Compare commits

..

3 Commits

Author SHA1 Message Date
Mayte Ariza
cf98b0e7a1 Add /var/ossec/var/db path to permanent data (#361)
Former-commit-id: ceb5ab0cfb
2020-07-03 19:17:06 +02:00
AlfonsoRBJ
ee18d9b3eb update Wazuh version to 3.13.0 (#360)
Former-commit-id: e1c94c3429
2020-07-03 11:48:33 +02:00
AlfonsoRBJ
f0774436f3 remove outadated workaround (#352)
Former-commit-id: 2018a22381
2020-06-25 14:27:57 +02:00
3 changed files with 5 additions and 1268 deletions

View File

@@ -2,14 +2,14 @@
FROM phusion/baseimage:latest
# Arguments
ARG FILEBEAT_VERSION=7.6.1
ARG WAZUH_VERSION=3.12.3-1
ARG FILEBEAT_VERSION=7.7.0
ARG WAZUH_VERSION=3.13.0-1
# Environment variables
ENV API_USER="foo" \
API_PASS="bar"
ARG TEMPLATE_VERSION="v3.12.3"
ARG TEMPLATE_VERSION="v3.13.0"
ENV FILEBEAT_DESTINATION="elasticsearch"
# Install packages
@@ -111,13 +111,6 @@ RUN chmod 755 /entrypoint.sh && \
chmod 755 /entrypoint-scripts/35-remove_credentials_file.sh && \
chmod 755 /entrypoint-scripts/85-save_wazuh_version.sh
# Workaround.
# Issues: Wazuh-api
# https://github.com/wazuh/wazuh-api/issues/440
# https://github.com/wazuh/wazuh-api/issues/443
COPY --chown=root:ossec config/agents.js /var/ossec/api/controllers/agents.js
RUN chmod 770 /var/ossec/api/controllers/agents.js
# Load wazuh alerts template.
ADD https://raw.githubusercontent.com/wazuh/wazuh/$TEMPLATE_VERSION/extensions/elasticsearch/7.x/wazuh-template.json /etc/filebeat
RUN chmod go-w /etc/filebeat/wazuh-template.json

File diff suppressed because it is too large Load Diff

View File

@@ -10,6 +10,7 @@ PERMANENT_DATA[((i++))]="/var/ossec/active-response/bin"
PERMANENT_DATA[((i++))]="/var/ossec/wodles"
PERMANENT_DATA[((i++))]="/etc/filebeat"
PERMANENT_DATA[((i++))]="/etc/postfix"
PERMANENT_DATA[((i++))]="/var/ossec/var/db"
export PERMANENT_DATA
# Files mounted in a volume that should not be permanent
@@ -55,6 +56,7 @@ PERMANENT_DATA_EXCP[((i++))]="/var/ossec/wodles/oscap/content/ssg-ubuntu-1404-ds
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/wodles/oscap/content/ssg-ubuntu-1604-ds.xml"
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/queue/vulnerabilities/dictionaries/cpe_helper.json"
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/queue/vulnerabilities/dictionaries/msu.json.gz"
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/var/db/mitre.db"
export PERMANENT_DATA_EXCP
# Files mounted in a volume that should be deleted when updating