Compare commits

...

28 Commits

Author SHA1 Message Date
AlfonsoRBJ
a8e1661aa6 Bump version 3729 2018-12-21 11:46:06 +01:00
AlfonsoRBJ
c7abb4239f Update CHANGELOG.md 2018-12-21 11:45:12 +01:00
AlfonsoRBJ
68b4703f7a Update Elastic Stack to version 6.5.4 2018-12-21 11:43:39 +01:00
AlfonsoRBJ
2e66d5f3ee Merge pull request #82 from wazuh/Update-to-Elastic-6.5.4
Update Elastic Stack version to 6.5.4
2018-12-21 11:42:21 +01:00
AlfonsoRBJ
020047aa8f Update Elastic Stack version to 6.5.4 2018-12-21 11:40:19 +01:00
Jesus Linares
2a03d08a5b Update changelog 2018-12-20 11:39:23 -05:00
AlfonsoRBJ
40a74df00d Bump version 3728 2018-12-20 13:26:02 +01:00
AlfonsoRBJ
05fa996ffd Update CHANGELOG.md 2018-12-20 13:25:36 +01:00
AlfonsoRBJ
edd2e250e8 Update CHANGELOG.md 2018-12-20 13:24:48 +01:00
AlfonsoRBJ
5e3b25aa95 Merge pull request #81 from wazuh/Issue_68-AWS_error
Erasing temporary fix for AWS integration
2018-12-20 13:23:46 +01:00
AlfonsoRBJ
49663b71bb Update VERSION 2018-12-20 13:22:08 +01:00
AlfonsoRBJ
77f123460e Update CHANGELOG.md 2018-12-20 13:21:33 +01:00
AlfonsoRBJ
458bfcde09 Update CHANGELOG.md 2018-12-20 13:21:16 +01:00
AlfonsoRBJ
12bb0cba4a Merge pull request #80 from LuisGi93/3.7.2_6.5.3
entrypoint.sh updated so docker upgrade is posible
2018-12-20 13:19:09 +01:00
cadoming
608b25df4c erasing temporary fix for AWS integration 2018-12-20 12:02:14 +00:00
LuisGi93
7cce0d9c9e entrypoint.sh updated so docker upgrade is posible 2018-12-19 20:05:33 +01:00
AlfonsoRBJ
cd0d180c93 Update Wazuh version 3.7.2 2018-12-18 18:28:02 +01:00
AlfonsoRBJ
16335e1f70 Bump version 3726 2018-12-17 11:19:26 +01:00
AlfonsoRBJ
e3e81a4671 Update Wazuh-Docker to 3.7.1_6.5.3 2018-12-17 11:14:34 +01:00
Javier Castro
6fbae577dd Using etc folder as a mounting point (#73) 2018-11-26 15:56:36 +01:00
Jesus Linares
5b5c6200bb Update changelog and bump version 2018-11-23 12:23:16 -05:00
AlfonsoRBJ
63a85e84a8 Bump Version 3.7.0_6.5.0 3700 2018-11-23 18:17:55 +01:00
AlfonsoRBJ
bd162140a9 Update CHANGELOG.md 2018-11-23 17:55:16 +01:00
AlfonsoRBJ
b140600d25 Update Elastick Stack to 6.5.0 2018-11-23 11:33:12 +01:00
AlfonsoRBJ
f5037c392e Merge pull request #71 from jlruizmlg/patch-1
Update branch to apply the template
2018-11-23 10:34:14 +01:00
AlfonsoRBJ
9ef497f426 Merge pull request #72 from wazuh/3.7.0_6.4.3
Update master to 3.7.0 6.4.3
2018-11-23 10:27:14 +01:00
José Luis Ruiz
aa38747e7c Update branch to apply the template
This commit fixes the branch name where pull the template from Elastic.
2018-11-22 10:48:04 +01:00
AlfonsoRBJ
c4237ad894 ossec-init.conf must not be included
As soon as it is updated, this file will show the old version.
2018-11-16 10:13:01 +01:00
9 changed files with 45 additions and 33 deletions

View File

@@ -1,9 +1,30 @@
# Change Log # Change Log
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
## v3.x.x_6.x.x ## Wazuh Docker v3.7.2_6.5.4
## v3.7.0_6.4.3 ### Changed
- Update Elastic Stack version to 6.5.4. ([#82](https://github.com/wazuh/wazuh-docker/pull/82))
## Wazuh Docker v3.7.2_6.5.3
### Changed
- Erasing temporary fix for AWS integration. ([#81](https://github.com/wazuh/wazuh-docker/pull/81))
### Fixed
- Upgrading errors due to wrong files. ([#80](https://github.com/wazuh/wazuh-docker/pull/80))
## Wazuh Docker v3.7.0_6.5.0
### Changed
- Adapt to Elastic stack 6.5.0.
## Wazuh Docker v3.7.0_6.4.3
### Added ### Added
@@ -23,6 +44,6 @@ All notable changes to this project will be documented in this file.
- Fixed a bug that prevents the API from starting when the Wazuh manager was updated. Change in the files that are stored in the volume. ([#65](https://github.com/wazuh/wazuh-docker/pull/65)) - Fixed a bug that prevents the API from starting when the Wazuh manager was updated. Change in the files that are stored in the volume. ([#65](https://github.com/wazuh/wazuh-docker/pull/65))
- Fixed script reference ([#62](https://github.com/wazuh/wazuh-docker/pull/62/files)) - Fixed script reference ([#62](https://github.com/wazuh/wazuh-docker/pull/62/files))
## v3.6.1_6.4.3 ## Wazuh Docker v3.6.1_6.4.3
Wazuh-Docker starting point. Wazuh-Docker starting point.

View File

@@ -22,7 +22,7 @@ In addition, a docker-compose file is provided to launch the containers mentione
## Current release ## Current release
Containers are currently tested on Wazuh version 3.7.0 and Elastic Stack version 6.4.3. We will do our best to keep this repository updated to latest versions of both Wazuh and Elastic Stack. Containers are currently tested on Wazuh version 3.7.2 and Elastic Stack version 6.5.4. We will do our best to keep this repository updated to latest versions of both Wazuh and Elastic Stack.
## Directory structure ## Directory structure

View File

@@ -1,2 +1,2 @@
WAZUH-DOCKER_VERSION="3.7.0_6.4.3" WAZUH-DOCKER_VERSION="3.7.2_6.5.4"
REVISION="3700" REVISION="3729"

View File

@@ -3,7 +3,7 @@ version: '2'
services: services:
wazuh: wazuh:
image: wazuh/wazuh:3.7.0_6.4.3 image: wazuh/wazuh:3.7.2_6.5.4
hostname: wazuh-manager hostname: wazuh-manager
restart: always restart: always
ports: ports:
@@ -23,7 +23,7 @@ services:
depends_on: depends_on:
- logstash - logstash
logstash: logstash:
image: wazuh/wazuh-logstash:3.7.0_6.4.3 image: wazuh/wazuh-logstash:3.7.2_6.5.4
hostname: logstash hostname: logstash
restart: always restart: always
# volumes: # volumes:
@@ -39,7 +39,7 @@ services:
environment: environment:
- LS_HEAP_SIZE=2048m - LS_HEAP_SIZE=2048m
elasticsearch: elasticsearch:
image: docker.elastic.co/elasticsearch/elasticsearch:6.4.3 image: docker.elastic.co/elasticsearch/elasticsearch:6.5.4
hostname: elasticsearch hostname: elasticsearch
restart: always restart: always
ports: ports:
@@ -61,7 +61,7 @@ services:
networks: networks:
- docker_elk - docker_elk
kibana: kibana:
image: wazuh/wazuh-kibana:3.7.0_6.4.3 image: wazuh/wazuh-kibana:3.7.2_6.5.4
hostname: kibana hostname: kibana
restart: always restart: always
# ports: # ports:
@@ -76,7 +76,7 @@ services:
- elasticsearch:elasticsearch - elasticsearch:elasticsearch
- wazuh:wazuh - wazuh:wazuh
nginx: nginx:
image: wazuh/wazuh-nginx:3.7.0_6.4.3 image: wazuh/wazuh-nginx:3.7.2_6.5.4
hostname: nginx hostname: nginx
restart: always restart: always
environment: environment:

View File

@@ -1,11 +1,11 @@
# Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2) # Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2)
FROM docker.elastic.co/kibana/kibana:6.4.3 FROM docker.elastic.co/kibana/kibana:6.5.4
ARG WAZUH_APP_VERSION=3.7.0_6.4.3 ARG WAZUH_APP_VERSION=3.7.2_6.5.4
USER root USER root
ADD https://packages.wazuh.com/wazuhapp/wazuhapp-${WAZUH_APP_VERSION}.zip /tmp ADD https://packages.wazuh.com/wazuhapp/wazuhapp-${WAZUH_APP_VERSION}.zip /tmp
ADD https://raw.githubusercontent.com/wazuh/wazuh/3.6/extensions/elasticsearch/wazuh-elastic6-template-alerts.json /usr/share/kibana/config ADD https://raw.githubusercontent.com/wazuh/wazuh/3.7/extensions/elasticsearch/wazuh-elastic6-template-alerts.json /usr/share/kibana/config
RUN NODE_OPTIONS="--max-old-space-size=3072" /usr/share/kibana/bin/kibana-plugin install file:///tmp/wazuhapp-${WAZUH_APP_VERSION}.zip &&\ RUN NODE_OPTIONS="--max-old-space-size=3072" /usr/share/kibana/bin/kibana-plugin install file:///tmp/wazuhapp-${WAZUH_APP_VERSION}.zip &&\
chown -R kibana:kibana /usr/share/kibana &&\ chown -R kibana:kibana /usr/share/kibana &&\

View File

@@ -1,5 +1,5 @@
# Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2) # Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2)
FROM docker.elastic.co/logstash/logstash:6.4.3 FROM docker.elastic.co/logstash/logstash:6.5.4
RUN rm -f /usr/share/logstash/pipeline/logstash.conf RUN rm -f /usr/share/logstash/pipeline/logstash.conf

View File

@@ -1,7 +1,7 @@
# Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2) # Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2)
FROM phusion/baseimage:latest FROM phusion/baseimage:latest
ARG FILEBEAT_VERSION=6.4.3 ARG FILEBEAT_VERSION=6.5.4
ARG WAZUH_VERSION=3.7.0-1 ARG WAZUH_VERSION=3.7.2-1
# Updating image # Updating image
RUN apt-get update && apt-get upgrade -y -o Dpkg::Options::="--force-confold" RUN apt-get update && apt-get upgrade -y -o Dpkg::Options::="--force-confold"
@@ -76,11 +76,6 @@ RUN mkdir /etc/service/filebeat
COPY config/filebeat.runit.service /etc/service/filebeat/run COPY config/filebeat.runit.service /etc/service/filebeat/run
RUN chmod +x /etc/service/filebeat/run RUN chmod +x /etc/service/filebeat/run
# Temporary fix for AWS integration
RUN sed -i 's/.*with open*/#wiht open/' /var/ossec/wodles/aws/aws-s3
RUN sed -i 's/.*max_queue_buffer = int(kernel_param.read().strip())*/#max_queue_buffer/' /var/ossec/wodles/aws/aws-s3
RUN sed -i '784imax_queue_buffer = 0' /var/ossec/wodles/aws/aws-s3
RUN sed -i '784s/^/ /' /var/ossec/wodles/aws/aws-s3
# Run all services # Run all services
ENTRYPOINT ["/entrypoint.sh"] ENTRYPOINT ["/entrypoint.sh"]

View File

@@ -1,16 +1,6 @@
i=0 i=0
DATA_DIRS[((i++))]="api/configuration" DATA_DIRS[((i++))]="api/configuration"
DATA_DIRS[((i++))]="etc/client.keys" DATA_DIRS[((i++))]="etc"
DATA_DIRS[((i++))]="etc/decoders"
DATA_DIRS[((i++))]="etc/lists"
DATA_DIRS[((i++))]="etc/local_internal_options.conf"
DATA_DIRS[((i++))]="etc/localtime"
DATA_DIRS[((i++))]="etc/ossec.conf"
DATA_DIRS[((i++))]="etc/rootcheck"
DATA_DIRS[((i++))]="etc/rules"
DATA_DIRS[((i++))]="etc/shared"
DATA_DIRS[((i++))]="etc/sslmanager.cert"
DATA_DIRS[((i++))]="etc/sslmanager.key"
DATA_DIRS[((i++))]="logs" DATA_DIRS[((i++))]="logs"
DATA_DIRS[((i++))]="queue/db" DATA_DIRS[((i++))]="queue/db"
DATA_DIRS[((i++))]="queue/rootcheck" DATA_DIRS[((i++))]="queue/rootcheck"

View File

@@ -53,6 +53,12 @@ for ossecdir in "${DATA_DIRS[@]}"; do
fi fi
done done
if [ -e ${WAZUH_INSTALL_PATH}/etc-template ]
then
cp -p /var/ossec/etc-template/internal_options.conf /var/ossec/etc/internal_options.conf
fi
rm /var/ossec/queue/db/.template.db
touch ${DATA_PATH}/process_list touch ${DATA_PATH}/process_list
chgrp ossec ${DATA_PATH}/process_list chgrp ossec ${DATA_PATH}/process_list
chmod g+rw ${DATA_PATH}/process_list chmod g+rw ${DATA_PATH}/process_list