forked from wazuh/wazuh-docker
70 lines
2.4 KiB
Markdown
70 lines
2.4 KiB
Markdown
# Wazuh Docker Deployment
|
|
|
|
## Deploying Wazuh Docker in a Single-Node Configuration
|
|
|
|
This deployment uses the `single-node/docker-compose.yml` file, which defines a setup with one Wazuh Manager, one Wazuh Indexer, and one Wazuh Dashboard container. Follow these steps to deploy it:
|
|
|
|
1. Increase `vm.max_map_count` on each Docker host that will run a Wazuh Indexer container (Linux). This setting is crucial for Wazuh Indexer to operate correctly. This command requires root permissions:
|
|
|
|
```bash
|
|
sudo sysctl -w vm.max_map_count=262144
|
|
```
|
|
|
|
**Note:** This change is temporary and will revert upon reboot. To make it permanent, you'll need to edit the `/etc/sysctl.conf` file and add `vm.max_map_count=262144`, then apply with `sudo sysctl -p`.
|
|
|
|
2. Navigate to the `single-node` directory within your repository:
|
|
|
|
```bash
|
|
cd single-node
|
|
```
|
|
|
|
3. Download the certificate creation script and `config.yml` file:
|
|
|
|
```bash
|
|
curl -o wazuh-certs-tool.sh https://packages.wazuh.com/5.0/wazuh-certs-tool-5.1.0-1.sh
|
|
curl -o config.yml https://packages.wazuh.com/5.0/config-5.1.0-1.yml
|
|
```
|
|
|
|
4. Edit the config.yml file with the configuration of the Wazuh components to be deployed
|
|
|
|
```yaml
|
|
nodes:
|
|
# Wazuh indexer server nodes
|
|
indexer:
|
|
- name: wazuh.indexer
|
|
dns: "wazuh.indexer"
|
|
|
|
# Wazuh manager nodes
|
|
# Use node_type only with more than one Wazuh manager
|
|
manager:
|
|
- name: wazuh.manager
|
|
dns: "wazuh.manager"
|
|
|
|
# Wazuh dashboard node
|
|
dashboard:
|
|
- name: wazuh.dashboard
|
|
dns: "wazuh.dashboard"
|
|
```
|
|
|
|
5. Run the certificate creation script:
|
|
|
|
```bash
|
|
sudo bash ../tools/utils/deployment/certificates-conf.sh --cert --copy --priv
|
|
```
|
|
|
|
6. Start the Wazuh environment using `docker compose`:
|
|
|
|
* To run in the foreground (logs will be displayed in your current terminal; press `Ctrl+C` to stop):
|
|
|
|
```bash
|
|
docker compose up
|
|
```
|
|
|
|
* To run in the background (detached mode, allowing the containers to run independently of your terminal):
|
|
|
|
```bash
|
|
docker compose up -d
|
|
```
|
|
|
|
Please allow some time for the environment to initialize, especially on the first run. It can take approximately a minute or two (depending on your host's resources) as the Wazuh Indexer starts up and generates the necessary indexes and index patterns.
|