTALL_DIR}/lib/log4j-core-2.17.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/log4j-core-2.17.1.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-suggest-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-suggest-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/opensearch-launchers-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/opensearch-launchers-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/jackson-dataformat-yaml-2.12.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/jackson-dataformat-yaml-2.12.5.jar -chmod 640 ${INSTALL_DIR}/lib/HdrHistogram-2.1.9.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/HdrHistogram-2.1.9.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-core-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-core-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-queries-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-queries-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/opensearch-secure-sm-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/opensearch-secure-sm-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/tools/plugin-cli/bcpg-fips-1.0.5.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools/plugin-cli/bcpg-fips-1.0.5.1.jar -chmod 640 ${INSTALL_DIR}/lib/tools/plugin-cli/opensearch-plugin-cli-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools/plugin-cli/opensearch-plugin-cli-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/tools/plugin-cli/bc-fips-1.0.2.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools/plugin-cli/bc-fips-1.0.2.1.jar -chmod 640 ${INSTALL_DIR}/lib/tools/upgrade-cli/jackson-annotations-2.12.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools/upgrade-cli/jackson-annotations-2.12.5.jar -chmod 640 ${INSTALL_DIR}/lib/tools/upgrade-cli/jackson-databind-2.12.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools/upgrade-cli/jackson-databind-2.12.5.jar -chmod 640 ${INSTALL_DIR}/lib/tools/upgrade-cli/jackson-core-2.12.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools/upgrade-cli/jackson-core-2.12.5.jar -chmod 640 ${INSTALL_DIR}/lib/tools/upgrade-cli/opensearch-upgrade-cli-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools/upgrade-cli/opensearch-upgrade-cli-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/tools/keystore-cli/keystore-cli-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/tools/keystore-cli/keystore-cli-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-queryparser-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-queryparser-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-sandbox-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-sandbox-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/jts-core-1.15.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/jts-core-1.15.0.jar -chmod 640 ${INSTALL_DIR}/lib/jackson-dataformat-cbor-2.12.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/jackson-dataformat-cbor-2.12.5.jar -chmod 640 ${INSTALL_DIR}/lib/opensearch-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/opensearch-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-grouping-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-grouping-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-misc-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-misc-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/jackson-core-2.12.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/jackson-core-2.12.5.jar -chmod 640 ${INSTALL_DIR}/lib/t-digest-3.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/t-digest-3.2.jar -chmod 640 ${INSTALL_DIR}/lib/opensearch-core-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/opensearch-core-1.2.4.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-backward-codecs-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-backward-codecs-8.10.1.jar -chmod 640 ${INSTALL_DIR}/lib/spatial4j-0.7.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/spatial4j-0.7.jar -chmod 640 ${INSTALL_DIR}/lib/jopt-simple-5.0.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/jopt-simple-5.0.2.jar -chmod 640 ${INSTALL_DIR}/lib/lucene-spatial3d-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/lib/lucene-spatial3d-8.10.1.jar -chmod 660 ${CONFIG_DIR}/opensearch-observability/observability.yml && chown ${USER}:${GROUP} ${CONFIG_DIR}/opensearch-observability/observability.yml -chmod 660 ${CONFIG_DIR}/opensearch-reports-scheduler/reports-scheduler.yml && chown ${USER}:${GROUP} ${CONFIG_DIR}/opensearch-reports-scheduler/reports-scheduler.yml -chmod 640 ${INSTALL_DIR}/NOTICE.txt && chown ${USER}:${GROUP} ${INSTALL_DIR}/NOTICE.txt -chmod 640 ${INSTALL_DIR}/LICENSE.txt && chown ${USER}:${GROUP} ${INSTALL_DIR}/LICENSE.txt -chmod 640 ${INSTALL_DIR}/plugins/opensearch-observability/opensearch-observability-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-observability/opensearch-observability-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-observability/common-utils-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-observability/common-utils-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-observability/kotlin-stdlib-1.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-observability/kotlin-stdlib-1.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-observability/annotations-13.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-observability/annotations-13.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-observability/kotlinx-coroutines-core-jvm-1.3.9.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-observability/kotlinx-coroutines-core-jvm-1.3.9.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-observability/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-observability/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-observability/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-observability/plugin-security.policy -chmod 640 ${INSTALL_DIR}/plugins/opensearch-observability/kotlin-stdlib-common-1.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-observability/kotlin-stdlib-common-1.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-observability/guava-15.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-observability/guava-15.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/jsoup-1.14.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/jsoup-1.14.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/minimal-json-0.9.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/minimal-json-0.9.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/json-flattener-0.1.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/json-flattener-0.1.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/common-utils-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/common-utils-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/kotlin-stdlib-1.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/kotlin-stdlib-1.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/annotations-13.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/annotations-13.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/json-20180813.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/json-20180813.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/kotlinx-coroutines-core-jvm-1.3.9.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/kotlinx-coroutines-core-jvm-1.3.9.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/plugin-security.policy -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/kotlin-stdlib-common-1.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/kotlin-stdlib-common-1.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/opensearch-reports-scheduler-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/opensearch-reports-scheduler-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/guava-15.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-reports-scheduler/guava-15.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/spring-beans-5.2.5.RELEASE.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/spring-beans-5.2.5.RELEASE.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/resilience4j-core-1.5.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/resilience4j-core-1.5.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/error_prone_annotations-2.3.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/error_prone_annotations-2.3.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/core-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/core-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/spring-expression-5.2.5.RELEASE.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/spring-expression-5.2.5.RELEASE.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/httpcore-nio-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/httpcore-nio-4.4.12.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/httpasyncclient-4.1.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/httpasyncclient-4.1.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/spring-aop-5.2.5.RELEASE.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/spring-aop-5.2.5.RELEASE.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/guava-29.0-jre.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/guava-29.0-jre.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/protocol-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/protocol-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/spring-context-5.2.5.RELEASE.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/spring-context-5.2.5.RELEASE.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/slf4j-api-1.7.30.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/slf4j-api-1.7.30.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/druid-1.0.15.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/druid-1.0.15.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/sql-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/sql-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/opensearch-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/opensearch-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/commons-lang3-3.10.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/commons-lang3-3.10.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/jackson-databind-2.11.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/jackson-databind-2.11.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/checker-qual-2.11.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/checker-qual-2.11.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/reindex-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/reindex-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/gson-2.8.9.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/gson-2.8.9.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/j2objc-annotations-1.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/j2objc-annotations-1.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/jsr305-3.0.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/jsr305-3.0.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/spring-core-5.2.5.RELEASE.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/spring-core-5.2.5.RELEASE.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/antlr4-runtime-4.7.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/antlr4-runtime-4.7.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/json-20180813.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/json-20180813.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/NOTICE.txt && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/NOTICE.txt -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/resilience4j-retry-1.5.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/resilience4j-retry-1.5.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/spring-jcl-5.2.5.RELEASE.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/spring-jcl-5.2.5.RELEASE.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/LICENSE.txt && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/LICENSE.txt -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/jackson-annotations-2.11.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/jackson-annotations-2.11.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/vavr-match-0.10.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/vavr-match-0.10.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/parent-join-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/parent-join-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/vavr-0.10.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/vavr-0.10.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/presto-matching-0.240.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/presto-matching-0.240.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/opensearch-rest-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/opensearch-rest-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/plugin-security.policy -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/httpclient-4.5.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/httpclient-4.5.13.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/legacy-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/legacy-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/opensearch-ssl-config-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/opensearch-ssl-config-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/commons-codec-1.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/commons-codec-1.13.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/opensearch-sql-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/opensearch-sql-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/commons-math3-3.6.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/commons-math3-3.6.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/ppl-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/ppl-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/httpcore-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/httpcore-4.4.12.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/failureaccess-1.0.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/failureaccess-1.0.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-sql/common-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-sql/common-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/ipaddress-5.3.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/ipaddress-5.3.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/common-utils-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/common-utils-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/annotations-13.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/annotations-13.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/kotlinx-coroutines-core-1.3.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/kotlinx-coroutines-core-1.3.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/opensearch-cross-cluster-replication-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/opensearch-cross-cluster-replication-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-common-1.3.72.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-common-1.3.72.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-jdk7-1.3.72.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-jdk7-1.3.72.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-1.3.72.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-1.3.72.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-jdk8-1.3.72.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-jdk8-1.3.72.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/commons-lang-2.6.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/commons-lang-2.6.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/error_prone_annotations-2.3.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/error_prone_annotations-2.3.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/guava-29.0-jre.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/guava-29.0-jre.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/opensearch-knn-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/opensearch-knn-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/checker-qual-2.11.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/checker-qual-2.11.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/j2objc-annotations-1.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/j2objc-annotations-1.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/jsr305-3.0.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/jsr305-3.0.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/knnlib/libopensearchknn_common.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/knnlib/libopensearchknn_common.so -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/knnlib/libgomp.so.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/knnlib/libgomp.so.1 -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/knnlib/libopensearchknn_nmslib.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/knnlib/libopensearchknn_nmslib.so -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/knnlib/libopensearchknn_faiss.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/knnlib/libopensearchknn_faiss.so -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/plugin-security.policy -chmod 640 ${INSTALL_DIR}/plugins/opensearch-knn/failureaccess-1.0.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-knn/failureaccess-1.0.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/ipaddress-5.3.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/ipaddress-5.3.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/common-utils-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/common-utils-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/kotlin-stdlib-1.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/kotlin-stdlib-1.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/annotations-13.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/annotations-13.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/kotlinx-coroutines-core-jvm-1.3.9.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/kotlinx-coroutines-core-jvm-1.3.9.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/notification-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/notification-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/kotlin-stdlib-jdk8-1.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/kotlin-stdlib-jdk8-1.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/opensearch-index-management-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/opensearch-index-management-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/plugin-security.policy -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/kotlin-stdlib-common-1.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/kotlin-stdlib-common-1.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-index-management/kotlin-stdlib-jdk7-1.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-index-management/kotlin-stdlib-jdk7-1.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/error_prone_annotations-2.3.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/error_prone_annotations-2.3.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/sqlite-jdbc-3.32.3.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/sqlite-jdbc-3.32.3.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-stub-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-stub-1.28.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/bcpkix-jdk15on-1.68.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/bcpkix-jdk15on-1.68.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/bcprov-jdk15on-1.68.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/bcprov-jdk15on-1.68.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/jackson-databind-2.11.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/jackson-databind-2.11.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/protobuf-java-3.11.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/protobuf-java-3.11.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/paranamer-2.8.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/paranamer-2.8.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/jackson-module-paranamer-2.11.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/jackson-module-paranamer-2.11.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/gson-2.8.6.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/gson-2.8.6.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/j2objc-annotations-1.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/j2objc-annotations-1.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/commons-lang3-3.9.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/commons-lang3-3.9.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/jsr305-3.0.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/jsr305-3.0.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/perfmark-api-0.19.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/perfmark-api-0.19.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/opensearch-performance-analyzer-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/opensearch-performance-analyzer-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/guava-28.2-jre.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/guava-28.2-jre.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-core-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-core-1.28.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-netty-shaded-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-netty-shaded-1.28.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-context-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-context-1.28.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/annotations-4.1.1.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/annotations-4.1.1.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/animal-sniffer-annotations-1.18.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/animal-sniffer-annotations-1.18.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/jackson-annotations-2.11.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/jackson-annotations-2.11.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_bin/performance-analyzer-agent && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_bin/performance-analyzer-agent -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/performance-analyzer.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/performance-analyzer.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/rca_master.conf && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/rca_master.conf -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/rca.conf && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/rca.conf -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/agent-stats-metadata && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/agent-stats-metadata -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/plugin-stats-metadata && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/plugin-stats-metadata -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/opensearch_security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/opensearch_security.policy -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/log4j2.xml && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/log4j2.xml -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/rca_idle_master.conf && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/rca_idle_master.conf -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/supervisord.conf && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/pa_config/supervisord.conf -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/performanceanalyzer-rca-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/performanceanalyzer-rca-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/proto-google-common-protos-1.17.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/proto-google-common-protos-1.17.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/plugin-security.policy -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/javax.annotation-api-1.3.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/javax.annotation-api-1.3.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/checker-qual-2.10.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/checker-qual-2.10.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/commons-io-2.7.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/commons-io-2.7.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/jooq-3.10.8.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/jooq-3.10.8.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-protobuf-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-protobuf-1.28.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-protobuf-lite-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-protobuf-lite-1.28.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/extensions/performance-analyzer-agent && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/extensions/performance-analyzer-agent -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-api-1.28.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/grpc-api-1.28.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/failureaccess-1.0.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-performance-analyzer/failureaccess-1.0.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-job-scheduler/opensearch-job-scheduler-spi-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-job-scheduler/opensearch-job-scheduler-spi-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-job-scheduler/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-job-scheduler/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-job-scheduler/opensearch-job-scheduler-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-job-scheduler/opensearch-job-scheduler-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-saml-api-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-saml-api-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/commons-codec-1.14.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/commons-codec-1.14.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/java-saml-2.5.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/java-saml-2.5.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/slf4j-api-1.7.25.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/slf4j-api-1.7.25.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/minimal-json-0.9.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/minimal-json-0.9.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-security-api-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-security-api-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jakarta.jws-api-2.1.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jakarta.jws-api-2.1.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/netty-codec-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/netty-codec-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jackson-databind-2.11.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jackson-databind-2.11.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jakarta.activation-1.2.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jakarta.activation-1.2.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/commons-logging-1.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/commons-logging-1.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/json-path-2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/json-path-2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/aggs-matrix-stats-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/aggs-matrix-stats-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/httpcore-nio-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/httpcore-nio-4.4.12.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/httpasyncclient-4.1.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/httpasyncclient-4.1.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/lang-mustache-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/lang-mustache-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/bcprov-jdk15on-1.67.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/bcprov-jdk15on-1.67.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/json-flattener-0.5.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/json-flattener-0.5.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/cxf-rt-rs-json-basic-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/cxf-rt-rs-json-basic-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/snappy-java-1.1.7.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/snappy-java-1.1.7.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/netty-common-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/netty-common-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-xmlsec-impl-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-xmlsec-impl-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/txw2-2.3.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/txw2-2.3.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/cxf-core-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/cxf-core-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jackson-annotations-2.11.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jackson-annotations-2.11.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/metrics-core-3.1.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/metrics-core-3.1.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-soap-impl-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-soap-impl-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/j2objc-annotations-1.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/j2objc-annotations-1.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jsr305-3.0.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jsr305-3.0.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-messaging-api-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-messaging-api-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-storage-api-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-storage-api-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/commons-lang-2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/commons-lang-2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/mapper-extras-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/mapper-extras-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jakarta.xml.bind-api-2.3.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jakarta.xml.bind-api-2.3.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-saml-impl-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-saml-impl-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/java-saml-core-2.5.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/java-saml-core-2.5.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/cryptacular-1.1.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/cryptacular-1.1.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-core-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-core-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/commons-cli-1.3.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/commons-cli-1.3.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jjwt-api-0.10.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jjwt-api-0.10.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/log4j-slf4j-impl-2.17.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/log4j-slf4j-impl-2.17.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/commons-lang3-3.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/commons-lang3-3.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/lz4-java-1.7.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/lz4-java-1.7.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/rank-eval-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/rank-eval-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/ldaptive-1.2.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/ldaptive-1.2.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jakarta.xml.soap-api-1.4.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jakarta.xml.soap-api-1.4.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensearch-security-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensearch-security-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jjwt-jackson-0.10.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jjwt-jackson-0.10.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/whitelist.yml && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/whitelist.yml -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/tenants.yml && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/tenants.yml -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/nodes_dn.yml && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/nodes_dn.yml -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/audit.yml && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/audit.yml -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/action_groups.yml && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/action_groups.yml -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/config.yml && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/config.yml -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/roles_mapping.yml && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/roles_mapping.yml -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/roles.yml && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/roles.yml -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/opensearch.yml.example && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/opensearch.yml.example -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/internal_users.yml && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/securityconfig/internal_users.yml -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/woodstox-core-6.2.6.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/woodstox-core-6.2.6.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/eventbus-3.2.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/eventbus-3.2.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/istack-commons-runtime-3.0.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/istack-commons-runtime-3.0.12.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/asm-9.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/asm-9.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/parent-join-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/parent-join-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jjwt-impl-0.10.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jjwt-impl-0.10.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/json-smart-2.4.7.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/json-smart-2.4.7.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/xmlsec-2.2.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/xmlsec-2.2.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/tools/config.yml && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/tools/config.yml -chmod 740 ${INSTALL_DIR}/plugins/opensearch-security/tools/hash.sh && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/tools/hash.sh -chmod 740 ${INSTALL_DIR}/plugins/opensearch-security/tools/securityadmin.sh && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/tools/securityadmin.sh -chmod 740 ${INSTALL_DIR}/plugins/opensearch-security/tools/audit_config_migrater.sh && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/tools/audit_config_migrater.sh -chmod 740 ${INSTALL_DIR}/plugins/opensearch-security/tools/wazuh-cert-tool.sh && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/tools/wazuh-cert-tool.sh -chmod 740 ${INSTALL_DIR}/plugins/opensearch-security/tools/wazuh-passwords-tool.sh && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/tools/wazuh-passwords-tool.sh -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jakarta.xml.ws-api-2.3.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jakarta.xml.ws-api-2.3.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/xmlschema-core-2.2.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/xmlschema-core-2.2.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/httpclient-cache-4.5.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/httpclient-cache-4.5.13.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/velocity-1.7.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/velocity-1.7.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/error_prone_annotations-2.1.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/error_prone_annotations-2.1.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/netty-resolver-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/netty-resolver-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/transport-netty4-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/transport-netty4-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/animal-sniffer-annotations-1.14.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/animal-sniffer-annotations-1.14.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/stax-ex-1.8.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/stax-ex-1.8.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensearch-rest-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensearch-rest-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/compiler-0.9.6.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/compiler-0.9.6.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/plugin-security.policy -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/guava-25.1-jre.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/guava-25.1-jre.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-xmlsec-api-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-xmlsec-api-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/httpclient-4.5.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/httpclient-4.5.13.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/zjsonpatch-0.4.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/zjsonpatch-0.4.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/accessors-smart-2.4.7.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/accessors-smart-2.4.7.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensearch-rest-high-level-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensearch-rest-high-level-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/cxf-rt-security-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/cxf-rt-security-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/java-support-7.5.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/java-support-7.5.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/netty-transport-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/netty-transport-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/kafka-clients-2.5.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/kafka-clients-2.5.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/stax2-api-4.2.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/stax2-api-4.2.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/cxf-rt-rs-security-jose-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/cxf-rt-rs-security-jose-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-profile-api-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-profile-api-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jaxb-runtime-2.3.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jaxb-runtime-2.3.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-security-impl-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-security-impl-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/commons-collections-3.2.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/commons-collections-3.2.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/netty-buffer-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/netty-buffer-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/saaj-impl-1.5.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/saaj-impl-1.5.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/commons-text-1.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/commons-text-1.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/zstd-jni-1.4.4-7.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/zstd-jni-1.4.4-7.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/jakarta.annotation-api-1.3.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/jakarta.annotation-api-1.3.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/geronimo-jta_1.1_spec-1.1.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/geronimo-jta_1.1_spec-1.1.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/checker-qual-2.0.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/checker-qual-2.0.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/netty-codec-http-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/netty-codec-http-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/httpcore-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/httpcore-4.4.12.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/opensaml-soap-api-3.4.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/opensaml-soap-api-3.4.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-security/netty-handler-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-security/netty-handler-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-asynchronous-search/opensearch-asynchronous-search-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-asynchronous-search/opensearch-asynchronous-search-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-asynchronous-search/common-utils-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-asynchronous-search/common-utils-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-asynchronous-search/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-asynchronous-search/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-asynchronous-search/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-asynchronous-search/plugin-security.policy -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-lang3-3.12.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-lang3-3.12.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-lang-2.6.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-lang-2.6.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/org.jacoco.report-0.8.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/org.jacoco.report-0.8.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/slf4j-api-1.7.25.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/slf4j-api-1.7.25.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/error_prone_annotations-2.3.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/error_prone_annotations-2.3.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/httpcore-nio-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/httpcore-nio-4.4.12.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/httpasyncclient-4.1.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/httpasyncclient-4.1.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/guava-29.0-jre.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/guava-29.0-jre.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/randomcutforest-core-2.0.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/randomcutforest-core-2.0.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/randomcutforest-serialization-2.0.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/randomcutforest-serialization-2.0.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/jackson-databind-2.11.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/jackson-databind-2.11.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/checker-qual-2.11.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/checker-qual-2.11.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/randomcutforest-parkservices-2.0.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/randomcutforest-parkservices-2.0.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/gson-2.8.9.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/gson-2.8.9.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/protostuff-collectionschema-1.7.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/protostuff-collectionschema-1.7.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/j2objc-annotations-1.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/j2objc-annotations-1.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/common-utils-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/common-utils-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/opensearch-anomaly-detection-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/opensearch-anomaly-detection-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/jsr305-3.0.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/jsr305-3.0.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/org.jacoco.ant-0.8.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/org.jacoco.ant-0.8.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-pool2-2.10.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-pool2-2.10.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/sketches-core-0.13.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/sketches-core-0.13.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/org.jacoco.core-0.8.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/org.jacoco.core-0.8.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/org.jacoco.agent-0.8.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/org.jacoco.agent-0.8.5.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/protostuff-api-1.7.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/protostuff-api-1.7.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/memory-0.12.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/memory-0.12.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/jackson-annotations-2.11.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/jackson-annotations-2.11.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/protostuff-runtime-1.7.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/protostuff-runtime-1.7.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/protostuff-core-1.7.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/protostuff-core-1.7.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-logging-1.1.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-logging-1.1.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/opensearch-rest-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/opensearch-rest-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/plugin-security.policy -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/httpclient-4.5.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/httpclient-4.5.13.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-codec-1.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-codec-1.13.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-math3-3.6.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/commons-math3-3.6.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/httpcore-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/httpcore-4.4.12.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/failureaccess-1.0.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-anomaly-detection/failureaccess-1.0.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/error_prone_annotations-2.3.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/error_prone_annotations-2.3.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/httpcore-nio-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/httpcore-nio-4.4.12.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/httpasyncclient-4.1.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/httpasyncclient-4.1.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/cron-utils-9.1.6.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/cron-utils-9.1.6.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/javax.mail-1.6.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/javax.mail-1.6.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/slf4j-api-1.7.30.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/slf4j-api-1.7.30.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/ipaddress-5.3.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/ipaddress-5.3.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/j2objc-annotations-1.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/j2objc-annotations-1.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/common-utils-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/common-utils-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/jsr305-3.0.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/jsr305-3.0.2.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/javax.el-3.0.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/javax.el-3.0.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/javassist-3.27.0-GA.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/javassist-3.27.0-GA.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/kotlinx-coroutines-core-1.1.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/kotlinx-coroutines-core-1.1.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/annotations-13.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/annotations-13.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/guava-30.0-jre.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/guava-30.0-jre.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/activation-1.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/activation-1.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/alerting-core-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/alerting-core-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/google-java-format-1.10.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/google-java-format-1.10.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/alerting-notification-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/alerting-notification-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/kotlin-stdlib-common-1.3.72.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/kotlin-stdlib-common-1.3.72.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/commons-logging-1.1.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/commons-logging-1.1.3.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/kotlin-stdlib-jdk7-1.3.72.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/kotlin-stdlib-jdk7-1.3.72.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/checker-qual-3.5.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/checker-qual-3.5.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/opensearch-rest-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/opensearch-rest-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/plugin-security.policy -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/httpclient-4.5.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/httpclient-4.5.13.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/opensearch-alerting-1.2.4.0.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/opensearch-alerting-1.2.4.0.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/kotlinx-coroutines-core-common-1.1.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/kotlinx-coroutines-core-common-1.1.1.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/kotlin-stdlib-1.3.72.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/kotlin-stdlib-1.3.72.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/commons-codec-1.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/commons-codec-1.13.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/kotlin-stdlib-jdk8-1.3.72.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/kotlin-stdlib-jdk8-1.3.72.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/httpcore-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/httpcore-4.4.12.jar -chmod 640 ${INSTALL_DIR}/plugins/opensearch-alerting/failureaccess-1.0.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/plugins/opensearch-alerting/failureaccess-1.0.1.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-common/jcodings-1.0.44.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-common/jcodings-1.0.44.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-common/joni-2.1.29.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-common/joni-2.1.29.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-common/opensearch-grok-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-common/opensearch-grok-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-common/opensearch-dissect-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-common/opensearch-dissect-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-common/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-common/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/ingest-common/ingest-common-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-common/ingest-common-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/geo/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/geo/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/geo/geo-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/geo/geo-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-geoip/GeoLite2-Country.mmdb && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-geoip/GeoLite2-Country.mmdb -chmod 640 ${INSTALL_DIR}/modules/ingest-geoip/GeoLite2-City.mmdb && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-geoip/GeoLite2-City.mmdb -chmod 640 ${INSTALL_DIR}/modules/ingest-geoip/geoip2-2.13.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-geoip/geoip2-2.13.1.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-geoip/maxmind-db-1.3.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-geoip/maxmind-db-1.3.1.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-geoip/jackson-annotations-2.12.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-geoip/jackson-annotations-2.12.5.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-geoip/jackson-databind-2.12.5.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-geoip/jackson-databind-2.12.5.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-geoip/ingest-geoip-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-geoip/ingest-geoip-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-geoip/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-geoip/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/ingest-geoip/GeoLite2-ASN.mmdb && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-geoip/GeoLite2-ASN.mmdb -chmod 640 ${INSTALL_DIR}/modules/ingest-geoip/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-geoip/plugin-security.policy -chmod 640 ${INSTALL_DIR}/modules/percolator/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/percolator/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/percolator/percolator-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/percolator/percolator-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/analysis-common/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/analysis-common/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/analysis-common/analysis-common-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/analysis-common/analysis-common-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/aggs-matrix-stats/aggs-matrix-stats-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/aggs-matrix-stats/aggs-matrix-stats-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/aggs-matrix-stats/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/aggs-matrix-stats/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/repository-url/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/repository-url/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/repository-url/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/repository-url/plugin-security.policy -chmod 640 ${INSTALL_DIR}/modules/repository-url/repository-url-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/repository-url/repository-url-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/lang-mustache/lang-mustache-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-mustache/lang-mustache-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/lang-mustache/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-mustache/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/lang-mustache/compiler-0.9.6.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-mustache/compiler-0.9.6.jar -chmod 640 ${INSTALL_DIR}/modules/lang-mustache/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-mustache/plugin-security.policy -chmod 640 ${INSTALL_DIR}/modules/systemd/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/systemd/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/systemd/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/systemd/plugin-security.policy -chmod 640 ${INSTALL_DIR}/modules/systemd/systemd-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/systemd/systemd-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/transport-netty4/netty-codec-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/transport-netty4/netty-codec-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/modules/transport-netty4/netty-common-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/transport-netty4/netty-common-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/modules/transport-netty4/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/transport-netty4/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/transport-netty4/netty-resolver-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/transport-netty4/netty-resolver-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/modules/transport-netty4/transport-netty4-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/transport-netty4/transport-netty4-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/transport-netty4/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/transport-netty4/plugin-security.policy -chmod 640 ${INSTALL_DIR}/modules/transport-netty4/netty-transport-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/transport-netty4/netty-transport-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/modules/transport-netty4/netty-buffer-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/transport-netty4/netty-buffer-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/modules/transport-netty4/netty-codec-http-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/transport-netty4/netty-codec-http-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/modules/transport-netty4/netty-handler-4.1.72.Final.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/transport-netty4/netty-handler-4.1.72.Final.jar -chmod 640 ${INSTALL_DIR}/modules/lang-expression/lucene-expressions-8.10.1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-expression/lucene-expressions-8.10.1.jar -chmod 640 ${INSTALL_DIR}/modules/lang-expression/lang-expression-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-expression/lang-expression-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/lang-expression/antlr4-runtime-4.5.1-1.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-expression/antlr4-runtime-4.5.1-1.jar -chmod 640 ${INSTALL_DIR}/modules/lang-expression/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-expression/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/lang-expression/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-expression/plugin-security.policy -chmod 640 ${INSTALL_DIR}/modules/lang-expression/asm-5.0.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-expression/asm-5.0.4.jar -chmod 640 ${INSTALL_DIR}/modules/lang-expression/asm-commons-5.0.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-expression/asm-commons-5.0.4.jar -chmod 640 ${INSTALL_DIR}/modules/lang-expression/asm-tree-5.0.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-expression/asm-tree-5.0.4.jar -chmod 640 ${INSTALL_DIR}/modules/lang-painless/asm-7.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-painless/asm-7.2.jar -chmod 640 ${INSTALL_DIR}/modules/lang-painless/antlr4-runtime-4.5.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-painless/antlr4-runtime-4.5.3.jar -chmod 640 ${INSTALL_DIR}/modules/lang-painless/asm-tree-7.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-painless/asm-tree-7.2.jar -chmod 640 ${INSTALL_DIR}/modules/lang-painless/asm-util-7.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-painless/asm-util-7.2.jar -chmod 640 ${INSTALL_DIR}/modules/lang-painless/asm-analysis-7.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-painless/asm-analysis-7.2.jar -chmod 640 ${INSTALL_DIR}/modules/lang-painless/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-painless/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/lang-painless/asm-commons-7.2.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-painless/asm-commons-7.2.jar -chmod 640 ${INSTALL_DIR}/modules/lang-painless/lang-painless-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-painless/lang-painless-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/lang-painless/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-painless/plugin-security.policy -chmod 640 ${INSTALL_DIR}/modules/lang-painless/opensearch-scripting-painless-spi-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/lang-painless/opensearch-scripting-painless-spi-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/rank-eval/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/rank-eval/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/rank-eval/rank-eval-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/rank-eval/rank-eval-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/opensearch-dashboards/httpcore-nio-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards/httpcore-nio-4.4.12.jar -chmod 640 ${INSTALL_DIR}/modules/opensearch-dashboards/httpasyncclient-4.1.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards/httpasyncclient-4.1.4.jar -chmod 640 ${INSTALL_DIR}/modules/opensearch-dashboards/reindex-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards/reindex-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/opensearch-dashboards/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/opensearch-dashboards/commons-logging-1.1.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards/commons-logging-1.1.3.jar -chmod 640 ${INSTALL_DIR}/modules/opensearch-dashboards/opensearch-rest-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards/opensearch-rest-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/opensearch-dashboards/httpclient-4.5.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards/httpclient-4.5.13.jar -chmod 640 ${INSTALL_DIR}/modules/opensearch-dashboards/opensearch-dashboards-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards/opensearch-dashboards-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/opensearch-dashboards/opensearch-ssl-config-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards/opensearch-ssl-config-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/opensearch-dashboards/commons-codec-1.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards/commons-codec-1.13.jar -chmod 640 ${INSTALL_DIR}/modules/opensearch-dashboards/httpcore-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/opensearch-dashboards/httpcore-4.4.12.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-user-agent/ingest-user-agent-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-user-agent/ingest-user-agent-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/ingest-user-agent/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/ingest-user-agent/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/mapper-extras/mapper-extras-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/mapper-extras/mapper-extras-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/mapper-extras/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/mapper-extras/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/parent-join/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/parent-join/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/parent-join/parent-join-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/parent-join/parent-join-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/reindex/httpcore-nio-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex/httpcore-nio-4.4.12.jar -chmod 640 ${INSTALL_DIR}/modules/reindex/httpasyncclient-4.1.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex/httpasyncclient-4.1.4.jar -chmod 640 ${INSTALL_DIR}/modules/reindex/reindex-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex/reindex-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/reindex/plugin-descriptor.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex/plugin-descriptor.properties -chmod 640 ${INSTALL_DIR}/modules/reindex/commons-logging-1.1.3.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex/commons-logging-1.1.3.jar -chmod 640 ${INSTALL_DIR}/modules/reindex/opensearch-rest-client-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex/opensearch-rest-client-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/reindex/plugin-security.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex/plugin-security.policy -chmod 640 ${INSTALL_DIR}/modules/reindex/httpclient-4.5.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex/httpclient-4.5.13.jar -chmod 640 ${INSTALL_DIR}/modules/reindex/opensearch-ssl-config-1.2.4.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex/opensearch-ssl-config-1.2.4.jar -chmod 640 ${INSTALL_DIR}/modules/reindex/commons-codec-1.13.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex/commons-codec-1.13.jar -chmod 640 ${INSTALL_DIR}/modules/reindex/httpcore-4.4.12.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/modules/reindex/httpcore-4.4.12.jar -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jrunscript.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jrunscript.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jcmd.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jcmd.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/java.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/java.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jdeprscan.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jdeprscan.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/javadoc.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/javadoc.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/rmid.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/rmid.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jar.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jar.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jdb.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jdb.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jpackage.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jpackage.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jstatd.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jstatd.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/serialver.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/serialver.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/keytool.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/keytool.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jconsole.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jconsole.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jlink.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jlink.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jhsdb.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jhsdb.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jaotc.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jaotc.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jshell.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jshell.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/rmiregistry.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/rmiregistry.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/javac.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/javac.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jstack.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jstack.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jfr.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jfr.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jps.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jps.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jarsigner.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jarsigner.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jmod.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jmod.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jstat.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jstat.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jinfo.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jinfo.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jmap.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jmap.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/jdeps.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/jdeps.1 -chmod 640 ${INSTALL_DIR}/jdk/man/man1/javap.1 && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/man/man1/javap.1 -chmod 750 ${INSTALL_DIR}/jdk/bin/jdeps && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jdeps -chmod 750 ${INSTALL_DIR}/jdk/bin/rmiregistry && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/rmiregistry -chmod 750 ${INSTALL_DIR}/jdk/bin/jrunscript && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jrunscript -chmod 750 ${INSTALL_DIR}/jdk/bin/jdeprscan && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jdeprscan -chmod 750 ${INSTALL_DIR}/jdk/bin/jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jar -chmod 750 ${INSTALL_DIR}/jdk/bin/jmap && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jmap -chmod 750 ${INSTALL_DIR}/jdk/bin/jps && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jps -chmod 750 ${INSTALL_DIR}/jdk/bin/jstatd && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jstatd -chmod 750 ${INSTALL_DIR}/jdk/bin/rmid && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/rmid -chmod 750 ${INSTALL_DIR}/jdk/bin/java && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/java -chmod 750 ${INSTALL_DIR}/jdk/bin/jdb && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jdb -chmod 750 ${INSTALL_DIR}/jdk/bin/jimage && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jimage -chmod 750 ${INSTALL_DIR}/jdk/bin/javadoc && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/javadoc -chmod 750 ${INSTALL_DIR}/jdk/bin/jconsole && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jconsole -chmod 750 ${INSTALL_DIR}/jdk/bin/jcmd && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jcmd -chmod 750 ${INSTALL_DIR}/jdk/bin/jstack && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jstack -chmod 750 ${INSTALL_DIR}/jdk/bin/jinfo && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jinfo -chmod 750 ${INSTALL_DIR}/jdk/bin/jpackage && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jpackage -chmod 750 ${INSTALL_DIR}/jdk/bin/serialver && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/serialver -chmod 750 ${INSTALL_DIR}/jdk/bin/javap && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/javap -chmod 750 ${INSTALL_DIR}/jdk/bin/keytool && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/keytool -chmod 750 ${INSTALL_DIR}/jdk/bin/jaotc && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jaotc -chmod 750 ${INSTALL_DIR}/jdk/bin/jarsigner && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jarsigner -chmod 750 ${INSTALL_DIR}/jdk/bin/jhsdb && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jhsdb -chmod 750 ${INSTALL_DIR}/jdk/bin/jlink && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jlink -chmod 750 ${INSTALL_DIR}/jdk/bin/jfr && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jfr -chmod 750 ${INSTALL_DIR}/jdk/bin/jstat && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jstat -chmod 750 ${INSTALL_DIR}/jdk/bin/javac && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/javac -chmod 750 ${INSTALL_DIR}/jdk/bin/jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jmod -chmod 750 ${INSTALL_DIR}/jdk/bin/jshell && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/bin/jshell -chmod 640 ${INSTALL_DIR}/jdk/release && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/release -chmod 640 ${INSTALL_DIR}/jdk/legal/java.base/LICENSE && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.base/LICENSE -chmod 640 ${INSTALL_DIR}/jdk/legal/java.base/ADDITIONAL_LICENSE_INFO && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.base/ADDITIONAL_LICENSE_INFO -chmod 640 ${INSTALL_DIR}/jdk/legal/java.base/icu.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.base/icu.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.base/c-libutl.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.base/c-libutl.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.base/public_suffix.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.base/public_suffix.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.base/cldr.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.base/cldr.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.base/aes.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.base/aes.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.base/ASSEMBLY_EXCEPTION && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.base/ASSEMBLY_EXCEPTION -chmod 640 ${INSTALL_DIR}/jdk/legal/java.base/asm.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.base/asm.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.base/unicode.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.base/unicode.md -chmod 640 ${INSTALL_DIR}/jdk/legal/jdk.dynalink/dynalink.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/jdk.dynalink/dynalink.md -chmod 640 ${INSTALL_DIR}/jdk/legal/jdk.javadoc/jqueryUI.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/jdk.javadoc/jqueryUI.md -chmod 640 ${INSTALL_DIR}/jdk/legal/jdk.javadoc/jquery.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/jdk.javadoc/jquery.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.xml/xalan.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.xml/xalan.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.xml/xerces.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.xml/xerces.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.xml/jcup.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.xml/jcup.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.xml/bcel.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.xml/bcel.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.xml/dom.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.xml/dom.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.smartcardio/pcsclite.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.smartcardio/pcsclite.md -chmod 640 ${INSTALL_DIR}/jdk/legal/jdk.internal.opt/jopt-simple.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/jdk.internal.opt/jopt-simple.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.xml.crypto/santuario.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.xml.crypto/santuario.md -chmod 640 ${INSTALL_DIR}/jdk/legal/jdk.localedata/thaidict.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/jdk.localedata/thaidict.md -chmod 640 ${INSTALL_DIR}/jdk/legal/jdk.internal.le/jline.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/jdk.internal.le/jline.md -chmod 640 ${INSTALL_DIR}/jdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md -chmod 640 ${INSTALL_DIR}/jdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.desktop/xwd.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.desktop/xwd.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.desktop/mesa3d.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.desktop/mesa3d.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.desktop/harfbuzz.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.desktop/harfbuzz.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.desktop/lcms.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.desktop/lcms.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.desktop/freetype.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.desktop/freetype.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.desktop/giflib.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.desktop/giflib.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.desktop/jpeg.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.desktop/jpeg.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.desktop/colorimaging.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.desktop/colorimaging.md -chmod 640 ${INSTALL_DIR}/jdk/legal/java.desktop/libpng.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/java.desktop/libpng.md -chmod 640 ${INSTALL_DIR}/jdk/legal/jdk.crypto.ec/ecc.md && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/legal/jdk.crypto.ec/ecc.md -chmod 640 ${INSTALL_DIR}/jdk/lib/server/libjsig.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/server/libjsig.so -chmod 640 ${INSTALL_DIR}/jdk/lib/server/classes.jsa && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/server/classes.jsa -chmod 640 ${INSTALL_DIR}/jdk/lib/server/classes_nocoops.jsa && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/server/classes_nocoops.jsa -chmod 640 ${INSTALL_DIR}/jdk/lib/server/libjvm.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/server/libjvm.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libawt.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libawt.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libawt_headless.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libawt_headless.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libsplashscreen.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libsplashscreen.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libnio.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libnio.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libjdwp.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libjdwp.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libj2pcsc.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libj2pcsc.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libjli.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libjli.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libsctp.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libsctp.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libjimage.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libjimage.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libjsig.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libjsig.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libjava.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libjava.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libsunec.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libsunec.so -chmod 640 ${INSTALL_DIR}/jdk/lib/liblcms.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/liblcms.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libawt_xawt.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libawt_xawt.so -chmod 640 ${INSTALL_DIR}/jdk/lib/jexec && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/jexec -chmod 640 ${INSTALL_DIR}/jdk/lib/libverify.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libverify.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libmanagement_agent.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libmanagement_agent.so -chmod 640 ${INSTALL_DIR}/jdk/lib/psfont.properties.ja && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/psfont.properties.ja -chmod 640 ${INSTALL_DIR}/jdk/lib/libprefs.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libprefs.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libzip.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libzip.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libjaas.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libjaas.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libjsound.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libjsound.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libextnet.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libextnet.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libj2gss.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libj2gss.so -chmod 640 ${INSTALL_DIR}/jdk/lib/tzdb.dat && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/tzdb.dat -chmod 640 ${INSTALL_DIR}/jdk/lib/libdt_socket.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libdt_socket.so -chmod 640 ${INSTALL_DIR}/jdk/lib/psfontj2d.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/psfontj2d.properties -chmod 640 ${INSTALL_DIR}/jdk/lib/jvm.cfg && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/jvm.cfg -chmod 640 ${INSTALL_DIR}/jdk/lib/ct.sym && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/ct.sym -chmod 640 ${INSTALL_DIR}/jdk/lib/libj2pkcs11.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libj2pkcs11.so -chmod 640 ${INSTALL_DIR}/jdk/lib/jfr/default.jfc && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/jfr/default.jfc -chmod 640 ${INSTALL_DIR}/jdk/lib/jfr/profile.jfc && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/jfr/profile.jfc -chmod 640 ${INSTALL_DIR}/jdk/lib/libmanagement_ext.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libmanagement_ext.so -chmod 640 ${INSTALL_DIR}/jdk/lib/classlist && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/classlist -chmod 640 ${INSTALL_DIR}/jdk/lib/libnet.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libnet.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libjavajpeg.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libjavajpeg.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libfontmanager.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libfontmanager.so -chmod 640 ${INSTALL_DIR}/jdk/lib/modules && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/modules -chmod 640 ${INSTALL_DIR}/jdk/lib/libinstrument.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libinstrument.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libmanagement.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libmanagement.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libjawt.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libjawt.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libsaproc.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libsaproc.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libmlib_image.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libmlib_image.so -chmod 640 ${INSTALL_DIR}/jdk/lib/security/cacerts && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/security/cacerts -chmod 640 ${INSTALL_DIR}/jdk/lib/security/blacklisted.certs && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/security/blacklisted.certs -chmod 640 ${INSTALL_DIR}/jdk/lib/security/public_suffix_list.dat && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/security/public_suffix_list.dat -chmod 640 ${INSTALL_DIR}/jdk/lib/security/default.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/security/default.policy -chmod 640 ${INSTALL_DIR}/jdk/lib/librmi.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/librmi.so -chmod 750 ${INSTALL_DIR}/jdk/lib/jspawnhelper && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/jspawnhelper -chmod 640 ${INSTALL_DIR}/jdk/lib/jrt-fs.jar && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/jrt-fs.jar -chmod 640 ${INSTALL_DIR}/jdk/lib/libattach.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libattach.so -chmod 640 ${INSTALL_DIR}/jdk/lib/libfreetype.so && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/lib/libfreetype.so -chmod 640 ${INSTALL_DIR}/jdk/include/jvmti.h && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/include/jvmti.h -chmod 640 ${INSTALL_DIR}/jdk/include/classfile_constants.h && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/include/classfile_constants.h -chmod 640 ${INSTALL_DIR}/jdk/include/jdwpTransport.h && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/include/jdwpTransport.h -chmod 640 ${INSTALL_DIR}/jdk/include/jawt.h && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/include/jawt.h -chmod 640 ${INSTALL_DIR}/jdk/include/jni.h && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/include/jni.h -chmod 640 ${INSTALL_DIR}/jdk/include/jvmticmlr.h && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/include/jvmticmlr.h -chmod 640 ${INSTALL_DIR}/jdk/include/linux/jawt_md.h && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/include/linux/jawt_md.h -chmod 640 ${INSTALL_DIR}/jdk/include/linux/jni_md.h && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/include/linux/jni_md.h -chmod 640 ${INSTALL_DIR}/jdk/conf/net.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/net.properties -chmod 640 ${INSTALL_DIR}/jdk/conf/sound.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/sound.properties -chmod 640 ${INSTALL_DIR}/jdk/conf/sdp/sdp.conf.template && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/sdp/sdp.conf.template -chmod 640 ${INSTALL_DIR}/jdk/conf/management/management.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/management/management.properties -chmod 640 ${INSTALL_DIR}/jdk/conf/management/jmxremote.access && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/management/jmxremote.access -chmod 640 ${INSTALL_DIR}/jdk/conf/management/jmxremote.password.template && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/management/jmxremote.password.template -chmod 640 ${INSTALL_DIR}/jdk/conf/logging.properties && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/logging.properties -chmod 640 ${INSTALL_DIR}/jdk/conf/security/java.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security/java.policy -chmod 640 ${INSTALL_DIR}/jdk/conf/security/policy/limited/default_US_export.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security/policy/limited/default_US_export.policy -chmod 640 ${INSTALL_DIR}/jdk/conf/security/policy/limited/exempt_local.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security/policy/limited/exempt_local.policy -chmod 640 ${INSTALL_DIR}/jdk/conf/security/policy/limited/default_local.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security/policy/limited/default_local.policy -chmod 640 ${INSTALL_DIR}/jdk/conf/security/policy/unlimited/default_US_export.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security/policy/unlimited/default_US_export.policy -chmod 640 ${INSTALL_DIR}/jdk/conf/security/policy/unlimited/default_local.policy && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security/policy/unlimited/default_local.policy -chmod 640 ${INSTALL_DIR}/jdk/conf/security/policy/README.txt && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security/policy/README.txt -chmod 640 ${INSTALL_DIR}/jdk/conf/security/java.security && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/conf/security/java.security -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.unsupported.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.unsupported.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.transaction.xa.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.transaction.xa.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.crypto.cryptoki.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.crypto.cryptoki.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.rmi.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.rmi.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.attach.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.attach.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.jshell.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.jshell.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.xml.dom.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.xml.dom.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.se.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.se.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.internal.ed.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.internal.ed.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.jartool.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.jartool.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.compiler.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.compiler.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.base.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.base.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.smartcardio.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.smartcardio.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.security.auth.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.security.auth.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.unsupported.desktop.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.unsupported.desktop.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.security.sasl.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.security.sasl.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.incubator.foreign.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.incubator.foreign.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.management.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.management.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.management.agent.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.management.agent.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.xml.crypto.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.xml.crypto.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.internal.vm.ci.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.internal.vm.ci.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.prefs.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.prefs.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.crypto.ec.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.crypto.ec.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.internal.jvmstat.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.internal.jvmstat.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.sql.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.sql.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.incubator.jpackage.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.incubator.jpackage.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.xml.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.xml.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.security.jgss.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.security.jgss.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.compiler.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.compiler.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.sctp.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.sctp.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.charsets.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.charsets.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.management.jfr.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.management.jfr.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.jlink.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.jlink.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.localedata.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.localedata.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.jsobject.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.jsobject.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.net.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.net.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.hotspot.agent.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.hotspot.agent.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.jstatd.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.jstatd.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.dynalink.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.dynalink.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.jfr.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.jfr.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.naming.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.naming.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.internal.le.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.internal.le.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.jcmd.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.jcmd.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.management.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.management.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.net.http.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.net.http.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.logging.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.logging.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.accessibility.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.accessibility.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.internal.opt.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.internal.opt.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.management.rmi.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.management.rmi.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.security.jgss.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.security.jgss.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.desktop.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.desktop.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.nio.mapmode.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.nio.mapmode.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.internal.vm.compiler.management.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.internal.vm.compiler.management.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.jdwp.agent.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.jdwp.agent.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.jdi.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.jdi.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.javadoc.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.javadoc.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.naming.rmi.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.naming.rmi.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.naming.dns.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.naming.dns.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.editpad.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.editpad.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.jdeps.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.jdeps.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.internal.vm.compiler.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.internal.vm.compiler.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.sql.rowset.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.sql.rowset.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.scripting.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.scripting.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.datatransfer.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.datatransfer.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.httpserver.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.httpserver.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.zipfs.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.zipfs.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.aot.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.aot.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/jdk.jconsole.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/jdk.jconsole.jmod -chmod 640 ${INSTALL_DIR}/jdk/jmods/java.instrument.jmod && chown ${USER}:${GROUP} ${INSTALL_DIR}/jdk/jmods/java.instrument.jmod \ No newline at end of file +# copy to target +mkdir -p ${TARGET_DIR}${INSTALLATION_DIR} +mkdir -p ${TARGET_DIR}${CONFIG_DIR} +mkdir -p ${TARGET_DIR}${LIB_DIR} +mkdir -p ${TARGET_DIR}${LOG_DIR} +mkdir -p ${TARGET_DIR}/etc/init.d +mkdir -p ${TARGET_DIR}/etc/default +mkdir -p ${TARGET_DIR}/usr/lib/tmpfiles.d +mkdir -p ${TARGET_DIR}/usr/lib/sysctl.d +mkdir -p ${TARGET_DIR}/usr/lib/systemd/system +# Move configuration files for wazuh-indexer +mv -f ${BASE_DIR}/etc/init.d/${NAME} ${TARGET_DIR}/etc/init.d/${NAME} +mv -f ${BASE_DIR}/etc/wazuh-indexer/* ${TARGET_DIR}${CONFIG_DIR} +mv -f ${BASE_DIR}/etc/sysconfig/${NAME} ${TARGET_DIR}/etc/default/ +mv -f ${BASE_DIR}/usr/lib/tmpfiles.d/* ${TARGET_DIR}/usr/lib/tmpfiles.d/ +mv -f ${BASE_DIR}/usr/lib/sysctl.d/* ${TARGET_DIR}/usr/lib/sysctl.d/ +mv -f ${BASE_DIR}/usr/lib/systemd/system/* ${TARGET_DIR}/usr/lib/systemd/system/ +rm -rf ${BASE_DIR}/etc +rm -rf ${BASE_DIR}/usr +# Copy installation files to final location +cp -pr ${BASE_DIR}/* ${TARGET_DIR}${INSTALLATION_DIR} +# Copy the security tools +cp ${REPO_DIR}/install_functions/wazuh-cert-tool.sh ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/ +cp ${REPO_DIR}/install_functions/wazuh-passwords-tool.sh ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/ +cp ${REPO_DIR}/config/opensearch/certificate/config_aio.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/config.yml +# Copy Wazuh's config files for the security plugin +cp -pr ${REPO_DIR}/config/opensearch/roles/roles_mapping.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ +cp -pr ${REPO_DIR}/config/opensearch/roles/roles.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ +cp -pr ${REPO_DIR}/config/opensearch/roles/internal_users.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ diff --git a/wazuh-indexer/config/config2.sh b/wazuh-indexer/config/config2.sh deleted file mode 100644 index 93aa41ee..00000000 --- a/wazuh-indexer/config/config2.sh +++ /dev/null @@ -1,53 +0,0 @@ -# This has to be exported to make some magic below work. -export DH_OPTIONS - -export NAME=wazuh-indexer -export TARGET_DIR=${CURDIR}/debian/${NAME} - -# Package build options -export USER=${NAME} -export GROUP=${NAME} -export CONFIG_DIR=/etc/${NAME} -export LOG_DIR=/var/log/${NAME} -export LIB_DIR=/var/lib/${NAME} -export PID_DIR=/run/${NAME} -export INSTALLATION_DIR=/usr/share/${NAME} -export BASE_DIR=${NAME}-* -export INDEXER_FILE=wazuh-indexer-base-linux-x64.tar.gz -export REPO_DIR=/unattended_installer - - -rm -rf ${INSTALLATION_DIR}/ - -curl -o ${INDEXER_FILE} https://s3.amazonaws.com/warehouse.wazuh.com/indexer/${INDEXER_FILE} -tar -zvxf ${INDEXER_FILE} - -# copy to target -mkdir -p ${TARGET_DIR}${INSTALLATION_DIR} -mkdir -p ${TARGET_DIR}${CONFIG_DIR} -mkdir -p ${TARGET_DIR}${LIB_DIR} -mkdir -p ${TARGET_DIR}${LOG_DIR} -mkdir -p ${TARGET_DIR}/etc/init.d -mkdir -p ${TARGET_DIR}/etc/default -mkdir -p ${TARGET_DIR}/usr/lib/tmpfiles.d -mkdir -p ${TARGET_DIR}/usr/lib/sysctl.d -mkdir -p ${TARGET_DIR}/usr/lib/systemd/system -# Move configuration files for wazuh-indexer -mv -f ${BASE_DIR}/etc/init.d/${NAME} ${TARGET_DIR}/etc/init.d/${NAME} -mv -f ${BASE_DIR}/etc/wazuh-indexer/* ${TARGET_DIR}${CONFIG_DIR} -mv -f ${BASE_DIR}/etc/sysconfig/${NAME} ${TARGET_DIR}/etc/default/ -mv -f ${BASE_DIR}/usr/lib/tmpfiles.d/* ${TARGET_DIR}/usr/lib/tmpfiles.d/ -mv -f ${BASE_DIR}/usr/lib/sysctl.d/* ${TARGET_DIR}/usr/lib/sysctl.d/ -mv -f ${BASE_DIR}/usr/lib/systemd/system/* ${TARGET_DIR}/usr/lib/systemd/system/ -rm -rf ${BASE_DIR}/etc -rm -rf ${BASE_DIR}/usr -# Copy installation files to final location -cp -pr ${BASE_DIR}/* ${TARGET_DIR}${INSTALLATION_DIR} -# Copy the security tools -cp ${REPO_DIR}/install_functions/wazuh-cert-tool.sh ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/ -cp ${REPO_DIR}/install_functions/wazuh-passwords-tool.sh ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/ -cp ${REPO_DIR}/config/opensearch/certificate/config_aio.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/config.yml -# Copy Wazuh's config files for the security plugin -cp -pr ${REPO_DIR}/config/opensearch/roles/roles_mapping.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ -cp -pr ${REPO_DIR}/config/opensearch/roles/roles.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ -cp -pr ${REPO_DIR}/config/opensearch/roles/internal_users.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ diff --git a/wazuh-indexer/config/entrypoint.sh b/wazuh-indexer/config/entrypoint.sh index 30bccb0b..69736c1e 100644 --- a/wazuh-indexer/config/entrypoint.sh +++ b/wazuh-indexer/config/entrypoint.sh @@ -1,56 +1,89 @@ -#!/bin/bash -# Wazuh Docker Copyright (C) 2021 Wazuh Inc. (License GPLv2) +#!/usr/bin/env bash +set -e -############################################################################## -# Start Wazuh indexer -############################################################################## +# Files created by Elasticsearch should always be group writable too +umask 0002 export USER=wazuh-indexer export INSTALLATION_DIR=/usr/share/wazuh-indexer -export OPENSEARCH_PATH_CONF=/etc/wazuh-indexer +export OPENSEARCH_PATH_CONF=/etc/wazuh-indexer export JAVA_HOME=${INSTALLATION_DIR}/jdk export FILE=${INSTALLATION_DIR}/start -sed -i '/path.logs:/d' /etc/wazuh-indexer/opensearch.yml - -if [ -f $FILE ] - then - echo "second or more start" - else - if [ "$NODE_TYPE" == "worker" ] - then - echo "node_type start" - echo $NODE_TYPE - echo "node_type end" - rm -rf /var/lib/wazuh-indexer/* - sleep 70 - echo "worker restart" - touch $FILE - else - echo "hostname start" - echo $HOSTNAME - echo "hostname end" - echo "node_type start" - echo $NODE_TYPE - echo "node_type end" - runuser wazuh-indexer --shell="/bin/bash" --command="/usr/share/wazuh-indexer/bin/opensearch -p /run/wazuh-indexer/wazuh-indexer.pid -d" - sleep 60 - bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig -icl -p 9800 -cd /usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig -nhnv -cacert /etc/wazuh-indexer/certs/root-ca.pem -cert /etc/wazuh-indexer/certs/admin.pem -key /etc/wazuh-indexer/certs/admin-key.pem -h $HOSTNAME - tail -100f /usr/share/wazuh-indexer/logs/wazuh-cluster.log - touch $FILE - fi -fi - - - -#sed -i '/path.logs:/d' /etc/wazuh-indexer/opensearch.yml - -#CLK_TK=`getconf CLK_TCK` runuser ${USER} --shell="/bin/bash" --command="${INSTALLATION_DIR}/bin/opensearch" - -if [ -f /var/log/wazuh-indexer/wazuh-cluster.log ] - then - tail -f /var/log/wazuh-indexer/wazuh-cluster.log +run_as_other_user_if_needed() { + if [[ "$(id -u)" == "0" ]]; then + # If running as root, drop to specified UID and run command + exec chroot --userspec=1000:0 / "${@}" else - while true; do sleep 1000; done + # Either we are running in Openshift with random uid and are a member of the root group + # or with a custom --user + exec "${@}" + fi +} + +# Allow user specify custom CMD, maybe bin/opensearch itself +# for example to directly specify `-E` style parameters for opensearch on k8s +# or simply to run /bin/bash to check the image +if [[ "$1" != "opensearchwrapper" ]]; then + if [[ "$(id -u)" == "0" && $(basename "$1") == "opensearch" ]]; then + # centos:7 chroot doesn't have the `--skip-chdir` option and + # changes our CWD. + # Rewrite CMD args to replace $1 with `opensearch` explicitly, + # so that we are backwards compatible with the docs + # from the previous Elasticsearch versions<6 + # and configuration option D: + # https://www.elastic.co/guide/en/elasticsearch/reference/5.6/docker.html#_d_override_the_image_8217_s_default_ulink_url_https_docs_docker_com_engine_reference_run_cmd_default_command_or_options_cmd_ulink + # Without this, user could specify `opensearch -E x.y=z` but + # `bin/opensearch -E x.y=z` would not work. + set -- "opensearch" "${@:2}" + # Use chroot to switch to UID 1000 / GID 0 + exec chroot --userspec=1000:0 / "$@" + else + # User probably wants to run something else, like /bin/bash, with another uid forced (Openshift?) + exec "$@" + fi fi - + +# Allow environment variables to be set by creating a file with the +# contents, and setting an environment variable with the suffix _FILE to +# point to it. This can be used to provide secrets to a container, without +# the values being specified explicitly when running the container. +# +# This is also sourced in opensearch-env, and is only needed here +# as well because we use ELASTIC_PASSWORD below. Sourcing this script +# is idempotent. +source /usr/share/wazuh-indexer/bin/opensearch-env-from-file + +if [[ -f bin/opensearch-users ]]; then + # Check for the ELASTIC_PASSWORD environment variable to set the + # bootstrap password for Security. + # + # This is only required for the first node in a cluster with Security + # enabled, but we have no way of knowing which node we are yet. We'll just + # honor the variable if it's present. + if [[ -n "$ELASTIC_PASSWORD" ]]; then + [[ -f /usr/share/wazuh-indexer/config/opensearch.keystore ]] || (run_as_other_user_if_needed opensearch-keystore create) + if ! (run_as_other_user_if_needed opensearch-keystore has-passwd --silent) ; then + # keystore is unencrypted + if ! (run_as_other_user_if_needed opensearch-keystore list | grep -q '^bootstrap.password$'); then + (run_as_other_user_if_needed echo "$ELASTIC_PASSWORD" | opensearch-keystore add -x 'bootstrap.password') + fi + else + # keystore requires password + if ! (run_as_other_user_if_needed echo "$KEYSTORE_PASSWORD" \ + | opensearch-keystore list | grep -q '^bootstrap.password$') ; then + COMMANDS="$(printf "%s\n%s" "$KEYSTORE_PASSWORD" "$ELASTIC_PASSWORD")" + (run_as_other_user_if_needed echo "$COMMANDS" | opensearch-keystore add -x 'bootstrap.password') + fi + fi + fi +fi + +if [[ "$(id -u)" == "0" ]]; then + # If requested and running as root, mutate the ownership of bind-mounts + if [[ -n "$TAKE_FILE_OWNERSHIP" ]]; then + chown -R 1000:0 /usr/share/wazuh-indexer/{data,logs} + fi +fi + +run_as_other_user_if_needed /usr/share/wazuh-indexer/bin/opensearch <<<"$KEYSTORE_PASSWORD" \ No newline at end of file diff --git a/wazuh-indexer/config/entrypoint_OS.sh b/wazuh-indexer/config/entrypoint_OS.sh deleted file mode 100644 index 69736c1e..00000000 --- a/wazuh-indexer/config/entrypoint_OS.sh +++ /dev/null @@ -1,89 +0,0 @@ -#!/usr/bin/env bash -set -e - -# Files created by Elasticsearch should always be group writable too -umask 0002 - -export USER=wazuh-indexer -export INSTALLATION_DIR=/usr/share/wazuh-indexer -export OPENSEARCH_PATH_CONF=/etc/wazuh-indexer -export JAVA_HOME=${INSTALLATION_DIR}/jdk -export FILE=${INSTALLATION_DIR}/start - -run_as_other_user_if_needed() { - if [[ "$(id -u)" == "0" ]]; then - # If running as root, drop to specified UID and run command - exec chroot --userspec=1000:0 / "${@}" - else - # Either we are running in Openshift with random uid and are a member of the root group - # or with a custom --user - exec "${@}" - fi -} - -# Allow user specify custom CMD, maybe bin/opensearch itself -# for example to directly specify `-E` style parameters for opensearch on k8s -# or simply to run /bin/bash to check the image -if [[ "$1" != "opensearchwrapper" ]]; then - if [[ "$(id -u)" == "0" && $(basename "$1") == "opensearch" ]]; then - # centos:7 chroot doesn't have the `--skip-chdir` option and - # changes our CWD. - # Rewrite CMD args to replace $1 with `opensearch` explicitly, - # so that we are backwards compatible with the docs - # from the previous Elasticsearch versions<6 - # and configuration option D: - # https://www.elastic.co/guide/en/elasticsearch/reference/5.6/docker.html#_d_override_the_image_8217_s_default_ulink_url_https_docs_docker_com_engine_reference_run_cmd_default_command_or_options_cmd_ulink - # Without this, user could specify `opensearch -E x.y=z` but - # `bin/opensearch -E x.y=z` would not work. - set -- "opensearch" "${@:2}" - # Use chroot to switch to UID 1000 / GID 0 - exec chroot --userspec=1000:0 / "$@" - else - # User probably wants to run something else, like /bin/bash, with another uid forced (Openshift?) - exec "$@" - fi -fi - -# Allow environment variables to be set by creating a file with the -# contents, and setting an environment variable with the suffix _FILE to -# point to it. This can be used to provide secrets to a container, without -# the values being specified explicitly when running the container. -# -# This is also sourced in opensearch-env, and is only needed here -# as well because we use ELASTIC_PASSWORD below. Sourcing this script -# is idempotent. -source /usr/share/wazuh-indexer/bin/opensearch-env-from-file - -if [[ -f bin/opensearch-users ]]; then - # Check for the ELASTIC_PASSWORD environment variable to set the - # bootstrap password for Security. - # - # This is only required for the first node in a cluster with Security - # enabled, but we have no way of knowing which node we are yet. We'll just - # honor the variable if it's present. - if [[ -n "$ELASTIC_PASSWORD" ]]; then - [[ -f /usr/share/wazuh-indexer/config/opensearch.keystore ]] || (run_as_other_user_if_needed opensearch-keystore create) - if ! (run_as_other_user_if_needed opensearch-keystore has-passwd --silent) ; then - # keystore is unencrypted - if ! (run_as_other_user_if_needed opensearch-keystore list | grep -q '^bootstrap.password$'); then - (run_as_other_user_if_needed echo "$ELASTIC_PASSWORD" | opensearch-keystore add -x 'bootstrap.password') - fi - else - # keystore requires password - if ! (run_as_other_user_if_needed echo "$KEYSTORE_PASSWORD" \ - | opensearch-keystore list | grep -q '^bootstrap.password$') ; then - COMMANDS="$(printf "%s\n%s" "$KEYSTORE_PASSWORD" "$ELASTIC_PASSWORD")" - (run_as_other_user_if_needed echo "$COMMANDS" | opensearch-keystore add -x 'bootstrap.password') - fi - fi - fi -fi - -if [[ "$(id -u)" == "0" ]]; then - # If requested and running as root, mutate the ownership of bind-mounts - if [[ -n "$TAKE_FILE_OWNERSHIP" ]]; then - chown -R 1000:0 /usr/share/wazuh-indexer/{data,logs} - fi -fi - -run_as_other_user_if_needed /usr/share/wazuh-indexer/bin/opensearch <<<"$KEYSTORE_PASSWORD" \ No newline at end of file diff --git a/wazuh-indexer/config/wazuh.repo b/wazuh-indexer/config/wazuh.repo deleted file mode 100644 index 163fb67f..00000000 --- a/wazuh-indexer/config/wazuh.repo +++ /dev/null @@ -1,7 +0,0 @@ -[wazuh_repo] -gpgcheck=1 -gpgkey=https://packages-dev.wazuh.com/key/GPG-KEY-WAZUH -enabled=1 -name=Wazuh repository -baseurl=https://packages-dev.wazuh.com/trash/yum/ -protect=1