Merge pull request #966 from wazuh/18542-vdt-bookworm-support

Add Debian Bookworm to VDT default configuration
Add Debian Bookworm VDT support
2023-08-25 13:17:17 -03:00 · 2023-08-25 12:24:01 -03:00 · 2023-08-24 13:10:01 -03:00 · 2023-08-24 12:45:02 -03:00 · 2023-08-24 12:31:06 -03:00 · 2023-08-24 12:23:15 -03:00
28 changed files with 349 additions and 139 deletions
@@ -1,3 +1,3 @@
-WAZUH_VERSION=4.3.10
-WAZUH_IMAGE_VERSION=4.3.10
+WAZUH_VERSION=4.6.0
+WAZUH_IMAGE_VERSION=4.6.0
 WAZUH_TAG_REVISION=1
@@ -56,7 +56,7 @@ package:
  wazuh-manager:
    installed: true
    versions:
-    - 4.3.10-1
+    - 4.6.0-1
 port:
  tcp:1514:
    listening: true
@@ -126,7 +126,7 @@ jobs:

    - name: Check documents into wazuh-alerts index
      run: |
-       docs="`curl -XGET "https://0.0.0.0:9200/wazuh-alerts*/_doc/_search" -u admin:SecretPassword -k -s | jq -r ".hits.total.value"`"
+       docs="`curl -XGET "https://0.0.0.0:9200/wazuh-alerts*/_count" -u admin:SecretPassword -k -s | jq -r ".count"`"
       if [[ $docs -gt 100 ]]; then
        echo "wazuh-alerts index documents: ${docs}"
       else
@@ -250,8 +250,8 @@ jobs:

    - name: Check documents into wazuh-alerts index
      run: |
-       docs="`curl -XGET "https://0.0.0.0:9200/wazuh-alerts*/_doc/_search" -u admin:SecretPassword -k -s | jq -r ".hits.total.value"`"
-       if [[ $docs -gt 200 ]]; then
+       docs="`curl -XGET "https://0.0.0.0:9200/wazuh-alerts*/_count" -u admin:SecretPassword -k -s | jq -r ".count"`"
+       if [[ $docs -gt 100 ]]; then
        echo "wazuh-alerts index documents: ${docs}"
       else
        echo "wazuh-alerts index documents: ${docs}"
@@ -1,6 +1,61 @@
 # Change Log
 All notable changes to this project will be documented in this file.

+## Wazuh Docker v4.6.0
+### Added
+
+- Update Wazuh to version [4.6.0](https://github.com/wazuh/wazuh/blob/v4.6.0/CHANGELOG.md#v460)
+
+## Wazuh Docker v4.5.2
+### Added
+
+- Update Wazuh to version [4.5.2](https://github.com/wazuh/wazuh/blob/v4.5.2/CHANGELOG.md#v452)
+
+## Wazuh Docker v4.5.1
+### Added
+
+- Update Wazuh to version [4.5.1](https://github.com/wazuh/wazuh/blob/v4.5.1/CHANGELOG.md#v451)
+
+## Wazuh Docker v4.5.0
+### Added
+
+- Update Wazuh to version [4.5.0](https://github.com/wazuh/wazuh/blob/v4.5.0/CHANGELOG.md#v450)
+
+## Wazuh Docker v4.4.5
+### Added
+
+- Update Wazuh to version [4.4.5](https://github.com/wazuh/wazuh/blob/v4.4.5/CHANGELOG.md#v445)
+
+## Wazuh Docker v4.4.4
+### Added
+
+- Update Wazuh to version [4.4.4](https://github.com/wazuh/wazuh/blob/v4.4.4/CHANGELOG.md#v444)
+
+## Wazuh Docker v4.4.3
+### Added
+
+- Update Wazuh to version [4.4.3](https://github.com/wazuh/wazuh/blob/v4.4.3/CHANGELOG.md#v443)
+
+## Wazuh Docker v4.4.2
+### Added
+
+- Update Wazuh to version [4.4.2](https://github.com/wazuh/wazuh/blob/v4.4.2/CHANGELOG.md#v442)
+
+## Wazuh Docker v4.4.1
+### Added
+
+- Update Wazuh to version [4.4.1](https://github.com/wazuh/wazuh/blob/v4.4.1/CHANGELOG.md#v441)
+
+## Wazuh Docker v4.4.0
+### Added
+
+- Update Wazuh to version [4.4.0](https://github.com/wazuh/wazuh/blob/v4.4.0/CHANGELOG.md#v440)
+
+## Wazuh Docker v4.3.11
+### Added
+
+- Update Wazuh to version [4.3.11](https://github.com/wazuh/wazuh/blob/v4.3.11/CHANGELOG.md#v4311)
+
 ## Wazuh Docker v4.3.10
 ### Added

@@ -42,7 +42,7 @@ API_PASSWORD="MyS3cr37P450r.*-"                     # Wazuh API password - Must

 INDEXER_URL=https://wazuh.indexer:9200              # Wazuh indexer URL
 INDEXER_USERNAME=admin                              # Wazuh indexer Username
-INDEXER_PASSWORD=admin                              # Wazuh indexer Password
+INDEXER_PASSWORD=SecretPassword                     # Wazuh indexer Password
 FILEBEAT_SSL_VERIFICATION_MODE=full                 # Filebeat SSL Verification mode (full or none)
 SSL_CERTIFICATE_AUTHORITIES=""                      # Path of Filebeat SSL CA
 SSL_CERTIFICATE=""                                  # Path of Filebeat SSL Certificate
@@ -195,6 +195,17 @@ WAZUH_MONITORING_REPLICAS=0         ##

 | Wazuh version | ODFE    | XPACK  |
 |---------------|---------|--------|
+| v4.6.0        |         |        |
+| v4.5.2        |         |        |
+| v4.5.1        |         |        |
+| v4.5.0        |         |        |
+| v4.4.5        |         |        |
+| v4.4.4        |         |        |
+| v4.4.3        |         |        |
+| v4.4.2        |         |        |
+| v4.4.1        |         |        |
+| v4.4.0        |         |        |
+| v4.3.11       |         |        |
 | v4.3.10       |         |        |
 | v4.3.9        |         |        |
 | v4.3.8        |         |        |
@@ -1,2 +1,2 @@
-WAZUH-DOCKER_VERSION="4.3.10"
-REVISION="40323"
+WAZUH-DOCKER_VERSION="4.6.0"
+REVISION="40600"
@@ -1,14 +1,8 @@
-WAZUH_IMAGE_VERSION=4.3.10
+WAZUH_IMAGE_VERSION=4.6.0
 WAZUH_VERSION=$(echo $WAZUH_IMAGE_VERSION | sed -e 's/\.//g')
 WAZUH_TAG_REVISION=1
 WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g')
-
-## If wazuh manager exists in apt dev repository, change variables, if not, exit 1
-if [ "$WAZUH_VERSION" -le "$WAZUH_CURRENT_VERSION" ]; then
-  IMAGE_VERSION=${WAZUH_IMAGE_VERSION}
-else
-  IMAGE_VERSION=${WAZUH_IMAGE_VERSION}
-fi
+IMAGE_VERSION=${WAZUH_IMAGE_VERSION}

 echo WAZUH_VERSION=$WAZUH_IMAGE_VERSION > .env
 echo WAZUH_IMAGE_VERSION=$IMAGE_VERSION >> .env
@@ -9,8 +9,8 @@ export CONFIG_DIR=${INSTALLATION_DIR}/config

 ## Variables
 CERT_TOOL=wazuh-certs-tool.sh
-PACKAGES_URL=https://packages.wazuh.com/4.3/
-PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.3/
+PACKAGES_URL=https://packages.wazuh.com/4.6/
+PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.6/

 ## Check if the cert tool exists in S3 buckets
 CERT_TOOL_PACKAGES=$(curl --silent -I $PACKAGES_URL$CERT_TOOL | grep -E "^HTTP" | awk  '{print $2}')
@@ -1,12 +1,25 @@
-WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g') && \
-WAZUH_IMAGE_VERSION=$(echo $WAZUH_VERSION | sed -e 's/\.//g') && \
+REPOSITORY="packages.wazuh.com/4.x"
+WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2-)
+MAJOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f1)
+MID_BUILD=$(echo $WAZUH_VERSION | cut -d. -f2)
+MINOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f3)
+MAJOR_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f1)
+MID_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f2)
+MINOR_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f3)

-
-if [ "$WAZUH_IMAGE_VERSION" -le "$WAZUH_CURRENT_VERSION" ]; then
- REPOSITORY="packages.wazuh.com"
-else 
- REPOSITORY="packages-dev.wazuh.com"
+## check version to use the correct repository
+if [ "$MAJOR_BUILD" -gt "$MAJOR_CURRENT" ]; then
+  REPOSITORY="packages-dev.wazuh.com/pre-release"
+elif [ "$MAJOR_BUILD" -eq "$MAJOR_CURRENT" ]; then
+  if [ "$MID_BUILD" -gt "$MID_CURRENT" ]; then
+    REPOSITORY="packages-dev.wazuh.com/pre-release"
+  elif [ "$MID_BUILD" -eq "$MID_CURRENT" ]; then
+    if [ "$MINOR_BUILD" -gt "$MINOR_CURRENT" ]; then
+      REPOSITORY="packages-dev.wazuh.com/pre-release"
+    fi
+  fi
 fi
- 
-curl -o wazuh-dashboard-base.tar.xz https://${REPOSITORY}/stack/dashboard/base/wazuh-dashboard-base-${WAZUH_VERSION}-${WAZUH_TAG_REVISION}-linux-x64.tar.xz
+
+
+curl -o wazuh-dashboard-base.tar.xz https://${REPOSITORY}/stack/dashboard/wazuh-dashboard-base-${WAZUH_VERSION}-${WAZUH_TAG_REVISION}-linux-x64.tar.xz
 tar -xf wazuh-dashboard-base.tar.xz --directory  $INSTALL_DIR --strip-components=1
@@ -1,11 +1,24 @@
-## Variables
-WAZUH_IMAGE_VERSION=$(echo $WAZUH_VERSION | sed -e 's/\.//g')
-WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g')
-## If wazuh manager exists in apt dev repository, change variables, if not exit 1
-if [ "$WAZUH_IMAGE_VERSION" -le "$WAZUH_CURRENT_VERSION" ]; then
-  WAZUH_APP=https://packages.wazuh.com/4.x/ui/dashboard/wazuh-${WAZUH_VERSION}-${WAZUH_UI_REVISION}.zip
-else
+## variables
+WAZUH_APP=https://packages.wazuh.com/4.x/ui/dashboard/wazuh-${WAZUH_VERSION}-${WAZUH_UI_REVISION}.zip
+WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2-)
+MAJOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f1)
+MID_BUILD=$(echo $WAZUH_VERSION | cut -d. -f2)
+MINOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f3)
+MAJOR_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f1)
+MID_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f2)
+MINOR_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f3)
+
+## check version to use the correct repository
+if [ "$MAJOR_BUILD" -gt "$MAJOR_CURRENT" ]; then
  WAZUH_APP=https://packages-dev.wazuh.com/pre-release/ui/dashboard/wazuh-${WAZUH_VERSION}-${WAZUH_UI_REVISION}.zip
+elif [ "$MAJOR_BUILD" -eq "$MAJOR_CURRENT" ]; then
+  if [ "$MID_BUILD" -gt "$MID_CURRENT" ]; then
+    WAZUH_APP=https://packages-dev.wazuh.com/pre-release/ui/dashboard/wazuh-${WAZUH_VERSION}-${WAZUH_UI_REVISION}.zip
+  elif [ "$MID_BUILD" -eq "$MID_CURRENT" ]; then
+    if [ "$MINOR_BUILD" -gt "$MINOR_CURRENT" ]; then
+      WAZUH_APP=https://packages-dev.wazuh.com/pre-release/ui/dashboard/wazuh-${WAZUH_VERSION}-${WAZUH_UI_REVISION}.zip
+    fi
+  fi
 fi

 # Install Wazuh App
@@ -59,14 +59,15 @@ COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/systemd /usr/lib/s
 COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/sysctl.d /usr/lib/sysctl.d
 COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/tmpfiles.d /usr/lib/tmpfiles.d

+RUN chown -R 1000:1000 /usr/share/wazuh-indexer

 RUN mkdir -p /var/lib/wazuh-indexer && chown 1000:1000 /var/lib/wazuh-indexer && \
    mkdir -p /usr/share/wazuh-indexer/logs && chown 1000:1000 /usr/share/wazuh-indexer/logs && \
    mkdir -p /run/wazuh-indexer && chown 1000:1000 /run/wazuh-indexer && \
    mkdir -p /var/log/wazuh-indexer && chown 1000:1000 /var/log/wazuh-indexer && \
-    chmod 700 /usr/share/wazuh-indexer/config && \
-    chmod 600 /usr/share/wazuh-indexer/config/jvm.options && \
-    chmod 600 /usr/share/wazuh-indexer/config/opensearch.yml
+    chmod 700 /usr/share/wazuh-indexer && \
+    chmod 600 /usr/share/wazuh-indexer/jvm.options && \
+    chmod 600 /usr/share/wazuh-indexer/opensearch.yml

 USER wazuh-indexer

@@ -4,8 +4,6 @@ export DH_OPTIONS

 export NAME=wazuh-indexer
 export TARGET_DIR=${CURDIR}/debian/${NAME}
-export WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g')
-export WAZUH_IMAGE_VERSION=$(echo $WAZUH_VERSION | sed -e 's/\.//g')

 # Package build options
 export USER=${NAME}
@@ -15,7 +13,7 @@ export LOG_DIR=/var/log/${NAME}
 export LIB_DIR=/var/lib/${NAME}
 export PID_DIR=/run/${NAME}
 export INSTALLATION_DIR=/usr/share/${NAME}
-export CONFIG_DIR=${INSTALLATION_DIR}/config
+export CONFIG_DIR=${INSTALLATION_DIR}
 export BASE_DIR=${NAME}-*
 export INDEXER_FILE=wazuh-indexer-base.tar.xz
 export BASE_FILE=wazuh-indexer-base-${VERSION}-linux-x64.tar.xz
@@ -23,13 +21,31 @@ export REPO_DIR=/unattended_installer

 rm -rf ${INSTALLATION_DIR}/

-if [ "$WAZUH_IMAGE_VERSION" -le "$WAZUH_CURRENT_VERSION" ]; then
- REPOSITORY="packages.wazuh.com"
-else
- REPOSITORY="packages-dev.wazuh.com"
+## variables
+REPOSITORY="packages.wazuh.com/4.x"
+WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2-)
+MAJOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f1)
+MID_BUILD=$(echo $WAZUH_VERSION | cut -d. -f2)
+MINOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f3)
+MAJOR_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f1)
+MID_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f2)
+MINOR_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f3)
+
+## check version to use the correct repository
+if [ "$MAJOR_BUILD" -gt "$MAJOR_CURRENT" ]; then
+  REPOSITORY="packages-dev.wazuh.com/pre-release"
+elif [ "$MAJOR_BUILD" -eq "$MAJOR_CURRENT" ]; then
+  if [ "$MID_BUILD" -gt "$MID_CURRENT" ]; then
+    REPOSITORY="packages-dev.wazuh.com/pre-release"
+  elif [ "$MID_BUILD" -eq "$MID_CURRENT" ]; then
+    if [ "$MINOR_BUILD" -gt "$MINOR_CURRENT" ]; then
+      REPOSITORY="packages-dev.wazuh.com/pre-release"
+    fi
+  fi
 fi

-curl -o ${INDEXER_FILE} https://${REPOSITORY}/stack/indexer/base/${BASE_FILE}
+
+curl -o ${INDEXER_FILE} https://${REPOSITORY}/stack/indexer/${BASE_FILE}
 tar -xf ${INDEXER_FILE}

 ## TOOLS
@@ -37,8 +53,8 @@ tar -xf ${INDEXER_FILE}
 ## Variables
 CERT_TOOL=wazuh-certs-tool.sh
 PASSWORD_TOOL=wazuh-passwords-tool.sh
-PACKAGES_URL=https://packages.wazuh.com/4.3/
-PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.3/
+PACKAGES_URL=https://packages.wazuh.com/4.6/
+PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.6/

 ## Check if the cert tool exists in S3 buckets
 CERT_TOOL_PACKAGES=$(curl --silent -I $PACKAGES_URL$CERT_TOOL | grep -E "^HTTP" | awk  '{print $2}')
@@ -77,6 +93,7 @@ chmod 755 $CERT_TOOL && bash /$CERT_TOOL -A

 # copy to target
 mkdir -p ${TARGET_DIR}${INSTALLATION_DIR}
+mkdir -p ${TARGET_DIR}${INSTALLATION_DIR}/opensearch-security/
 mkdir -p ${TARGET_DIR}${CONFIG_DIR}
 mkdir -p ${TARGET_DIR}${LIB_DIR}
 mkdir -p ${TARGET_DIR}${LOG_DIR}
@@ -101,9 +118,9 @@ cp -pr ${BASE_DIR}/* ${TARGET_DIR}${INSTALLATION_DIR}
 cp /$CERT_TOOL ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/
 cp /$PASSWORD_TOOL ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/
 # Copy Wazuh's config files for the security plugin
-cp -pr /roles_mapping.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/
-cp -pr /roles.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/
-cp -pr /internal_users.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/
+cp -pr /roles_mapping.yml ${TARGET_DIR}${INSTALLATION_DIR}/opensearch-security/
+cp -pr /roles.yml ${TARGET_DIR}${INSTALLATION_DIR}/opensearch-security/
+cp -pr /internal_users.yml ${TARGET_DIR}${INSTALLATION_DIR}/opensearch-security/
 cp -pr /opensearch.yml ${TARGET_DIR}${CONFIG_DIR}
 # Copy Wazuh indexer's certificates
 cp -pr /wazuh-certificates/demo.indexer.pem ${TARGET_DIR}${CONFIG_DIR}/certs/indexer.pem
@@ -6,7 +6,7 @@ umask 0002

 export USER=wazuh-indexer
 export INSTALLATION_DIR=/usr/share/wazuh-indexer
-export OPENSEARCH_PATH_CONF=${INSTALLATION_DIR}/config
+export OPENSEARCH_PATH_CONF=${INSTALLATION_DIR}
 export JAVA_HOME=${INSTALLATION_DIR}/jdk
 export DISCOVERY=$(grep -oP "(?<=discovery.type: ).*" ${OPENSEARCH_PATH_CONF}/opensearch.yml)
 export CACERT=$(grep -oP "(?<=plugins.security.ssl.transport.pemtrustedcas_filepath: ).*" ${OPENSEARCH_PATH_CONF}/opensearch.yml)
@@ -59,7 +59,7 @@ if [[ -f bin/opensearch-users ]]; then
  # enabled, but we have no way of knowing which node we are yet. We'll just
  # honor the variable if it's present.
  if [[ -n "$INDEXER_PASSWORD" ]]; then
-    [[ -f /usr/share/wazuh-indexer/config/opensearch.keystore ]] || (run_as_other_user_if_needed opensearch-keystore create)
+    [[ -f /usr/share/wazuh-indexer/opensearch.keystore ]] || (run_as_other_user_if_needed opensearch-keystore create)
    if ! (run_as_other_user_if_needed opensearch-keystore has-passwd --silent) ; then
      # keystore is unencrypted
      if ! (run_as_other_user_if_needed opensearch-keystore list | grep -q '^bootstrap.password$'); then
@@ -84,10 +84,10 @@ if [[ "$(id -u)" == "0" ]]; then
 fi


-if [[ "$DISCOVERY" == "single-node" ]] && [[ ! -f "/var/lib/wazuh-indexer/.flag" ]]; then
+#if [[ "$DISCOVERY" == "single-node" ]] && [[ ! -f "/var/lib/wazuh-indexer/.flag" ]]; then
  # run securityadmin.sh for single node with CACERT, CERT and KEY parameter
-  nohup /securityadmin.sh &
-  touch "/var/lib/wazuh-indexer/.flag"
-fi
+#  nohup /securityadmin.sh &
+#  touch "/var/lib/wazuh-indexer/.flag"
+#fi

 run_as_other_user_if_needed /usr/share/wazuh-indexer/bin/opensearch <<<"$KEYSTORE_PASSWORD"
@@ -4,12 +4,12 @@ path.data: /var/lib/wazuh-indexer
 path.logs: /var/log/wazuh-indexer
 discovery.type: single-node
 compatibility.override_main_response_version: true
-plugins.security.ssl.http.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/certs/indexer.pem
-plugins.security.ssl.http.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/certs/indexer-key.pem
-plugins.security.ssl.http.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/certs/root-ca.pem
-plugins.security.ssl.transport.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/certs/indexer.pem
-plugins.security.ssl.transport.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/certs/indexer-key.pem
-plugins.security.ssl.transport.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/certs/root-ca.pem
+plugins.security.ssl.http.pemcert_filepath: /usr/share/wazuh-indexer/certs/indexer.pem
+plugins.security.ssl.http.pemkey_filepath: /usr/share/wazuh-indexer/certs/indexer-key.pem
+plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
+plugins.security.ssl.transport.pemcert_filepath: /usr/share/wazuh-indexer/certs/indexer.pem
+plugins.security.ssl.transport.pemkey_filepath: /usr/share/wazuh-indexer/certs/indexer-key.pem
+plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
 plugins.security.ssl.http.enabled: true
 plugins.security.ssl.transport.enforce_hostname_verification: false
 plugins.security.ssl.transport.resolve_hostname: false
@@ -1,3 +1,3 @@
 # Wazuh Docker Copyright (C) 2017, Wazuh Inc. (License GPLv2)
 sleep 30
-bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/ -nhnv -cacert  $CACERT -cert $CERT -key $KEY -p 9300 -icl
+bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/opensearch-security/ -nhnv -cacert  $CACERT -cert $CERT -key $KEY -p 9200 -icl
@@ -5,7 +5,7 @@ RUN rm /bin/sh && ln -s /bin/bash /bin/sh

 ARG WAZUH_VERSION
 ARG WAZUH_TAG_REVISION
-ARG TEMPLATE_VERSION=4.3
+ARG TEMPLATE_VERSION=4.6
 ARG FILEBEAT_CHANNEL=filebeat-oss
 ARG FILEBEAT_VERSION=7.10.2
 ARG WAZUH_FILEBEAT_MODULE="wazuh-filebeat-0.2.tar.gz"
@@ -1,13 +1,29 @@
-## Variables
-WAZUH_IMAGE_VERSION=$(echo $WAZUH_VERSION | sed -e 's/\.//g')
-WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g')
-## If wazuh manager exists in apt dev repository, change variables, if not exit 1
-if [ "$WAZUH_IMAGE_VERSION" -le "$WAZUH_CURRENT_VERSION" ]; then
-  APT_KEY=https://packages.wazuh.com/key/GPG-KEY-WAZUH
-  REPOSITORY="deb https://packages.wazuh.com/4.x/apt/ stable main"
-else
+## variables
+APT_KEY=https://packages.wazuh.com/key/GPG-KEY-WAZUH
+REPOSITORY="deb https://packages.wazuh.com/4.x/apt/ stable main"
+WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2-)
+MAJOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f1)
+MID_BUILD=$(echo $WAZUH_VERSION | cut -d. -f2)
+MINOR_BUILD=$(echo $WAZUH_VERSION | cut -d. -f3)
+MAJOR_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f1)
+MID_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f2)
+MINOR_CURRENT=$(echo $WAZUH_CURRENT_VERSION | cut -d. -f3)
+
+## check version to use the correct repository
+if [ "$MAJOR_BUILD" -gt "$MAJOR_CURRENT" ]; then
  APT_KEY=https://packages-dev.wazuh.com/key/GPG-KEY-WAZUH
  REPOSITORY="deb https://packages-dev.wazuh.com/pre-release/apt/ unstable main"
+elif [ "$MAJOR_BUILD" -eq "$MAJOR_CURRENT" ]; then
+  if [ "$MID_BUILD" -gt "$MID_CURRENT" ]; then
+    APT_KEY=https://packages-dev.wazuh.com/key/GPG-KEY-WAZUH
+    REPOSITORY="deb https://packages-dev.wazuh.com/pre-release/apt/ unstable main"
+  elif [ "$MID_BUILD" -eq "$MID_CURRENT" ]; then
+    if [ "$MINOR_BUILD" -gt "$MINOR_CURRENT" ]; then
+      APT_KEY=https://packages-dev.wazuh.com/key/GPG-KEY-WAZUH
+      REPOSITORY="deb https://packages-dev.wazuh.com/pre-release/apt/ unstable main"
+    fi
+  fi
 fi
+
 apt-key adv --fetch-keys ${APT_KEY}
 echo ${REPOSITORY} | tee -a /etc/apt/sources.list.d/wazuh.list
@@ -8,8 +8,8 @@
 ## Variables
 CERT_TOOL=wazuh-certs-tool.sh
 PASSWORD_TOOL=wazuh-passwords-tool.sh
-PACKAGES_URL=https://packages.wazuh.com/4.3/
-PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.3/
+PACKAGES_URL=https://packages.wazuh.com/4.6/
+PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.6/

 ## Check if the cert tool exists in S3 buckets
 CERT_TOOL_PACKAGES=$(curl --silent -I $PACKAGES_URL$CERT_TOOL | grep -E "^HTTP" | awk  '{print $2}')
@@ -17,13 +17,13 @@ CERT_TOOL_PACKAGES_DEV=$(curl --silent -I $PACKAGES_DEV_URL$CERT_TOOL | grep -E

 ## If cert tool exists in some bucket, download it, if not exit 1
 if [ "$CERT_TOOL_PACKAGES" = "200" ]; then
-  curl -o $CERT_TOOL $PACKAGES_URL$CERT_TOOL
-  echo "Cert tool exists in Packages bucket"
+  curl -o $CERT_TOOL $PACKAGES_URL$CERT_TOOL -s
+  echo "The tool to create the certificates exists in the in Packages bucket"
 elif [ "$CERT_TOOL_PACKAGES_DEV" = "200" ]; then
-  curl -o $CERT_TOOL $PACKAGES_DEV_URL$CERT_TOOL
-  echo "Cert tool exists in Packages-dev bucket"
+  curl -o $CERT_TOOL $PACKAGES_DEV_URL$CERT_TOOL -s
+  echo "The tool to create the certificates exists in Packages-dev bucket"
 else
-  echo "Cert tool does not exist in any bucket"
+  echo "The tool to create the certificates does not exist in any bucket"
  echo "ERROR: certificates were not created"
  exit 1
 fi
@@ -41,9 +41,9 @@ source /$CERT_TOOL -A
 nodes_server=$( cert_parseYaml /config.yml | grep nodes_server__name | sed 's/nodes_server__name=//' )
 node_names=($nodes_server)

-echo "Moving created certificates to destination directory"
+echo "Moving created certificates to the destination directory"
 cp /wazuh-certificates/* /certificates/
-echo "changing certificate permissions"
+echo "Changing certificate permissions"
 chmod -R 500 /certificates
 chmod -R 400 /certificates/*
 echo "Setting UID indexer and dashboard"
@@ -54,8 +54,8 @@ cp /certificates/root-ca.key /certificates/root-ca-manager.key
 chown 101:101 /certificates/root-ca-manager.pem
 chown 101:101 /certificates/root-ca-manager.key

-for i in ${node_names[@]}; 
-do 
+for i in ${node_names[@]};
+do
  chown 101:101 "/certificates/${i}.pem"
  chown 101:101 "/certificates/${i}-key.pem"
 done
@@ -1,6 +1,6 @@
 # Opendistro data migration to Wazuh indexer on docker.
 This procedure explains how to migrate Opendistro data from Opendistro to Wazuh indexer in docker production deployments.
-The example is migrating from v4.2 to v4.3.
+The example is migrating from v4.2 to v4.4.

 ## Procedure
 Assuming that you have a v4.2 production deployment, perform the following steps.
@@ -350,9 +350,9 @@ docker container run --rm -it \
           alpine ash -c "cd /from ; cp -avp . /to"
 ```

-**7. Start the 4.3 environment.**
+**7. Start the 4.4 environment.**
 ```
-git checkout 4.3
+git checkout 4.4
 cd multi-node
 docker-compose -f generate-indexer-certs.yml run --rm generator
 docker-compose up -d
@@ -21,4 +21,4 @@ nodes:
  # Wazuh dashboard node
  dashboard:
    - name: wazuh.dashboard
-      ip: wazuh.dashboard
+      ip: wazuh.dashboard
@@ -108,15 +108,16 @@
      <os>xenial</os>
      <os>bionic</os>
      <os>focal</os>
+      <os>jammy</os>
      <update_interval>1h</update_interval>
    </provider>

    <!-- Debian OS vulnerabilities -->
    <provider name="debian">
      <enabled>no</enabled>
-      <os>stretch</os>
      <os>buster</os>
      <os>bullseye</os>
+      <os>bookworm</os>
      <update_interval>1h</update_interval>
    </provider>

@@ -127,6 +128,7 @@
      <os>6</os>
      <os>7</os>
      <os>8</os>
+      <os>9</os>
      <update_interval>1h</update_interval>
    </provider>

@@ -138,6 +140,18 @@
      <update_interval>1h</update_interval>
    </provider>

+    <!-- SUSE Linux Enterprise OS vulnerabilities -->
+    <provider name="suse">
+      <enabled>no</enabled>
+      <os>11-server</os>
+      <os>11-desktop</os>
+      <os>12-server</os>
+      <os>12-desktop</os>
+      <os>15-server</os>
+      <os>15-desktop</os>
+      <update_interval>1h</update_interval>
+    </provider>
+
    <!-- Arch OS vulnerabilities -->
    <provider name="arch">
      <enabled>no</enabled>
@@ -150,10 +164,17 @@
      <update_interval>1h</update_interval>
    </provider>

+    <!-- Alma Linux OS vulnerabilities -->
+    <provider name="almalinux">
+      <enabled>no</enabled>
+      <os>8</os>
+      <os>9</os>
+      <update_interval>1h</update_interval>
+    </provider>
+
    <!-- Aggregate vulnerabilities -->
    <provider name="nvd">
      <enabled>yes</enabled>
-      <update_from_year>2010</update_from_year>
      <update_interval>1h</update_interval>
    </provider>

@@ -354,4 +375,4 @@
    <location>/var/log/dpkg.log</location>
  </localfile>

-</ossec_config>
+</ossec_config>
@@ -108,15 +108,16 @@
      <os>xenial</os>
      <os>bionic</os>
      <os>focal</os>
+      <os>jammy</os>
      <update_interval>1h</update_interval>
    </provider>

    <!-- Debian OS vulnerabilities -->
    <provider name="debian">
      <enabled>no</enabled>
-      <os>stretch</os>
      <os>buster</os>
      <os>bullseye</os>
+      <os>bookworm</os>
      <update_interval>1h</update_interval>
    </provider>

@@ -127,6 +128,7 @@
      <os>6</os>
      <os>7</os>
      <os>8</os>
+      <os>9</os>
      <update_interval>1h</update_interval>
    </provider>

@@ -138,12 +140,32 @@
      <update_interval>1h</update_interval>
    </provider>

+    <!-- SUSE Linux Enterprise OS vulnerabilities -->
+    <provider name="suse">
+      <enabled>no</enabled>
+      <os>11-server</os>
+      <os>11-desktop</os>
+      <os>12-server</os>
+      <os>12-desktop</os>
+      <os>15-server</os>
+      <os>15-desktop</os>
+      <update_interval>1h</update_interval>
+    </provider>
+
    <!-- Arch OS vulnerabilities -->
    <provider name="arch">
      <enabled>no</enabled>
      <update_interval>1h</update_interval>
    </provider>

+    <!-- Alma Linux OS vulnerabilities -->
+    <provider name="almalinux">
+      <enabled>no</enabled>
+      <os>8</os>
+      <os>9</os>
+      <update_interval>1h</update_interval>
+    </provider>
+
    <!-- Windows OS vulnerabilities -->
    <provider name="msu">
      <enabled>yes</enabled>
@@ -153,7 +175,6 @@
    <!-- Aggregate vulnerabilities -->
    <provider name="nvd">
      <enabled>yes</enabled>
-      <update_from_year>2010</update_from_year>
      <update_interval>1h</update_interval>
    </provider>

@@ -354,4 +375,4 @@
    <location>/var/log/dpkg.log</location>
  </localfile>

-</ossec_config>
+</ossec_config>
@@ -3,9 +3,16 @@ version: '3.7'

 services:
  wazuh.master:
-    image: wazuh/wazuh-manager:4.3.10
+    image: wazuh/wazuh-manager:4.6.0
    hostname: wazuh.master
    restart: always
+    ulimits:
+      memlock:
+        soft: -1
+        hard: -1
+      nofile:
+        soft: 655360
+        hard: 655360
    ports:
      - "1515:1515"
      - "514:514/udp"
@@ -38,9 +45,16 @@ services:
      - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf

  wazuh.worker:
-    image: wazuh/wazuh-manager:4.3.10
+    image: wazuh/wazuh-manager:4.6.0
    hostname: wazuh.worker
    restart: always
+    ulimits:
+      memlock:
+        soft: -1
+        hard: -1
+      nofile:
+        soft: 655360
+        hard: 655360
    environment:
      - INDEXER_URL=https://wazuh1.indexer:9200
      - INDEXER_USERNAME=admin
@@ -67,7 +81,7 @@ services:
      - ./config/wazuh_cluster/wazuh_worker.conf:/wazuh-config-mount/etc/ossec.conf

  wazuh1.indexer:
-    image: wazuh/wazuh-indexer:4.3.10
+    image: wazuh/wazuh-indexer:4.6.0
    hostname: wazuh1.indexer
    restart: always
    ports:
@@ -84,16 +98,16 @@ services:
        hard: 65536
    volumes:
      - wazuh-indexer-data-1:/var/lib/wazuh-indexer
-      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
-      - ./config/wazuh_indexer_ssl_certs/wazuh1.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/wazuh1.indexer.key
-      - ./config/wazuh_indexer_ssl_certs/wazuh1.indexer.pem:/usr/share/wazuh-indexer/config/certs/wazuh1.indexer.pem
-      - ./config/wazuh_indexer_ssl_certs/admin.pem:/usr/share/wazuh-indexer/config/certs/admin.pem
-      - ./config/wazuh_indexer_ssl_certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem
-      - ./config/wazuh_indexer/wazuh1.indexer.yml:/usr/share/wazuh-indexer/config/opensearch.yml
-      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/internal_users.yml
+      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/certs/root-ca.pem
+      - ./config/wazuh_indexer_ssl_certs/wazuh1.indexer-key.pem:/usr/share/wazuh-indexer/certs/wazuh1.indexer.key
+      - ./config/wazuh_indexer_ssl_certs/wazuh1.indexer.pem:/usr/share/wazuh-indexer/certs/wazuh1.indexer.pem
+      - ./config/wazuh_indexer_ssl_certs/admin.pem:/usr/share/wazuh-indexer/certs/admin.pem
+      - ./config/wazuh_indexer_ssl_certs/admin-key.pem:/usr/share/wazuh-indexer/certs/admin-key.pem
+      - ./config/wazuh_indexer/wazuh1.indexer.yml:/usr/share/wazuh-indexer/opensearch.yml
+      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml

  wazuh2.indexer:
-    image: wazuh/wazuh-indexer:4.3.10
+    image: wazuh/wazuh-indexer:4.6.0
    hostname: wazuh2.indexer
    restart: always
    environment:
@@ -108,14 +122,14 @@ services:
        hard: 65536
    volumes:
      - wazuh-indexer-data-2:/var/lib/wazuh-indexer
-      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
-      - ./config/wazuh_indexer_ssl_certs/wazuh2.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/wazuh2.indexer.key
-      - ./config/wazuh_indexer_ssl_certs/wazuh2.indexer.pem:/usr/share/wazuh-indexer/config/certs/wazuh2.indexer.pem
-      - ./config/wazuh_indexer/wazuh2.indexer.yml:/usr/share/wazuh-indexer/config/opensearch.yml
-      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/internal_users.yml
+      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/certs/root-ca.pem
+      - ./config/wazuh_indexer_ssl_certs/wazuh2.indexer-key.pem:/usr/share/wazuh-indexer/certs/wazuh2.indexer.key
+      - ./config/wazuh_indexer_ssl_certs/wazuh2.indexer.pem:/usr/share/wazuh-indexer/certs/wazuh2.indexer.pem
+      - ./config/wazuh_indexer/wazuh2.indexer.yml:/usr/share/wazuh-indexer/opensearch.yml
+      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml

  wazuh3.indexer:
-    image: wazuh/wazuh-indexer:4.3.10
+    image: wazuh/wazuh-indexer:4.6.0
    hostname: wazuh3.indexer
    restart: always
    environment:
@@ -130,14 +144,14 @@ services:
        hard: 65536
    volumes:
      - wazuh-indexer-data-3:/var/lib/wazuh-indexer
-      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
-      - ./config/wazuh_indexer_ssl_certs/wazuh3.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/wazuh3.indexer.key
-      - ./config/wazuh_indexer_ssl_certs/wazuh3.indexer.pem:/usr/share/wazuh-indexer/config/certs/wazuh3.indexer.pem
-      - ./config/wazuh_indexer/wazuh3.indexer.yml:/usr/share/wazuh-indexer/config/opensearch.yml
-      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/internal_users.yml
+      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/certs/root-ca.pem
+      - ./config/wazuh_indexer_ssl_certs/wazuh3.indexer-key.pem:/usr/share/wazuh-indexer/certs/wazuh3.indexer.key
+      - ./config/wazuh_indexer_ssl_certs/wazuh3.indexer.pem:/usr/share/wazuh-indexer/certs/wazuh3.indexer.pem
+      - ./config/wazuh_indexer/wazuh3.indexer.yml:/usr/share/wazuh-indexer/opensearch.yml
+      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml

  wazuh.dashboard:
-    image: wazuh/wazuh-dashboard:4.3.10
+    image: wazuh/wazuh-dashboard:4.6.0
    hostname: wazuh.dashboard
    restart: always
    ports:
@@ -147,6 +161,8 @@ services:
      - WAZUH_API_URL="https://wazuh.master"
      - API_USERNAME=wazuh-wui
      - API_PASSWORD=MyS3cr37P450r.*-
+      - DASHBOARD_USERNAME=kibanaserver
+      - DASHBOARD_PASSWORD=kibanaserver
    volumes:
      - ./config/wazuh_indexer_ssl_certs/wazuh.dashboard.pem:/usr/share/wazuh-dashboard/certs/wazuh-dashboard.pem
      - ./config/wazuh_indexer_ssl_certs/wazuh.dashboard-key.pem:/usr/share/wazuh-dashboard/certs/wazuh-dashboard-key.pem
@@ -13,4 +13,4 @@ nodes:
  # Wazuh dashboard node
  dashboard:
    - name: wazuh.dashboard
-      ip: wazuh.dashboard
+      ip: wazuh.dashboard
@@ -108,15 +108,16 @@
      <os>xenial</os>
      <os>bionic</os>
      <os>focal</os>
+      <os>jammy</os>
      <update_interval>1h</update_interval>
    </provider>

    <!-- Debian OS vulnerabilities -->
    <provider name="debian">
      <enabled>no</enabled>
-      <os>stretch</os>
      <os>buster</os>
      <os>bullseye</os>
+      <os>bookworm</os>
      <update_interval>1h</update_interval>
    </provider>

@@ -127,6 +128,7 @@
      <os>6</os>
      <os>7</os>
      <os>8</os>
+      <os>9</os>
      <update_interval>1h</update_interval>
    </provider>

@@ -138,12 +140,32 @@
      <update_interval>1h</update_interval>
    </provider>

+    <!-- SUSE Linux Enterprise OS vulnerabilities -->
+    <provider name="suse">
+      <enabled>no</enabled>
+      <os>11-server</os>
+      <os>11-desktop</os>
+      <os>12-server</os>
+      <os>12-desktop</os>
+      <os>15-server</os>
+      <os>15-desktop</os>
+      <update_interval>1h</update_interval>
+    </provider>
+
    <!-- Arch OS vulnerabilities -->
    <provider name="arch">
      <enabled>no</enabled>
      <update_interval>1h</update_interval>
    </provider>

+    <!-- Alma Linux OS vulnerabilities -->
+    <provider name="almalinux">
+      <enabled>no</enabled>
+      <os>8</os>
+      <os>9</os>
+      <update_interval>1h</update_interval>
+    </provider>
+
    <!-- Windows OS vulnerabilities -->
    <provider name="msu">
      <enabled>yes</enabled>
@@ -153,7 +175,6 @@
    <!-- Aggregate vulnerabilities -->
    <provider name="nvd">
      <enabled>yes</enabled>
-      <update_from_year>2010</update_from_year>
      <update_interval>1h</update_interval>
    </provider>

@@ -331,11 +352,11 @@
    <name>wazuh</name>
    <node_name>node01</node_name>
    <node_type>master</node_type>
-    <key></key>
+    <key>aa093264ef885029653eea20dfcf51ae</key>
    <port>1516</port>
    <bind_addr>0.0.0.0</bind_addr>
    <nodes>
-        <node>NODE_IP</node>
+        <node>wazuh.manager</node>
    </nodes>
    <hidden>no</hidden>
    <disabled>yes</disabled>
@@ -3,13 +3,15 @@ node.name: "wazuh.indexer"
 path.data: /var/lib/wazuh-indexer
 path.logs: /var/log/wazuh-indexer
 discovery.type: single-node
+http.port: 9200-9299
+transport.tcp.port: 9300-9399
 compatibility.override_main_response_version: true
-plugins.security.ssl.http.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh.indexer.pem
-plugins.security.ssl.http.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh.indexer.key
-plugins.security.ssl.http.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/certs/root-ca.pem
-plugins.security.ssl.transport.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh.indexer.pem
-plugins.security.ssl.transport.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh.indexer.key
-plugins.security.ssl.transport.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/certs/root-ca.pem
+plugins.security.ssl.http.pemcert_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.pem
+plugins.security.ssl.http.pemkey_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.key
+plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
+plugins.security.ssl.transport.pemcert_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.pem
+plugins.security.ssl.transport.pemkey_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.key
+plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
 plugins.security.ssl.http.enabled: true
 plugins.security.ssl.transport.enforce_hostname_verification: false
 plugins.security.ssl.transport.resolve_hostname: false
@@ -3,9 +3,16 @@ version: '3.7'

 services:
  wazuh.manager:
-    image: wazuh/wazuh-manager:4.3.10
+    image: wazuh/wazuh-manager:4.6.0
    hostname: wazuh.manager
    restart: always
+    ulimits:
+      memlock:
+        soft: -1
+        hard: -1
+      nofile:
+        soft: 655360
+        hard: 655360
    ports:
      - "1514:1514"
      - "1515:1515"
@@ -39,7 +46,7 @@ services:
      - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf

  wazuh.indexer:
-    image: wazuh/wazuh-indexer:4.3.10
+    image: wazuh/wazuh-indexer:4.6.0
    hostname: wazuh.indexer
    restart: always
    ports:
@@ -55,16 +62,16 @@ services:
        hard: 65536
    volumes:
      - wazuh-indexer-data:/var/lib/wazuh-indexer
-      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
-      - ./config/wazuh_indexer_ssl_certs/wazuh.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/wazuh.indexer.key
-      - ./config/wazuh_indexer_ssl_certs/wazuh.indexer.pem:/usr/share/wazuh-indexer/config/certs/wazuh.indexer.pem
-      - ./config/wazuh_indexer_ssl_certs/admin.pem:/usr/share/wazuh-indexer/config/certs/admin.pem
-      - ./config/wazuh_indexer_ssl_certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem
-      - ./config/wazuh_indexer/wazuh.indexer.yml:/usr/share/wazuh-indexer/config/opensearch.yml
-      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/internal_users.yml
+      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/certs/root-ca.pem
+      - ./config/wazuh_indexer_ssl_certs/wazuh.indexer-key.pem:/usr/share/wazuh-indexer/certs/wazuh.indexer.key
+      - ./config/wazuh_indexer_ssl_certs/wazuh.indexer.pem:/usr/share/wazuh-indexer/certs/wazuh.indexer.pem
+      - ./config/wazuh_indexer_ssl_certs/admin.pem:/usr/share/wazuh-indexer/certs/admin.pem
+      - ./config/wazuh_indexer_ssl_certs/admin-key.pem:/usr/share/wazuh-indexer/certs/admin-key.pem
+      - ./config/wazuh_indexer/wazuh.indexer.yml:/usr/share/wazuh-indexer/opensearch.yml
+      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml

  wazuh.dashboard:
-    image: wazuh/wazuh-dashboard:4.3.10
+    image: wazuh/wazuh-dashboard:4.6.0
    hostname: wazuh.dashboard
    restart: always
    ports:
@@ -73,6 +80,8 @@ services:
      - INDEXER_USERNAME=admin
      - INDEXER_PASSWORD=SecretPassword
      - WAZUH_API_URL=https://wazuh.manager
+      - DASHBOARD_USERNAME=kibanaserver
+      - DASHBOARD_PASSWORD=kibanaserver
      - API_USERNAME=wazuh-wui
      - API_PASSWORD=MyS3cr37P450r.*-
    volumes:
@@ -7,4 +7,4 @@ services:
    hostname: wazuh-certs-generator
    volumes:
      - ./config/wazuh_indexer_ssl_certs/:/certificates/
-      - ./config/certs.yml:/config/certs.yml
+      - ./config/certs.yml:/config/certs.yml
Author	SHA1	Message	Date
Gonzalo Acuña	b377a0f6eb	Merge pull request #966 from wazuh/18542-vdt-bookworm-support Add Debian Bookworm to VDT default configuration	2023-08-25 13:17:17 -03:00
Mateo Cervilla	44e9bebed0	Add Debian Bookworm VDT support	2023-08-25 12:24:01 -03:00
Gonzalo Acuña	760fc8ccbf	Merge pull request #961 from wazuh/merge-4.5.2-into-4.6.0 Merge 4.5.2 into 4.6.0	2023-08-24 13:10:01 -03:00
vcerenu	44303d3701	resolving conflicts	2023-08-24 12:45:02 -03:00
Gonzalo Acuña	c0d97893a4	Merge pull request #960 from wazuh/merge-4.5.1-into-4.5.2 Merge 4.5.1 into 4.5.2	2023-08-24 12:31:06 -03:00
vcerenu	0826f2c176	change revision	2023-08-24 12:23:15 -03:00
vcerenu	d531b8dd72	Resolving conflicts	2023-08-24 12:06:35 -03:00
Gonzalo Acuña	41267d4ddf	Merge pull request #946 from wazuh/944-bump-revision-2 Revision update	2023-08-17 12:20:42 -03:00
Gonzalo Acuña	67f34fb8fe	Revision update	2023-08-17 12:17:12 -03:00
Gonzalo Acuña	865f7625f4	Merge pull request #945 from wazuh/944-bump-revision Revision update	2023-08-17 09:02:13 -03:00
Gonzalo Acuña	c56952eaa0	Revision update	2023-08-17 08:56:16 -03:00
Gonzalo Acuña	cb7d8785c6	Merge pull request #930 from wazuh/926-update-the-vulnerability-detector-default-configuration-block-with-missing-providers Update the vulnerability detector default configuration block with missing providers	2023-08-14 15:19:54 -03:00
vcerenu	f1001c2f25	add jammy version into VD	2023-08-11 15:45:26 -03:00
David Correa Rodríguez	6c91bac96d	Merge pull request #936 from wazuh/merge-4.5.2-into-4.6.0 Merge `4.5.2` into `4.6.0`	2023-08-11 12:39:39 +02:00
David Correa Rodríguez	216b5a6818	Merge pull request #935 from wazuh/merge-4.5.1-into-4.5.2 Merge `4.5.1` into `4.5.2`	2023-08-11 12:25:04 +02:00
David Correa Rodríguez	e19fa14013	Merge pull request #934 from wazuh/merge-4.5-into-4.5.1 Merge `4.5` into `4.5.1`	2023-08-11 11:58:49 +02:00
vcerenu	57c7eaa5af	remove stretch and add rhel 9 into VD	2023-08-10 16:46:21 -03:00
vcerenu	fbe073612c	add suse vd options	2023-08-10 09:19:59 -03:00
Gonzalo Acuña	1dec665a97	Merge pull request #925 from wazuh/10774-alma-support Updating vulnerability detector default configuration with AlmaLinux support	2023-08-09 09:46:28 -03:00
pereyra-m	757e5dbf05	Updating ossec.conf file with the AlmaLinux support in the vulnerability detector section	2023-08-07 17:32:03 -03:00
Gonzalo Acuña	32b1d88e36	Merge pull request #919 from wazuh/917-fix-conditional-block-in-build-imagesh-script Fixed conditional block in images building	2023-08-03 10:02:24 -03:00
David Correa Rodríguez	94be842afc	Restored `IMAGE_VERSION` variable	2023-08-03 11:51:01 +02:00
David Correa Rodríguez	d20bbe247c	Fixed conditional block in images building	2023-08-03 11:45:56 +02:00
Gonzalo Acuña	e01d39e138	Merge pull request #915 from wazuh/911-typos-in-the-script Typos in the script in charge of create Wazuh indexer's certificates	2023-08-01 13:50:24 -03:00
vcerenu	1eeca6267b	fix typos in cert generator image	2023-08-01 13:07:04 -03:00
Gonzalo Acuña	d755ffbac8	Merge pull request #914 from wazuh/6282-add-notes-about Modify ulimit	2023-08-01 12:01:13 -03:00
vcerenu	221c3ccd24	add ulimit parameter to wazuh manager deploy	2023-07-31 13:19:13 -03:00
vcerenu	1ff589ccaf	add ulimit parameter to wazuh manager deploy	2023-07-31 13:16:15 -03:00
Victor Ereñú	d4c98491fc	Merge pull request #910 from wazuh/909-deprecate-update_from_year-to-use-nvd-api-20-feeds Delete update_from_year parameter	2023-07-26 13:55:52 -03:00
vcerenu	673c28b637	delete update_from_year parameter	2023-07-26 13:40:54 -03:00
Gonzalo Acuña	3953986652	Merge pull request #898 from wazuh/merge-4.5.2-into-4.6.0 Merge `4.5.2` into `4.6.0`	2023-07-21 08:27:24 -03:00
Gonzalo Acuña	f2dab81387	Merge branch '4.6.0' into merge-4.5.2-into-4.6.0	2023-07-21 08:15:57 -03:00
Gonzalo Acuña	da82008a75	Merge pull request #894 from wazuh/bump-4.5.2 Bump to 4.5.2	2023-07-19 08:55:24 -03:00
vcerenu	54975ab099	Bump to 4.5.2	2023-07-19 08:43:17 -03:00
Carlos Bordon	b27d991f0c	Merge pull request #886 from wazuh/merge-4.5.1-into-4.6.0 Merge 4.5.1 into 4.6.0	2023-07-11 12:04:34 -03:00
vcerenu	4d0aa57ed2	resolving merge conflicts	2023-07-11 11:49:32 -03:00
Carlos Bordon	1a75d4eb77	Merge pull request #885 from wazuh/merge-4.5.0-into-4.5.1 Merge 4.5.0 into 4.5.1	2023-07-11 11:34:52 -03:00
vcerenu	247555b1b6	resolving merge conflicts	2023-07-11 11:21:00 -03:00
Carlos Bordon	442d457933	Merge pull request #884 from wazuh/merge-4.4-into-4.5.0 Merge 4.4 into 4.5.0	2023-07-11 10:42:52 -03:00
vcerenu	0f65448718	resolving merge conflicts	2023-07-11 09:41:16 -03:00
Victor Ereñú	a9533264d6	Merge pull request #883 from wazuh/merge-4.4.5-into-4.4 Merge 4.4.5 into 4.4	2023-07-11 09:26:12 -03:00
Carlos Bordon	ce8dd29425	Merge pull request #879 from wazuh/4.4.5-bump-revision Bump revision	2023-07-10 09:00:24 -03:00
vcerenu	a433989865	bump revision	2023-07-10 08:42:14 -03:00
Gonzalo Acuña	ff1e5f991a	Merge pull request #878 from wazuh/bump-4.4.5 Bump to 4.4.5	2023-07-07 08:48:54 -03:00
Gonzalo Acuña	55ee49aff5	Bumped to 4.4.5	2023-07-07 08:39:57 -03:00
Gonzalo Acuña	75f92308a1	Merge pull request #877 from wazuh/merge-4.4.4-into-4.4 Merge `4.4.4` into `4.4`	2023-07-07 08:32:11 -03:00
Victor Ereñú	61c37a78de	Merge pull request #874 from wazuh/bump-4-5-1 Bump version 4.5.1	2023-06-26 14:07:42 -03:00
vcerenu	39208c513c	bump version 4.5.1	2023-06-26 13:35:29 -03:00
vcerenu	3650feeb0e	bump version 4.5.0	2023-06-26 09:40:14 -03:00
Victor Ereñú	f4f99f17b7	Merge pull request #872 from wazuh/bump-4-6 Bump 4.6 version	2023-06-23 12:36:30 -03:00
vcerenu	8e3b8aada8	bump 4.6 version	2023-06-23 10:33:35 -03:00
Gonzalo Acuña	7abaea9b4c	Merge pull request #866 from wazuh/merge-4.4.5-into-4.5 Merge `4.4.5` into `4.5`	2023-06-14 15:48:43 -03:00
Gonzalo Acuña	303b64c7ae	Merge branch '4.5' into merge-4.4.5-into-4.5	2023-06-14 15:16:14 -03:00
Gonzalo Acuña	2340db4079	Merge pull request #865 from wazuh/merge-4.4-into-4.4.5 Merge `4.4` into `4.4.5`	2023-06-14 14:50:59 -03:00
Gonzalo Acuña	9159eda943	Merge branch '4.4.5' into merge-4.4-into-4.4.5	2023-06-14 14:07:23 -03:00
Gonzalo Acuña	d278782134	Merge pull request #858 from wazuh/merge-4-4-4-to-4-4 Bump `4.4` to `4.4.4`	2023-06-13 15:58:51 -03:00
Gonzalo Acuña	77725b7eb2	Revision bump	2023-06-13 13:19:35 -03:00
Gonzalo Acuña	4e7c2cf72a	Revision bump	2023-06-12 09:38:35 -03:00
Gonzalo Acuña	41196a5529	Bump to 4.4.5	2023-06-05 11:44:32 -03:00
Gonzalo Acuña	8ce1f36f10	Revision update	2023-06-05 11:42:10 -03:00
Gonzalo Acuña	e2e95a5c57	Bump to 4.4.4	2023-06-05 11:38:58 -03:00
Raul Del Pozo Moreno	2058734154	Merge pull request #853 from wazuh/4.5-merge-4.4 Merge `4.4` into `4.5`	2023-05-29 16:34:48 +02:00
Raul Del Pozo Moreno	4e34f1f7b7	Merge remote-tracking branch 'origin/4.4' into 4.5-merge-4.4	2023-05-26 18:51:03 +02:00
Raul Del Pozo Moreno	b259665fc6	Merge pull request #851 from wazuh/bump-4.4.3 Bump `4.4` to `4.4.3`	2023-05-26 14:13:58 +02:00
Raul Del Pozo Moreno	820079f1d0	Bump to 4.4.3	2023-05-25 20:03:26 +02:00
Raul Del Pozo Moreno	9a9fac6243	Merge pull request #847 from wazuh/merge-4.4-4.5 Merge `4.4` into `4.5`	2023-05-18 22:38:07 +02:00
Raul Del Pozo Moreno	11d15670f4	Merge remote-tracking branch 'origin/4.4' into merge-4.4-4.5	2023-05-18 22:27:31 +02:00
Raul Del Pozo Moreno	e826236a28	Added missing config	2023-05-18 21:30:38 +02:00
vcerenu	137989ddd1	bump 4.3 into master	2023-05-18 21:26:28 +02:00
vcerenu	0d76a85ded	bump 4.3 into master	2023-05-18 21:26:08 +02:00
fcaffieri	e95455a12b	Add fix to avoid GLIBC crash, fix identation	2023-05-18 21:25:37 +02:00
fcaffieri	887293d474	Add fix to avoid GLIBC crash	2023-05-18 21:25:36 +02:00
fcaffieri	ae20f302c0	disable filebeat metrics	2023-05-18 21:25:36 +02:00
vcerenu	08314f9e2e	bump release 4.5.0	2023-05-18 21:25:07 +02:00
vcerenu	c6f1f31d57	bump release 4.5.0	2023-05-18 21:25:00 +02:00
vcerenu	312466704d	bump release 4.5.0	2023-05-18 21:25:00 +02:00
Gonzalo Acuña	d00fc0ccf6	Revision update	2023-05-18 21:24:16 +02:00
vcerenu	42ea26b3bd	bump 4.4.2 version	2023-05-18 21:24:15 +02:00
Jesse Roland	fe75f8fb4e	Add DASHBOARD_USERNAME and DASHBOARD_PASSWORD environment variables to the dashboard container. Resolves https://github.com/wazuh/wazuh-docker/issues/823	2023-05-18 21:23:36 +02:00
vcerenu	8b1ed497ab	change revision number	2023-05-18 21:23:35 +02:00
vcerenu	195b34c259	bump 4.3.11 version	2023-05-18 21:23:34 +02:00
vcerenu	08c9b95455	change revision	2023-05-18 21:22:46 +02:00
Gonzalo Acuña	028b5f6034	Revision update	2023-05-18 21:05:42 +02:00
vcerenu	cd7dc4c7cf	bump 4.4.2 version	2023-05-18 21:05:41 +02:00
Jesse Roland	40faad148d	Add DASHBOARD_USERNAME and DASHBOARD_PASSWORD environment variables to the dashboard container. Resolves https://github.com/wazuh/wazuh-docker/issues/823	2023-05-18 21:04:33 +02:00
vcerenu	02aaf45e9d	change revision number	2023-05-18 21:04:32 +02:00
vcerenu	cd9f211eb3	bump 4.3.11 version	2023-05-18 21:04:31 +02:00
vcerenu	20c8000fec	change revision	2023-05-18 21:02:52 +02:00
vcerenu	8ada4445b0	bump 4.4.1 version	2023-04-10 10:20:48 -03:00
Gonzalo Acuña	1c69a38bd8	Merge pull request #813 from wazuh/807-docker-update-from-4310-to-440 Disable cluster option	2023-04-05 14:52:28 -03:00
vcerenu	615d6df29c	disable cluster option	2023-04-05 13:55:24 -03:00
Gonzalo Acuña	949a465855	Merge pull request #811 from wazuh/revert-799-bump-4-4-1 Revert "Bump `4.4` to `4.4.1`"	2023-04-05 13:49:23 -03:00
Gonzalo Acuña	f7bbac5a08	Revert "Bump `4.4` to `4.4.1`"	2023-04-05 13:46:20 -03:00
Gonzalo Acuña	11820b01e9	Merge pull request #799 from wazuh/bump-4-4-1 Bump `4.4` to `4.4.1`	2023-03-31 11:02:25 -03:00
vcerenu	a8de452002	bump 4.4.1 version	2023-03-31 10:27:58 -03:00
Victor Ereñú	c76681b3b9	Merge pull request #794 from wazuh/modify-base-dashboard Change dashboard and indexer base repository	2023-03-28 17:09:15 -03:00
vcerenu	e25635cb25	change dashboard and indexer base repository	2023-03-28 16:59:49 -03:00
Gonzalo Acuña	304eedcb51	Merge pull request #793 from wazuh/bump_4-4 Change revision number	2023-03-28 10:03:41 -03:00
vcerenu	6123ab994c	change revision number	2023-03-28 09:07:24 -03:00
Gonzalo Acuña	2f58da59de	Merge pull request #776 from wazuh/change_password Update indexer password	2023-02-01 10:59:11 -03:00
vcerenu	3279931813	update docs count	2023-02-01 10:33:26 -03:00
vcerenu	b039567e1c	update indexer password	2023-02-01 10:02:35 -03:00
Gonzalo Acuña	3190c4246e	Merge pull request #766 from wazuh/765-change-wazuh-dashboard-and-indexer-base-path Modify base path	2022-12-27 08:11:21 -03:00
vcerenu	271f421cd4	modify base path	2022-12-26 11:12:16 -03:00
Alberto Rodríguez	910e28956b	Merge pull request #760 from wazuh/merge-4.4 Version check fix	2022-12-02 17:19:02 +01:00
vcerenu	dcf8bb8060	fix index alerts test	2022-12-02 12:42:01 -03:00
vcerenu	be9f3d1b90	fix index alerts test	2022-12-02 11:36:35 -03:00
vcerenu	91625f412c	change indexer and manager configuration for 4.4 version	2022-12-01 19:35:35 -03:00
vcerenu	4c7dcb2ebf	add revision into versions parameter	2022-12-01 13:32:43 -03:00
vcerenu	8febf33d58	add 4.4 version	2022-12-01 13:02:13 -03:00
Alberto Rodríguez	3d19774d7e	Merge pull request #758 from wazuh/merge-4.4 Merge 4.3 in 4.4 branch	2022-12-01 16:23:05 +01:00
vcerenu	e11e7a10b8	add 4.4 version	2022-12-01 11:58:21 -03:00
vcerenu	7f73635651	add 4.4 version	2022-11-30 15:35:16 -03:00
vcerenu	e9a0be25ce	resolving conflicts in 4.3 merge	2022-11-30 15:27:48 -03:00
José Fernández Aguilera	6c094d07a6	Merge pull request #719 from wazuh/4.4-add-double-quote Add Double Quote on password	2022-09-12 17:04:35 +02:00
vcerenu	b6959c8b15	doble quote for password	2022-09-09 15:29:07 -03:00
José Fernández Aguilera	b98d32d4ca	Merge pull request #691 from wazuh/1665-Fix-filebeat-crash-due-to-glibc-to4.4 Add fix to avoid GLIBC crash	2022-07-07 09:00:19 +02:00
fcaffieri	4c710e6c20	Add fix to avoid GLIBC crash, fix identation	2022-07-06 18:01:53 -03:00
fcaffieri	f97a719304	Add fix to avoid GLIBC crash	2022-07-06 17:35:20 -03:00
José Fernández Aguilera	bf534b4143	Merge pull request #687 from wazuh/1667-disable-filebeat-metrics-to4.4 Disable filebeat metrics	2022-07-04 16:02:24 +02:00
fcaffieri	a82cc9ec39	disable filebeat metrics	2022-07-04 09:18:11 -03:00
fcaffieri	8d9ad6152a	disable filebeat metrics	2022-07-01 17:45:23 -03:00
José Fernández Aguilera	5555c1dd06	Merge pull request #666 from wazuh/merge_4_4 Merge 4.3.3 into 4.4	2022-06-01 18:40:02 +02:00
vcerenu	0dd044de68	Merge 4.3.3 into 4.4	2022-06-01 12:29:05 -03:00
Alberto Rodríguez	5d88983066	Merge pull request #651 from wazuh/fix_whitelist_4_4 Fix whitelist in 4.4	2022-05-23 16:09:43 +02:00
vcerenu	95565df2f5	fix whitelist	2022-05-23 10:58:04 -03:00
Alberto Rodríguez	ed5c5d70ba	Merge pull request #649 from wazuh/master Merge master into 4.4	2022-05-23 14:21:52 +02:00
Alberto Rodríguez	97f5a6bf04	Merge pull request #648 from wazuh/merge_master Merge 4.3 into master	2022-05-23 14:15:22 +02:00
vcerenu	b21c3769d3	Merge 4.3 into master	2022-05-20 15:57:34 -03:00
Alberto Rodríguez	9cd399c2df	Merge pull request #598 from wazuh/4.2-merge_master Merge 4.2 into master	2022-03-28 16:58:01 +02:00
Gonzalo Acuña	3e54eeb62f	Merge branch 'master' into 4.2-merge_master	2022-03-28 11:34:55 -03:00
Alberto Rodríguez	a4be008028	Merge pull request #596 from wazuh/595-bump_426 Bump to 4.2.6	2022-03-28 15:49:25 +02:00
Gonzalo Acuña	85e62cfd0e	Bump to 4.2.6	2022-03-25 10:28:14 -03:00
Alberto R	84fe19e868	Bumped to 4.4.0	2021-11-24 17:01:09 +01:00