mirror of
				https://github.com/wazuh/wazuh-docker.git
				synced 2025-11-03 21:43:17 +00:00 
			
		
		
		
	Compare commits
	
		
			29 Commits
		
	
	
		
			v4.5.1-rc2
			...
			v4.5.3-rc1
		
	
	| Author | SHA1 | Date | |
|---|---|---|---|
| 
						 | 
					088b855f73 | ||
| 
						 | 
					41515e9c49 | ||
| 
						 | 
					0fbbf5aee2 | ||
| 
						 | 
					37f565bb8a | ||
| 
						 | 
					2ac53b9b3d | ||
| 
						 | 
					d1c252c6c0 | ||
| 
						 | 
					e9f689dbfc | ||
| 
						 | 
					be19c70082 | ||
| 
						 | 
					1fae0d3452 | ||
| 
						 | 
					0a4c057492 | ||
| 
						 | 
					2902a0ce0b | ||
| 
						 | 
					c0fb4172f3 | ||
| 
						 | 
					8886e2347e | ||
| 
						 | 
					f1d8565989 | ||
| 
						 | 
					e5abd5d24e | ||
| 
						 | 
					902b0d8e52 | ||
| 
						 | 
					c0d97893a4 | ||
| 
						 | 
					0826f2c176 | ||
| 
						 | 
					d531b8dd72 | ||
| 
						 | 
					cb7d8785c6 | ||
| 
						 | 
					f1001c2f25 | ||
| 
						 | 
					216b5a6818 | ||
| 
						 | 
					57c7eaa5af | ||
| 
						 | 
					fbe073612c | ||
| 
						 | 
					32b1d88e36 | ||
| 
						 | 
					94be842afc | ||
| 
						 | 
					d20bbe247c | ||
| 
						 | 
					da82008a75 | ||
| 
						 | 
					54975ab099 | 
							
								
								
									
										4
									
								
								.env
									
									
									
									
									
								
							
							
						
						
									
										4
									
								
								.env
									
									
									
									
									
								
							@@ -1,3 +1,3 @@
 | 
			
		||||
WAZUH_VERSION=4.5.1
 | 
			
		||||
WAZUH_IMAGE_VERSION=4.5.1
 | 
			
		||||
WAZUH_VERSION=4.5.3
 | 
			
		||||
WAZUH_IMAGE_VERSION=4.5.3
 | 
			
		||||
WAZUH_TAG_REVISION=1
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										2
									
								
								.github/.goss.yaml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										2
									
								
								.github/.goss.yaml
									
									
									
									
										vendored
									
									
								
							@@ -56,7 +56,7 @@ package:
 | 
			
		||||
  wazuh-manager:
 | 
			
		||||
    installed: true
 | 
			
		||||
    versions:
 | 
			
		||||
    - 4.5.1-1
 | 
			
		||||
    - 4.5.3-1
 | 
			
		||||
port:
 | 
			
		||||
  tcp:1514:
 | 
			
		||||
    listening: true
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										10
									
								
								CHANGELOG.md
									
									
									
									
									
								
							
							
						
						
									
										10
									
								
								CHANGELOG.md
									
									
									
									
									
								
							@@ -1,6 +1,16 @@
 | 
			
		||||
# Change Log
 | 
			
		||||
All notable changes to this project will be documented in this file.
 | 
			
		||||
 | 
			
		||||
## Wazuh Docker v4.5.3
 | 
			
		||||
### Added
 | 
			
		||||
 | 
			
		||||
- Update Wazuh to version [4.5.3](https://github.com/wazuh/wazuh/blob/v4.5.3/CHANGELOG.md#v453)
 | 
			
		||||
 | 
			
		||||
## Wazuh Docker v4.5.2
 | 
			
		||||
### Added
 | 
			
		||||
 | 
			
		||||
- Update Wazuh to version [4.5.2](https://github.com/wazuh/wazuh/blob/v4.5.2/CHANGELOG.md#v452)
 | 
			
		||||
 | 
			
		||||
## Wazuh Docker v4.5.1
 | 
			
		||||
### Added
 | 
			
		||||
 | 
			
		||||
 
 | 
			
		||||
@@ -195,6 +195,8 @@ WAZUH_MONITORING_REPLICAS=0         ##
 | 
			
		||||
 | 
			
		||||
| Wazuh version | ODFE    | XPACK  |
 | 
			
		||||
|---------------|---------|--------|
 | 
			
		||||
| v4.5.3        |         |        |
 | 
			
		||||
| v4.5.2        |         |        |
 | 
			
		||||
| v4.5.1        |         |        |
 | 
			
		||||
| v4.5.0        |         |        |
 | 
			
		||||
| v4.4.5        |         |        |
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										4
									
								
								VERSION
									
									
									
									
									
								
							
							
						
						
									
										4
									
								
								VERSION
									
									
									
									
									
								
							@@ -1,2 +1,2 @@
 | 
			
		||||
WAZUH-DOCKER_VERSION="4.5.1"
 | 
			
		||||
REVISION="40503"
 | 
			
		||||
WAZUH-DOCKER_VERSION="4.5.3"
 | 
			
		||||
REVISION="40505"
 | 
			
		||||
 
 | 
			
		||||
@@ -1,14 +1,8 @@
 | 
			
		||||
WAZUH_IMAGE_VERSION=4.5.1
 | 
			
		||||
WAZUH_IMAGE_VERSION=4.5.3
 | 
			
		||||
WAZUH_VERSION=$(echo $WAZUH_IMAGE_VERSION | sed -e 's/\.//g')
 | 
			
		||||
WAZUH_TAG_REVISION=1
 | 
			
		||||
WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g')
 | 
			
		||||
 | 
			
		||||
## If wazuh manager exists in apt dev repository, change variables, if not, exit 1
 | 
			
		||||
if [ "$WAZUH_VERSION" -le "$WAZUH_CURRENT_VERSION" ]; then
 | 
			
		||||
  IMAGE_VERSION=${WAZUH_IMAGE_VERSION}
 | 
			
		||||
else
 | 
			
		||||
  IMAGE_VERSION=${WAZUH_IMAGE_VERSION}
 | 
			
		||||
fi
 | 
			
		||||
IMAGE_VERSION=${WAZUH_IMAGE_VERSION}
 | 
			
		||||
 | 
			
		||||
echo WAZUH_VERSION=$WAZUH_IMAGE_VERSION > .env
 | 
			
		||||
echo WAZUH_IMAGE_VERSION=$IMAGE_VERSION >> .env
 | 
			
		||||
 
 | 
			
		||||
@@ -102,6 +102,10 @@ RUN chown 1000:1000 /*.sh
 | 
			
		||||
# Copy Install dir from builder to current image
 | 
			
		||||
COPY --from=builder --chown=1000:1000 $INSTALL_DIR $INSTALL_DIR
 | 
			
		||||
 | 
			
		||||
# Create custom directory
 | 
			
		||||
RUN mkdir -p /usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom
 | 
			
		||||
RUN chown 1000:1000 /usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom
 | 
			
		||||
 | 
			
		||||
# Set workdir and user
 | 
			
		||||
WORKDIR $INSTALL_DIR
 | 
			
		||||
USER wazuh-dashboard
 | 
			
		||||
 
 | 
			
		||||
@@ -24,8 +24,6 @@ RUN curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/${FILEBEAT_
 | 
			
		||||
    dpkg -i ${FILEBEAT_CHANNEL}-${FILEBEAT_VERSION}-amd64.deb && rm -f ${FILEBEAT_CHANNEL}-${FILEBEAT_VERSION}-amd64.deb && \
 | 
			
		||||
    curl -s https://packages.wazuh.com/4.x/filebeat/${WAZUH_FILEBEAT_MODULE} | tar -xvz -C /usr/share/filebeat/module
 | 
			
		||||
 | 
			
		||||
RUN curl -L https://github.com/aelsabbahy/goss/releases/latest/download/goss-linux-amd64 -o /usr/local/bin/goss && chmod +rx /usr/local/bin/goss
 | 
			
		||||
 | 
			
		||||
ARG S6_VERSION="v2.2.0.3"
 | 
			
		||||
RUN curl --fail --silent -L https://github.com/just-containers/s6-overlay/releases/download/${S6_VERSION}/s6-overlay-amd64.tar.gz \
 | 
			
		||||
    -o /tmp/s6-overlay-amd64.tar.gz && \
 | 
			
		||||
 
 | 
			
		||||
@@ -21,6 +21,8 @@ PERMANENT_DATA_EXCP[((i++))]="/var/ossec/integrations/slack"
 | 
			
		||||
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/integrations/slack.py"
 | 
			
		||||
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/integrations/virustotal"
 | 
			
		||||
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/integrations/virustotal.py"
 | 
			
		||||
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/integrations/shuffle"
 | 
			
		||||
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/integrations/shuffle.py"
 | 
			
		||||
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/active-response/bin/default-firewall-drop"
 | 
			
		||||
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/active-response/bin/disable-account"
 | 
			
		||||
PERMANENT_DATA_EXCP[((i++))]="/var/ossec/active-response/bin/firewalld-drop"
 | 
			
		||||
 
 | 
			
		||||
@@ -108,13 +108,13 @@
 | 
			
		||||
      <os>xenial</os>
 | 
			
		||||
      <os>bionic</os>
 | 
			
		||||
      <os>focal</os>
 | 
			
		||||
      <os>jammy</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Debian OS vulnerabilities -->
 | 
			
		||||
    <provider name="debian">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>stretch</os>
 | 
			
		||||
      <os>buster</os>
 | 
			
		||||
      <os>bullseye</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
@@ -127,6 +127,7 @@
 | 
			
		||||
      <os>6</os>
 | 
			
		||||
      <os>7</os>
 | 
			
		||||
      <os>8</os>
 | 
			
		||||
      <os>9</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
@@ -138,6 +139,18 @@
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- SUSE Linux Enterprise OS vulnerabilities -->
 | 
			
		||||
    <provider name="suse">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>11-server</os>
 | 
			
		||||
      <os>11-desktop</os>
 | 
			
		||||
      <os>12-server</os>
 | 
			
		||||
      <os>12-desktop</os>
 | 
			
		||||
      <os>15-server</os>
 | 
			
		||||
      <os>15-desktop</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Arch OS vulnerabilities -->
 | 
			
		||||
    <provider name="arch">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
 
 | 
			
		||||
@@ -108,13 +108,13 @@
 | 
			
		||||
      <os>xenial</os>
 | 
			
		||||
      <os>bionic</os>
 | 
			
		||||
      <os>focal</os>
 | 
			
		||||
      <os>jammy</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Debian OS vulnerabilities -->
 | 
			
		||||
    <provider name="debian">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>stretch</os>
 | 
			
		||||
      <os>buster</os>
 | 
			
		||||
      <os>bullseye</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
@@ -127,6 +127,7 @@
 | 
			
		||||
      <os>6</os>
 | 
			
		||||
      <os>7</os>
 | 
			
		||||
      <os>8</os>
 | 
			
		||||
      <os>9</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
@@ -138,6 +139,18 @@
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- SUSE Linux Enterprise OS vulnerabilities -->
 | 
			
		||||
    <provider name="suse">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>11-server</os>
 | 
			
		||||
      <os>11-desktop</os>
 | 
			
		||||
      <os>12-server</os>
 | 
			
		||||
      <os>12-desktop</os>
 | 
			
		||||
      <os>15-server</os>
 | 
			
		||||
      <os>15-desktop</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Arch OS vulnerabilities -->
 | 
			
		||||
    <provider name="arch">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
 
 | 
			
		||||
@@ -3,7 +3,7 @@ version: '3.7'
 | 
			
		||||
 | 
			
		||||
services:
 | 
			
		||||
  wazuh.master:
 | 
			
		||||
    image: wazuh/wazuh-manager:4.5.1
 | 
			
		||||
    image: wazuh/wazuh-manager:4.5.3
 | 
			
		||||
    hostname: wazuh.master
 | 
			
		||||
    restart: always
 | 
			
		||||
    ulimits:
 | 
			
		||||
@@ -45,7 +45,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf
 | 
			
		||||
 | 
			
		||||
  wazuh.worker:
 | 
			
		||||
    image: wazuh/wazuh-manager:4.5.1
 | 
			
		||||
    image: wazuh/wazuh-manager:4.5.3
 | 
			
		||||
    hostname: wazuh.worker
 | 
			
		||||
    restart: always
 | 
			
		||||
    ulimits:
 | 
			
		||||
@@ -81,7 +81,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_cluster/wazuh_worker.conf:/wazuh-config-mount/etc/ossec.conf
 | 
			
		||||
 | 
			
		||||
  wazuh1.indexer:
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.1
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.3
 | 
			
		||||
    hostname: wazuh1.indexer
 | 
			
		||||
    restart: always
 | 
			
		||||
    ports:
 | 
			
		||||
@@ -107,7 +107,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
			
		||||
 | 
			
		||||
  wazuh2.indexer:
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.1
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.3
 | 
			
		||||
    hostname: wazuh2.indexer
 | 
			
		||||
    restart: always
 | 
			
		||||
    environment:
 | 
			
		||||
@@ -129,7 +129,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
			
		||||
 | 
			
		||||
  wazuh3.indexer:
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.1
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.3
 | 
			
		||||
    hostname: wazuh3.indexer
 | 
			
		||||
    restart: always
 | 
			
		||||
    environment:
 | 
			
		||||
@@ -151,7 +151,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
			
		||||
 | 
			
		||||
  wazuh.dashboard:
 | 
			
		||||
    image: wazuh/wazuh-dashboard:4.5.1
 | 
			
		||||
    image: wazuh/wazuh-dashboard:4.5.3
 | 
			
		||||
    hostname: wazuh.dashboard
 | 
			
		||||
    restart: always
 | 
			
		||||
    ports:
 | 
			
		||||
@@ -169,6 +169,8 @@ services:
 | 
			
		||||
      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-dashboard/certs/root-ca.pem
 | 
			
		||||
      - ./config/wazuh_dashboard/opensearch_dashboards.yml:/usr/share/wazuh-dashboard/config/opensearch_dashboards.yml
 | 
			
		||||
      - ./config/wazuh_dashboard/wazuh.yml:/usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml
 | 
			
		||||
      - wazuh-dashboard-config:/usr/share/wazuh-dashboard/data/wazuh/config
 | 
			
		||||
      - wazuh-dashboard-custom:/usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom
 | 
			
		||||
    depends_on:
 | 
			
		||||
      - wazuh1.indexer
 | 
			
		||||
    links:
 | 
			
		||||
@@ -218,3 +220,5 @@ volumes:
 | 
			
		||||
  wazuh-indexer-data-1:
 | 
			
		||||
  wazuh-indexer-data-2:
 | 
			
		||||
  wazuh-indexer-data-3:
 | 
			
		||||
  wazuh-dashboard-config:
 | 
			
		||||
  wazuh-dashboard-custom:
 | 
			
		||||
 
 | 
			
		||||
@@ -108,13 +108,13 @@
 | 
			
		||||
      <os>xenial</os>
 | 
			
		||||
      <os>bionic</os>
 | 
			
		||||
      <os>focal</os>
 | 
			
		||||
      <os>jammy</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Debian OS vulnerabilities -->
 | 
			
		||||
    <provider name="debian">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>stretch</os>
 | 
			
		||||
      <os>buster</os>
 | 
			
		||||
      <os>bullseye</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
@@ -127,6 +127,7 @@
 | 
			
		||||
      <os>6</os>
 | 
			
		||||
      <os>7</os>
 | 
			
		||||
      <os>8</os>
 | 
			
		||||
      <os>9</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
@@ -138,6 +139,18 @@
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- SUSE Linux Enterprise OS vulnerabilities -->
 | 
			
		||||
    <provider name="suse">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>11-server</os>
 | 
			
		||||
      <os>11-desktop</os>
 | 
			
		||||
      <os>12-server</os>
 | 
			
		||||
      <os>12-desktop</os>
 | 
			
		||||
      <os>15-server</os>
 | 
			
		||||
      <os>15-desktop</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Arch OS vulnerabilities -->
 | 
			
		||||
    <provider name="arch">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
 
 | 
			
		||||
@@ -3,7 +3,7 @@ version: '3.7'
 | 
			
		||||
 | 
			
		||||
services:
 | 
			
		||||
  wazuh.manager:
 | 
			
		||||
    image: wazuh/wazuh-manager:4.5.1
 | 
			
		||||
    image: wazuh/wazuh-manager:4.5.3
 | 
			
		||||
    hostname: wazuh.manager
 | 
			
		||||
    restart: always
 | 
			
		||||
    ulimits:
 | 
			
		||||
@@ -46,7 +46,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf
 | 
			
		||||
 | 
			
		||||
  wazuh.indexer:
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.1
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.3
 | 
			
		||||
    hostname: wazuh.indexer
 | 
			
		||||
    restart: always
 | 
			
		||||
    ports:
 | 
			
		||||
@@ -71,7 +71,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
			
		||||
 | 
			
		||||
  wazuh.dashboard:
 | 
			
		||||
    image: wazuh/wazuh-dashboard:4.5.1
 | 
			
		||||
    image: wazuh/wazuh-dashboard:4.5.3
 | 
			
		||||
    hostname: wazuh.dashboard
 | 
			
		||||
    restart: always
 | 
			
		||||
    ports:
 | 
			
		||||
@@ -90,6 +90,8 @@ services:
 | 
			
		||||
      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-dashboard/certs/root-ca.pem
 | 
			
		||||
      - ./config/wazuh_dashboard/opensearch_dashboards.yml:/usr/share/wazuh-dashboard/config/opensearch_dashboards.yml
 | 
			
		||||
      - ./config/wazuh_dashboard/wazuh.yml:/usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml
 | 
			
		||||
      - wazuh-dashboard-config:/usr/share/wazuh-dashboard/data/wazuh/config
 | 
			
		||||
      - wazuh-dashboard-custom:/usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom
 | 
			
		||||
    depends_on:
 | 
			
		||||
      - wazuh.indexer
 | 
			
		||||
    links:
 | 
			
		||||
@@ -109,3 +111,5 @@ volumes:
 | 
			
		||||
  filebeat_etc:
 | 
			
		||||
  filebeat_var:
 | 
			
		||||
  wazuh-indexer-data:
 | 
			
		||||
  wazuh-dashboard-config:
 | 
			
		||||
  wazuh-dashboard-custom:
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user