forked from wazuh/wazuh-docker
Compare commits
1
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
dddfc8adb5 |
@@ -2,5 +2,5 @@ WAZUH_VERSION=4.14.3
|
|||||||
WAZUH_IMAGE_VERSION=4.14.3
|
WAZUH_IMAGE_VERSION=4.14.3
|
||||||
WAZUH_TAG_REVISION=1
|
WAZUH_TAG_REVISION=1
|
||||||
FILEBEAT_TEMPLATE_BRANCH=4.14.3
|
FILEBEAT_TEMPLATE_BRANCH=4.14.3
|
||||||
WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz
|
WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.4.tar.gz
|
||||||
WAZUH_UI_REVISION=1
|
WAZUH_UI_REVISION=1
|
||||||
|
|||||||
@@ -13,7 +13,7 @@ on:
|
|||||||
required: true
|
required: true
|
||||||
filebeat_module_version:
|
filebeat_module_version:
|
||||||
description: 'Filebeat module version'
|
description: 'Filebeat module version'
|
||||||
default: '0.5'
|
default: '0.4'
|
||||||
required: true
|
required: true
|
||||||
revision:
|
revision:
|
||||||
description: 'Package revision'
|
description: 'Package revision'
|
||||||
@@ -41,7 +41,7 @@ on:
|
|||||||
type: string
|
type: string
|
||||||
filebeat_module_version:
|
filebeat_module_version:
|
||||||
description: 'Filebeat module version'
|
description: 'Filebeat module version'
|
||||||
default: '0.5'
|
default: '0.4'
|
||||||
required: true
|
required: true
|
||||||
type: string
|
type: string
|
||||||
revision:
|
revision:
|
||||||
@@ -97,64 +97,64 @@ jobs:
|
|||||||
with:
|
with:
|
||||||
ref: ${{ inputs.docker_reference }}
|
ref: ${{ inputs.docker_reference }}
|
||||||
|
|
||||||
- name: free disk space
|
# - name: free disk space
|
||||||
uses: ./.github/free-disk-space
|
# uses: ./.github/free-disk-space
|
||||||
|
|
||||||
- name: Set up QEMU
|
# - name: Set up QEMU
|
||||||
uses: docker/setup-qemu-action@v3
|
# uses: docker/setup-qemu-action@v3
|
||||||
|
|
||||||
- name: Set up Docker Buildx
|
# - name: Set up Docker Buildx
|
||||||
uses: docker/setup-buildx-action@v3
|
# uses: docker/setup-buildx-action@v3
|
||||||
|
|
||||||
- name: Configure aws credentials
|
# - name: Configure aws credentials
|
||||||
if: ${{ inputs.dev == true }}
|
# if: ${{ inputs.dev == true }}
|
||||||
uses: aws-actions/configure-aws-credentials@v4
|
# uses: aws-actions/configure-aws-credentials@v4
|
||||||
with:
|
# with:
|
||||||
role-to-assume: ${{ secrets.AWS_IAM_DOCKER_ROLE }}
|
# role-to-assume: ${{ secrets.AWS_IAM_DOCKER_ROLE }}
|
||||||
aws-region: "${{ secrets.AWS_REGION }}"
|
# aws-region: "${{ secrets.AWS_REGION }}"
|
||||||
|
|
||||||
- name: Log in to Amazon ECR
|
# - name: Log in to Amazon ECR
|
||||||
if: ${{ inputs.dev == true }}
|
# if: ${{ inputs.dev == true }}
|
||||||
uses: aws-actions/amazon-ecr-login@v2
|
# uses: aws-actions/amazon-ecr-login@v2
|
||||||
|
|
||||||
- name: Log in to Docker Hub
|
# - name: Log in to Docker Hub
|
||||||
if: ${{ inputs.dev == false }}
|
# if: ${{ inputs.dev == false }}
|
||||||
uses: docker/login-action@v3
|
# uses: docker/login-action@v3
|
||||||
with:
|
# with:
|
||||||
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
# username: ${{ secrets.DOCKERHUB_USERNAME }}
|
||||||
password: ${{ secrets.DOCKERHUB_PASSWORD }}
|
# password: ${{ secrets.DOCKERHUB_PASSWORD }}
|
||||||
|
|
||||||
- name: Build Wazuh images
|
# - name: Build Wazuh images
|
||||||
run: |
|
# run: |
|
||||||
IMAGE_TAG="${{ inputs.image_tag }}"
|
# IMAGE_TAG="${{ inputs.image_tag }}"
|
||||||
FILEBEAT_MODULE_VERSION=${{ inputs.filebeat_module_version }}
|
# FILEBEAT_MODULE_VERSION=${{ inputs.filebeat_module_version }}
|
||||||
REVISION=${{ inputs.revision }}
|
# REVISION=${{ inputs.revision }}
|
||||||
|
|
||||||
if [[ "$IMAGE_TAG" == *"-"* ]]; then
|
# if [[ "$IMAGE_TAG" == *"-"* ]]; then
|
||||||
IFS='-' read -r -a tokens <<< "$IMAGE_TAG"
|
# IFS='-' read -r -a tokens <<< "$IMAGE_TAG"
|
||||||
if [ -z "${tokens[1]}" ]; then
|
# if [ -z "${tokens[1]}" ]; then
|
||||||
echo "Invalid image tag: $IMAGE_TAG"
|
# echo "Invalid image tag: $IMAGE_TAG"
|
||||||
exit 1
|
# exit 1
|
||||||
fi
|
# fi
|
||||||
DEV_STAGE=${tokens[1]}
|
# DEV_STAGE=${tokens[1]}
|
||||||
WAZUH_VER=${tokens[0]}
|
# WAZUH_VER=${tokens[0]}
|
||||||
./build-images.sh -v $WAZUH_VER -r $REVISION -d $DEV_STAGE -f $FILEBEAT_MODULE_VERSION -rg $IMAGE_REGISTRY -m
|
# ./build-images.sh -v $WAZUH_VER -r $REVISION -d $DEV_STAGE -f $FILEBEAT_MODULE_VERSION -rg $IMAGE_REGISTRY -m
|
||||||
else
|
# else
|
||||||
./build-images.sh -v $IMAGE_TAG -r $REVISION -f $FILEBEAT_MODULE_VERSION -rg $IMAGE_REGISTRY -m
|
# ./build-images.sh -v $IMAGE_TAG -r $REVISION -f $FILEBEAT_MODULE_VERSION -rg $IMAGE_REGISTRY -m
|
||||||
fi
|
# fi
|
||||||
|
|
||||||
# Save .env file (generated by build-images.sh) contents to $GITHUB_ENV
|
# # Save .env file (generated by build-images.sh) contents to $GITHUB_ENV
|
||||||
ENV_FILE_PATH="../.env"
|
# ENV_FILE_PATH="../.env"
|
||||||
|
|
||||||
if [ -f $ENV_FILE_PATH ]; then
|
# if [ -f $ENV_FILE_PATH ]; then
|
||||||
while IFS= read -r line || [ -n "$line" ]; do
|
# while IFS= read -r line || [ -n "$line" ]; do
|
||||||
echo "$line" >> $GITHUB_ENV
|
# echo "$line" >> $GITHUB_ENV
|
||||||
done < $ENV_FILE_PATH
|
# done < $ENV_FILE_PATH
|
||||||
else
|
# else
|
||||||
echo "The environment file $ENV_FILE_PATH does not exist!"
|
# echo "The environment file $ENV_FILE_PATH does not exist!"
|
||||||
exit 1
|
# exit 1
|
||||||
fi
|
# fi
|
||||||
working-directory: ./build-docker-images
|
# working-directory: ./build-docker-images
|
||||||
|
|
||||||
- name: Image exists validation
|
- name: Image exists validation
|
||||||
if: ${{ inputs.dev == false }}
|
if: ${{ inputs.dev == false }}
|
||||||
|
|||||||
@@ -11,8 +11,7 @@ jobs:
|
|||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
- name: Build Wazuh images
|
- name: Build Wazuh images
|
||||||
run: ./build-images.sh
|
run: build-docker-images/build-images.sh
|
||||||
working-directory: ./build-docker-images
|
|
||||||
|
|
||||||
- name: Create enviroment variables
|
- name: Create enviroment variables
|
||||||
run: cat .env > $GITHUB_ENV
|
run: cat .env > $GITHUB_ENV
|
||||||
|
|||||||
+1
-7
@@ -5,15 +5,10 @@ All notable changes to this project will be documented in this file.
|
|||||||
|
|
||||||
### Added
|
### Added
|
||||||
|
|
||||||
- Update indexer-certs-gen README.md for clarity on procedure ([#2132](https://github.com/wazuh/wazuh-docker/pull/2132))
|
- None
|
||||||
- Update certs generator image version to 0.0.4 ([#2130](https://github.com/wazuh/wazuh-docker/pull/2130))
|
|
||||||
|
|
||||||
### Changed
|
### Changed
|
||||||
|
|
||||||
- Add IMAGE_TAG stage reference ([#2176](https://github.com/wazuh/wazuh-docker/pull/2176))
|
|
||||||
- Modify run_as parameter value - v4.14.3 ([#2157](https://github.com/wazuh/wazuh-docker/pull/2157))
|
|
||||||
- Adapt Wazuh Agent Dockerfile for multi-architecture support ([#2149](https://github.com/wazuh/wazuh-docker/pull/2149))
|
|
||||||
- Agent group parameter added ([#2127](https://github.com/wazuh/wazuh-docker/pull/2127))
|
|
||||||
- Adapt to multi architecture build ([#2120](https://github.com/wazuh/wazuh-docker/pull/2120))
|
- Adapt to multi architecture build ([#2120](https://github.com/wazuh/wazuh-docker/pull/2120))
|
||||||
|
|
||||||
### Fixed
|
### Fixed
|
||||||
@@ -33,7 +28,6 @@ All notable changes to this project will be documented in this file.
|
|||||||
|
|
||||||
### Changed
|
### Changed
|
||||||
|
|
||||||
- Filebeat module version update ([#2115](https://github.com/wazuh/wazuh-docker/pull/2115))
|
|
||||||
- The location of the remove command for the wazuh-authd certificates has been changed. ([#2094](https://github.com/wazuh/wazuh-docker/pull/2094))
|
- The location of the remove command for the wazuh-authd certificates has been changed. ([#2094](https://github.com/wazuh/wazuh-docker/pull/2094))
|
||||||
- Removed sslmanager key from the docker manager image to 4.14.2. ([#2093](https://github.com/wazuh/wazuh-docker/pull/2093))
|
- Removed sslmanager key from the docker manager image to 4.14.2. ([#2093](https://github.com/wazuh/wazuh-docker/pull/2093))
|
||||||
|
|
||||||
|
|||||||
+1
-1
@@ -1,4 +1,4 @@
|
|||||||
{
|
{
|
||||||
"version": "4.14.3",
|
"version": "4.14.3",
|
||||||
"stage": "rc3"
|
"stage": "alpha0"
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,40 +1,32 @@
|
|||||||
# Wazuh Docker Image Builder
|
# Wazuh Docker Image Builder
|
||||||
|
|
||||||
The creation of the images for the Wazuh stack deployment in Docker is done with the `build-docker-images/build-images.sh` script
|
The creation of the images for the Wazuh stack deployment in Docker is done with the build-images.yml script
|
||||||
|
|
||||||
|
To execute the process, the following must be executed in the root of the wazuh-docker repository:
|
||||||
|
|
||||||
|
```
|
||||||
|
$ build-docker-images/build-images.sh
|
||||||
|
```
|
||||||
|
|
||||||
This script initializes the environment variables needed to build each of the images.
|
This script initializes the environment variables needed to build each of the images.
|
||||||
|
|
||||||
To execute it, make sure to be in the `build-docker-images` directory:
|
The script allows you to build images from other versions of Wazuh, to do this you must use the -v or --version argument:
|
||||||
|
|
||||||
```bash
|
|
||||||
cd build-docker-images
|
|
||||||
```
|
```
|
||||||
|
$ build-docker-images/build-images.sh -v 4.14.3
|
||||||
Then execute:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
./build-images.sh
|
|
||||||
```
|
|
||||||
|
|
||||||
The script also allows to build images from other versions of Wazuh by using the `-v` or `--version` argument:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
./build-images.sh -v 4.14.3
|
|
||||||
```
|
```
|
||||||
|
|
||||||
To get all the available script options use the -h or --help option:
|
To get all the available script options use the -h or --help option:
|
||||||
|
|
||||||
```bash
|
```
|
||||||
./build-images.sh -h
|
$ build-docker-images/build-images.sh -h
|
||||||
|
|
||||||
Usage: ./build-images.sh [OPTIONS]
|
Usage: build-docker-images/build-images.sh [OPTIONS]
|
||||||
|
|
||||||
-d, --dev <ref> [Optional] Set the development stage you want to build, example rc1 or beta1, not used by default.
|
-d, --dev <ref> [Optional] Set the development stage you want to build, example rc1 or beta1, not used by default.
|
||||||
-f, --filebeat-module <ref> [Optional] Set Filebeat module version. By default 0.5.
|
-f, --filebeat-module <ref> [Optional] Set Filebeat module version. By default 0.4.
|
||||||
-r, --revision <rev> [Optional] Package revision. By default 1
|
-r, --revision <rev> [Optional] Package revision. By default 1
|
||||||
-rg, --registry <reg> [Optional] Set the Docker registry to push the images.
|
|
||||||
-v, --version <ver> [Optional] Set the Wazuh version should be builded. By default, 4.14.3.
|
-v, --version <ver> [Optional] Set the Wazuh version should be builded. By default, 4.14.3.
|
||||||
-m, --multiarch [Optional] Enable multi-architecture builds.
|
|
||||||
-h, --help Show this help.
|
-h, --help Show this help.
|
||||||
|
|
||||||
```
|
```
|
||||||
@@ -1,4 +1,6 @@
|
|||||||
#!/bin/bash
|
IMAGE_TAG=4.14.3
|
||||||
|
WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '["]tag_name["]:' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g')
|
||||||
|
WAZUH_REGISTRY=docker.io
|
||||||
|
|
||||||
# Wazuh package generator
|
# Wazuh package generator
|
||||||
# Copyright (C) 2023, Wazuh Inc.
|
# Copyright (C) 2023, Wazuh Inc.
|
||||||
@@ -8,14 +10,10 @@
|
|||||||
# License (version 2) as published by the FSF - Free Software
|
# License (version 2) as published by the FSF - Free Software
|
||||||
# Foundation.
|
# Foundation.
|
||||||
|
|
||||||
IMAGE_TAG=4.14.3
|
|
||||||
WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '["]tag_name["]:' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g')
|
|
||||||
WAZUH_REGISTRY=docker.io
|
|
||||||
|
|
||||||
WAZUH_IMAGE_VERSION="4.14.3"
|
WAZUH_IMAGE_VERSION="4.14.3"
|
||||||
WAZUH_TAG_REVISION="1"
|
WAZUH_TAG_REVISION="1"
|
||||||
WAZUH_DEV_STAGE=""
|
WAZUH_DEV_STAGE=""
|
||||||
FILEBEAT_MODULE_VERSION="0.5"
|
FILEBEAT_MODULE_VERSION="0.4"
|
||||||
|
|
||||||
# -----------------------------------------------------------------------------
|
# -----------------------------------------------------------------------------
|
||||||
|
|
||||||
@@ -43,7 +41,6 @@ build() {
|
|||||||
|
|
||||||
if [ "${WAZUH_DEV_STAGE}" ];then
|
if [ "${WAZUH_DEV_STAGE}" ];then
|
||||||
FILEBEAT_TEMPLATE_BRANCH="v${FILEBEAT_TEMPLATE_BRANCH}-${WAZUH_DEV_STAGE,,}"
|
FILEBEAT_TEMPLATE_BRANCH="v${FILEBEAT_TEMPLATE_BRANCH}-${WAZUH_DEV_STAGE,,}"
|
||||||
IMAGE_TAG="${WAZUH_IMAGE_VERSION}-${WAZUH_DEV_STAGE,,}"
|
|
||||||
if ! curl --output /dev/null --silent --head --fail "https://github.com/wazuh/wazuh/tree/${FILEBEAT_TEMPLATE_BRANCH}"; then
|
if ! curl --output /dev/null --silent --head --fail "https://github.com/wazuh/wazuh/tree/${FILEBEAT_TEMPLATE_BRANCH}"; then
|
||||||
echo "The indicated branch does not exist in the wazuh/wazuh repository: ${FILEBEAT_TEMPLATE_BRANCH}"
|
echo "The indicated branch does not exist in the wazuh/wazuh repository: ${FILEBEAT_TEMPLATE_BRANCH}"
|
||||||
clean 1
|
clean 1
|
||||||
@@ -51,10 +48,8 @@ build() {
|
|||||||
else
|
else
|
||||||
if curl --output /dev/null --silent --head --fail "https://github.com/wazuh/wazuh/tree/v${FILEBEAT_TEMPLATE_BRANCH}"; then
|
if curl --output /dev/null --silent --head --fail "https://github.com/wazuh/wazuh/tree/v${FILEBEAT_TEMPLATE_BRANCH}"; then
|
||||||
FILEBEAT_TEMPLATE_BRANCH="v${FILEBEAT_TEMPLATE_BRANCH}"
|
FILEBEAT_TEMPLATE_BRANCH="v${FILEBEAT_TEMPLATE_BRANCH}"
|
||||||
IMAGE_TAG="${WAZUH_IMAGE_VERSION}"
|
|
||||||
elif curl --output /dev/null --silent --head --fail "https://github.com/wazuh/wazuh/tree/${FILEBEAT_TEMPLATE_BRANCH}"; then
|
elif curl --output /dev/null --silent --head --fail "https://github.com/wazuh/wazuh/tree/${FILEBEAT_TEMPLATE_BRANCH}"; then
|
||||||
FILEBEAT_TEMPLATE_BRANCH="${FILEBEAT_TEMPLATE_BRANCH}"
|
FILEBEAT_TEMPLATE_BRANCH="${FILEBEAT_TEMPLATE_BRANCH}"
|
||||||
IMAGE_TAG="${WAZUH_IMAGE_VERSION}"
|
|
||||||
else
|
else
|
||||||
echo "The indicated branch does not exist in the wazuh/wazuh repository: ${FILEBEAT_TEMPLATE_BRANCH}"
|
echo "The indicated branch does not exist in the wazuh/wazuh repository: ${FILEBEAT_TEMPLATE_BRANCH}"
|
||||||
clean 1
|
clean 1
|
||||||
@@ -96,9 +91,10 @@ help() {
|
|||||||
echo
|
echo
|
||||||
echo "Usage: $0 [OPTIONS]"
|
echo "Usage: $0 [OPTIONS]"
|
||||||
echo
|
echo
|
||||||
echo " -d, --dev <ref> [Optional] Set the development stage you want to build, example rc4 or beta1, not used by default."
|
echo " -d, --dev <ref> [Optional] Set the development stage you want to build, example alpha0 or beta1, not used by default."
|
||||||
echo " -f, --filebeat-module <ref> [Optional] Set Filebeat module version. By default ${FILEBEAT_MODULE_VERSION}."
|
echo " -f, --filebeat-module <ref> [Optional] Set Filebeat module version. By default ${FILEBEAT_MODULE_VERSION}."
|
||||||
echo " -r, --revision <rev> [Optional] Package revision. By default ${WAZUH_TAG_REVISION}"
|
echo " -r, --revision <rev> [Optional] Package revision. By default ${WAZUH_TAG_REVISION}"
|
||||||
|
echo " -ref, --reference <ref> [Optional] Set the Wazuh reference to build development images. By default, the latest stable release."
|
||||||
echo " -rg, --registry <reg> [Optional] Set the Docker registry to push the images."
|
echo " -rg, --registry <reg> [Optional] Set the Docker registry to push the images."
|
||||||
echo " -v, --version <ver> [Optional] Set the Wazuh version should be builded. By default, ${WAZUH_IMAGE_VERSION}."
|
echo " -v, --version <ver> [Optional] Set the Wazuh version should be builded. By default, ${WAZUH_IMAGE_VERSION}."
|
||||||
echo " -m, --multiarch [Optional] Enable multi-architecture builds."
|
echo " -m, --multiarch [Optional] Enable multi-architecture builds."
|
||||||
@@ -144,6 +140,14 @@ main() {
|
|||||||
help 1
|
help 1
|
||||||
fi
|
fi
|
||||||
;;
|
;;
|
||||||
|
"-ref"|"--reference")
|
||||||
|
if [ -n "${2}" ]; then
|
||||||
|
WAZUH_TAG_REFERENCE="${2}"
|
||||||
|
shift 2
|
||||||
|
else
|
||||||
|
help 1
|
||||||
|
fi
|
||||||
|
;;
|
||||||
"-rg"|"--registry")
|
"-rg"|"--registry")
|
||||||
if [ -n "${2}" ]; then
|
if [ -n "${2}" ]; then
|
||||||
WAZUH_REGISTRY="${2}"
|
WAZUH_REGISTRY="${2}"
|
||||||
|
|||||||
@@ -10,9 +10,7 @@ ARG WAZUH_MANAGER='CHANGE_MANAGER_IP'
|
|||||||
ARG WAZUH_MANAGER_PORT='CHANGE_MANAGER_PORT'
|
ARG WAZUH_MANAGER_PORT='CHANGE_MANAGER_PORT'
|
||||||
ARG WAZUH_REGISTRATION_SERVER='CHANGE_ENROLL_IP'
|
ARG WAZUH_REGISTRATION_SERVER='CHANGE_ENROLL_IP'
|
||||||
ARG WAZUH_REGISTRATION_PORT='CHANGE_ENROLL_PORT'
|
ARG WAZUH_REGISTRATION_PORT='CHANGE_ENROLL_PORT'
|
||||||
ARG WAZUH_AGENT_NAME='CHANGE_AGENT_NAME'
|
ARG WAZUH_AGENT_NAME='CHANGEE_AGENT_NAME'
|
||||||
ARG WAZUH_AGENT_GROUPS='CHANGE_AGENT_GROUPS'
|
|
||||||
ARG TARGETARCH
|
|
||||||
|
|
||||||
COPY config/check_repository.sh /
|
COPY config/check_repository.sh /
|
||||||
|
|
||||||
@@ -25,13 +23,11 @@ RUN source /check_repository.sh
|
|||||||
RUN yum install wazuh-agent-${WAZUH_VERSION}-${WAZUH_TAG_REVISION} -y && \
|
RUN yum install wazuh-agent-${WAZUH_VERSION}-${WAZUH_TAG_REVISION} -y && \
|
||||||
yum clean all && \
|
yum clean all && \
|
||||||
sed -i '/<authorization_pass_path>/d' /var/ossec/etc/ossec.conf && \
|
sed -i '/<authorization_pass_path>/d' /var/ossec/etc/ossec.conf && \
|
||||||
S6_ARCH="amd64" && \
|
curl --fail --silent -L https://github.com/just-containers/s6-overlay/releases/download/${S6_VERSION}/s6-overlay-amd64.tar.gz \
|
||||||
if [ "${TARGETARCH}" = "arm64" ]; then S6_ARCH="aarch64"; fi && \
|
-o /tmp/s6-overlay-amd64.tar.gz && \
|
||||||
curl --fail --silent -L https://github.com/just-containers/s6-overlay/releases/download/${S6_VERSION}/s6-overlay-${S6_ARCH}.tar.gz \
|
tar xzf /tmp/s6-overlay-amd64.tar.gz -C / --exclude="./bin" && \
|
||||||
-o /tmp/s6-overlay-${S6_ARCH}.tar.gz && \
|
tar xzf /tmp/s6-overlay-amd64.tar.gz -C /usr ./bin && \
|
||||||
tar xzf /tmp/s6-overlay-${S6_ARCH}.tar.gz -C / --exclude="./bin" && \
|
rm /tmp/s6-overlay-amd64.tar.gz
|
||||||
tar xzf /tmp/s6-overlay-${S6_ARCH}.tar.gz -C /usr ./bin && \
|
|
||||||
rm /tmp/s6-overlay-${S6_ARCH}.tar.gz
|
|
||||||
|
|
||||||
COPY config/etc/ /etc/
|
COPY config/etc/ /etc/
|
||||||
|
|
||||||
|
|||||||
@@ -9,7 +9,6 @@ WAZUH_REGISTRATION_SERVER=${WAZUH_REGISTRATION_SERVER:-$WAZUH_MANAGER_SERVER}
|
|||||||
WAZUH_REGISTRATION_PORT=${WAZUH_REGISTRATION_PORT:-"1515"}
|
WAZUH_REGISTRATION_PORT=${WAZUH_REGISTRATION_PORT:-"1515"}
|
||||||
WAZUH_REGISTRATION_PASSWORD=$WAZUH_REGISTRATION_PASSWORD
|
WAZUH_REGISTRATION_PASSWORD=$WAZUH_REGISTRATION_PASSWORD
|
||||||
WAZUH_AGENT_NAME=${WAZUH_AGENT_NAME:-"wazuh-agent-$HOSTNAME"}
|
WAZUH_AGENT_NAME=${WAZUH_AGENT_NAME:-"wazuh-agent-$HOSTNAME"}
|
||||||
WAZUH_AGENT_GROUPS=${WAZUH_AGENT_GROUPS:-"default"}
|
|
||||||
|
|
||||||
##############################################################################
|
##############################################################################
|
||||||
# Aux functions
|
# Aux functions
|
||||||
@@ -67,8 +66,7 @@ set_manager_conn() {
|
|||||||
sed -i "s#<port>CHANGE_MANAGER_PORT</port>#<port>$WAZUH_MANAGER_PORT</port>#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf
|
sed -i "s#<port>CHANGE_MANAGER_PORT</port>#<port>$WAZUH_MANAGER_PORT</port>#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf
|
||||||
sed -i "s#<manager_address>CHANGE_ENROLL_IP</manager_address>#<manager_address>$WAZUH_REGISTRATION_SERVER</manager_address>#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf
|
sed -i "s#<manager_address>CHANGE_ENROLL_IP</manager_address>#<manager_address>$WAZUH_REGISTRATION_SERVER</manager_address>#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf
|
||||||
sed -i "s#<port>CHANGE_ENROLL_PORT</port>#<port>$WAZUH_REGISTRATION_PORT</port>#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf
|
sed -i "s#<port>CHANGE_ENROLL_PORT</port>#<port>$WAZUH_REGISTRATION_PORT</port>#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf
|
||||||
sed -i "s#<agent_name>CHANGE_AGENT_NAME</agent_name>#<agent_name>$WAZUH_AGENT_NAME</agent_name>#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf
|
sed -i "s#<agent_name>CHANGEE_AGENT_NAME</agent_name>#<agent_name>$WAZUH_AGENT_NAME</agent_name>#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf
|
||||||
sed -i "s#<groups>CHANGE_AGENT_GROUPS</groups>#<groups>$WAZUH_AGENT_GROUPS</groups>#g" ${WAZUH_INSTALL_PATH}/etc/ossec.conf
|
|
||||||
[ -n "$WAZUH_REGISTRATION_PASSWORD" ] && \
|
[ -n "$WAZUH_REGISTRATION_PASSWORD" ] && \
|
||||||
echo "$WAZUH_REGISTRATION_PASSWORD" > ${WAZUH_INSTALL_PATH}/etc/authd.pass && \
|
echo "$WAZUH_REGISTRATION_PASSWORD" > ${WAZUH_INSTALL_PATH}/etc/authd.pass && \
|
||||||
chown root:wazuh ${WAZUH_INSTALL_PATH}/etc/authd.pass && \
|
chown root:wazuh ${WAZUH_INSTALL_PATH}/etc/authd.pass && \
|
||||||
|
|||||||
@@ -5,7 +5,7 @@ wazuh_url="${WAZUH_API_URL:-https://wazuh}"
|
|||||||
wazuh_port="${API_PORT:-55000}"
|
wazuh_port="${API_PORT:-55000}"
|
||||||
api_username="${API_USERNAME:-wazuh-wui}"
|
api_username="${API_USERNAME:-wazuh-wui}"
|
||||||
api_password="${API_PASSWORD:-wazuh-wui}"
|
api_password="${API_PASSWORD:-wazuh-wui}"
|
||||||
api_run_as="${RUN_AS:-true}"
|
api_run_as="${RUN_AS:-false}"
|
||||||
|
|
||||||
dashboard_config_file="/usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml"
|
dashboard_config_file="/usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml"
|
||||||
|
|
||||||
|
|||||||
@@ -23,8 +23,8 @@ $ build-docker-images/build-images.sh -h
|
|||||||
|
|
||||||
Usage: build-docker-images/build-images.sh [OPTIONS]
|
Usage: build-docker-images/build-images.sh [OPTIONS]
|
||||||
|
|
||||||
-d, --dev <ref> [Optional] Set the development stage you want to build, example rc4 or beta1, not used by default.
|
-d, --dev <ref> [Optional] Set the development stage you want to build, example alpha0 or beta1, not used by default.
|
||||||
-f, --filebeat-module <ref> [Optional] Set Filebeat module version. By default 0.5.
|
-f, --filebeat-module <ref> [Optional] Set Filebeat module version. By default 0.4.
|
||||||
-r, --revision <rev> [Optional] Package revision. By default 1
|
-r, --revision <rev> [Optional] Package revision. By default 1
|
||||||
-v, --version <ver> [Optional] Set the Wazuh version should be builded. By default, 4.14.3.
|
-v, --version <ver> [Optional] Set the Wazuh version should be builded. By default, 4.14.3.
|
||||||
-h, --help Show this help.
|
-h, --help Show this help.
|
||||||
|
|||||||
@@ -4,14 +4,11 @@ This document outlines the environment variables applicable to the Wazuh Docker
|
|||||||
|
|
||||||
## Table of Contents
|
## Table of Contents
|
||||||
|
|
||||||
- [Environment Variables in Wazuh Docker Deployment](#environment-variables-in-wazuh-docker-deployment)
|
- [Wazuh Manager](#wazuh-manager)
|
||||||
- [Table of Contents](#table-of-contents)
|
- [Wazuh Indexer](#wazuh-indexer)
|
||||||
- [Wazuh Manager](#wazuh-manager)
|
- [Wazuh Dashboard](#wazuh-dashboard)
|
||||||
- [Wazuh Indexer](#wazuh-indexer)
|
- [Wazuh Agent](#wazuh-agent)
|
||||||
- [Wazuh Dashboard](#wazuh-dashboard)
|
- [Overriding Configuration Files with Environment Variables](#overriding-configuration-files-with-environment-variables)
|
||||||
- [Wazuh Agent](#wazuh-agent)
|
|
||||||
- [Overriding Configuration Files with Environment Variables](#overriding-configuration-files-with-environment-variables)
|
|
||||||
- [Examples:](#examples)
|
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
@@ -91,7 +88,6 @@ environment:
|
|||||||
- WAZUH_REGISTRATION_SERVER=wazuh.manager
|
- WAZUH_REGISTRATION_SERVER=wazuh.manager
|
||||||
- WAZUH_REGISTRATION_PORT=1515
|
- WAZUH_REGISTRATION_PORT=1515
|
||||||
- WAZUH_AGENT_NAME=my-agent
|
- WAZUH_AGENT_NAME=my-agent
|
||||||
- WAZUH_AGENT_GROUPS=default
|
|
||||||
- WAZUH_REGISTRATION_PASSWORD=StrongPassword
|
- WAZUH_REGISTRATION_PASSWORD=StrongPassword
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|||||||
@@ -4,23 +4,18 @@ The dockerfile hosted in this directory is used to build the image required for
|
|||||||
|
|
||||||
## Pre-requisites
|
## Pre-requisites
|
||||||
|
|
||||||
1. Verify the Docker Buildx plugin is properly set up
|
### QEMU
|
||||||
2. For multi-architecture image builds:
|
|
||||||
- Ensure QEMU is installed
|
Set up QEMU to enable building multi-architecture Docker images
|
||||||
- Check permissions to push images to a Docker registry
|
|
||||||
|
|
||||||
Useful documentation:
|
Useful documentation:
|
||||||
|
|
||||||
- https://docs.docker.com/build/building/multi-platform/
|
|
||||||
- https://www.qemu.org/download/
|
- https://www.qemu.org/download/
|
||||||
|
- https://docs.docker.com/build/building/multi-platform/#qemu
|
||||||
|
|
||||||
## Procedure
|
## Procedure
|
||||||
|
|
||||||
Execute the following to run the script used to build the wazuh-certs-generator docker image
|
Run the following script to build the wazuh-certs-generator docker image
|
||||||
|
|
||||||
```console
|
|
||||||
cd indexer-certs-creator
|
|
||||||
```
|
|
||||||
|
|
||||||
```console
|
```console
|
||||||
./build-image.sh -v <IMAGE_TAG> [-m] [-rg <REGISTRY>]
|
./build-image.sh -v <IMAGE_TAG> [-m] [-rg <REGISTRY>]
|
||||||
|
|||||||
@@ -4,4 +4,4 @@ hosts:
|
|||||||
port: 55000
|
port: 55000
|
||||||
username: wazuh-wui
|
username: wazuh-wui
|
||||||
password: "MyS3cr37P450r.*-"
|
password: "MyS3cr37P450r.*-"
|
||||||
run_as: true
|
run_as: false
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
# Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2)
|
# Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2)
|
||||||
services:
|
services:
|
||||||
generator:
|
generator:
|
||||||
image: wazuh/wazuh-certs-generator:0.0.4
|
image: wazuh/wazuh-certs-generator:0.0.3
|
||||||
hostname: wazuh-certs-generator
|
hostname: wazuh-certs-generator
|
||||||
environment:
|
environment:
|
||||||
- CERT_TOOL_VERSION=4.14
|
- CERT_TOOL_VERSION=4.14
|
||||||
|
|||||||
@@ -4,4 +4,4 @@ hosts:
|
|||||||
port: 55000
|
port: 55000
|
||||||
username: wazuh-wui
|
username: wazuh-wui
|
||||||
password: "MyS3cr37P450r.*-"
|
password: "MyS3cr37P450r.*-"
|
||||||
run_as: true
|
run_as: false
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
# Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2)
|
# Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2)
|
||||||
services:
|
services:
|
||||||
generator:
|
generator:
|
||||||
image: wazuh/wazuh-certs-generator:0.0.4
|
image: wazuh/wazuh-certs-generator:0.0.3
|
||||||
hostname: wazuh-certs-generator
|
hostname: wazuh-certs-generator
|
||||||
environment:
|
environment:
|
||||||
- CERT_TOOL_VERSION=4.14
|
- CERT_TOOL_VERSION=4.14
|
||||||
|
|||||||
@@ -20,9 +20,8 @@
|
|||||||
<enabled>yes</enabled>
|
<enabled>yes</enabled>
|
||||||
<manager_address>CHANGE_ENROLL_IP</manager_address>
|
<manager_address>CHANGE_ENROLL_IP</manager_address>
|
||||||
<port>CHANGE_ENROLL_PORT</port>
|
<port>CHANGE_ENROLL_PORT</port>
|
||||||
<agent_name>CHANGE_AGENT_NAME</agent_name>
|
<agent_name>CHANGEE_AGENT_NAME</agent_name>
|
||||||
<authorization_pass_path>etc/authd.pass</authorization_pass_path>
|
<authorization_pass_path>etc/authd.pass</authorization_pass_path>
|
||||||
<groups>CHANGE_AGENT_GROUPS</groups>
|
|
||||||
</enrollment>
|
</enrollment>
|
||||||
</client>
|
</client>
|
||||||
|
|
||||||
|
|||||||
@@ -6,4 +6,4 @@ services:
|
|||||||
environment:
|
environment:
|
||||||
- WAZUH_MANAGER_SERVER=<WAZUH_MANAGER_IP>
|
- WAZUH_MANAGER_SERVER=<WAZUH_MANAGER_IP>
|
||||||
volumes:
|
volumes:
|
||||||
- ./config/wazuh-agent-conf:/wazuh-config-mount/etc/ossec.conf
|
- ./config/wazuh-agent-conf:/wazuh-config-mount/etc/ossec.conf
|
||||||
Reference in New Issue
Block a user