mirror of
				https://github.com/wazuh/wazuh-docker.git
				synced 2025-11-04 05:53:19 +00:00 
			
		
		
		
	Compare commits
	
		
			47 Commits
		
	
	
		
			v4.5.4
			...
			v4.6.0-bet
		
	
	| Author | SHA1 | Date | |
|---|---|---|---|
| 
						 | 
					958e466682 | ||
| 
						 | 
					7d5b1c4f85 | ||
| 
						 | 
					d6b73cb3dc | ||
| 
						 | 
					62627e32fd | ||
| 
						 | 
					536dd51aa7 | ||
| 
						 | 
					5769159cf9 | ||
| 
						 | 
					0c6077c3e0 | ||
| 
						 | 
					de7754364d | ||
| 
						 | 
					73ada94ed6 | ||
| 
						 | 
					63817dfd55 | ||
| 
						 | 
					637110c278 | ||
| 
						 | 
					b18c068650 | ||
| 
						 | 
					9a871dbbcb | ||
| 
						 | 
					b377a0f6eb | ||
| 
						 | 
					44e9bebed0 | ||
| 
						 | 
					760fc8ccbf | ||
| 
						 | 
					44303d3701 | ||
| 
						 | 
					6c91bac96d | ||
| 
						 | 
					1dec665a97 | ||
| 
						 | 
					757e5dbf05 | ||
| 
						 | 
					3953986652 | ||
| 
						 | 
					f2dab81387 | ||
| 
						 | 
					b27d991f0c | ||
| 
						 | 
					4d0aa57ed2 | ||
| 
						 | 
					f4f99f17b7 | ||
| 
						 | 
					8e3b8aada8 | ||
| 
						 | 
					7abaea9b4c | ||
| 
						 | 
					303b64c7ae | ||
| 
						 | 
					2058734154 | ||
| 
						 | 
					4e34f1f7b7 | ||
| 
						 | 
					9a9fac6243 | ||
| 
						 | 
					11d15670f4 | ||
| 
						 | 
					e826236a28 | ||
| 
						 | 
					137989ddd1 | ||
| 
						 | 
					0d76a85ded | ||
| 
						 | 
					e95455a12b | ||
| 
						 | 
					887293d474 | ||
| 
						 | 
					ae20f302c0 | ||
| 
						 | 
					08314f9e2e | ||
| 
						 | 
					c6f1f31d57 | ||
| 
						 | 
					312466704d | ||
| 
						 | 
					d00fc0ccf6 | ||
| 
						 | 
					42ea26b3bd | ||
| 
						 | 
					fe75f8fb4e | ||
| 
						 | 
					8b1ed497ab | ||
| 
						 | 
					195b34c259 | ||
| 
						 | 
					08c9b95455 | 
							
								
								
									
										4
									
								
								.env
									
									
									
									
									
								
							
							
						
						
									
										4
									
								
								.env
									
									
									
									
									
								
							@@ -1,3 +1,3 @@
 | 
			
		||||
WAZUH_VERSION=4.5.4
 | 
			
		||||
WAZUH_IMAGE_VERSION=4.5.4
 | 
			
		||||
WAZUH_VERSION=4.6.0
 | 
			
		||||
WAZUH_IMAGE_VERSION=4.6.0
 | 
			
		||||
WAZUH_TAG_REVISION=1
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										2
									
								
								.github/.goss.yaml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										2
									
								
								.github/.goss.yaml
									
									
									
									
										vendored
									
									
								
							@@ -56,7 +56,7 @@ package:
 | 
			
		||||
  wazuh-manager:
 | 
			
		||||
    installed: true
 | 
			
		||||
    versions:
 | 
			
		||||
    - 4.5.4-1
 | 
			
		||||
    - 4.6.0-1
 | 
			
		||||
port:
 | 
			
		||||
  tcp:1514:
 | 
			
		||||
    listening: true
 | 
			
		||||
 
 | 
			
		||||
@@ -1,10 +1,10 @@
 | 
			
		||||
# Change Log
 | 
			
		||||
All notable changes to this project will be documented in this file.
 | 
			
		||||
 | 
			
		||||
## Wazuh Docker v4.5.4
 | 
			
		||||
## Wazuh Docker v4.6.0
 | 
			
		||||
### Added
 | 
			
		||||
 | 
			
		||||
- Update Wazuh to version [4.5.4](https://github.com/wazuh/wazuh/blob/v4.5.4/CHANGELOG.md#v454)
 | 
			
		||||
- Update Wazuh to version [4.6.0](https://github.com/wazuh/wazuh/blob/v4.6.0/CHANGELOG.md#v460)
 | 
			
		||||
 | 
			
		||||
## Wazuh Docker v4.5.3
 | 
			
		||||
### Added
 | 
			
		||||
 
 | 
			
		||||
@@ -195,7 +195,7 @@ WAZUH_MONITORING_REPLICAS=0         ##
 | 
			
		||||
 | 
			
		||||
| Wazuh version | ODFE    | XPACK  |
 | 
			
		||||
|---------------|---------|--------|
 | 
			
		||||
| v4.5.4        |         |        |
 | 
			
		||||
| v4.6.0        |         |        |
 | 
			
		||||
| v4.5.3        |         |        |
 | 
			
		||||
| v4.5.2        |         |        |
 | 
			
		||||
| v4.5.1        |         |        |
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										4
									
								
								VERSION
									
									
									
									
									
								
							
							
						
						
									
										4
									
								
								VERSION
									
									
									
									
									
								
							@@ -1,2 +1,2 @@
 | 
			
		||||
WAZUH-DOCKER_VERSION="4.5.4"
 | 
			
		||||
REVISION="40510"
 | 
			
		||||
WAZUH-DOCKER_VERSION="4.6.0"
 | 
			
		||||
REVISION="40601"
 | 
			
		||||
 
 | 
			
		||||
@@ -1,4 +1,4 @@
 | 
			
		||||
WAZUH_IMAGE_VERSION=4.5.4
 | 
			
		||||
WAZUH_IMAGE_VERSION=4.6.0
 | 
			
		||||
WAZUH_VERSION=$(echo $WAZUH_IMAGE_VERSION | sed -e 's/\.//g')
 | 
			
		||||
WAZUH_TAG_REVISION=1
 | 
			
		||||
WAZUH_CURRENT_VERSION=$(curl --silent https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '\"tag_name\":' | sed -E 's/.*\"([^\"]+)\".*/\1/' | cut -c 2- | sed -e 's/\.//g')
 | 
			
		||||
 
 | 
			
		||||
@@ -66,6 +66,8 @@ ENV PATTERN="" \
 | 
			
		||||
    EXTENSIONS_CISCAT="" \
 | 
			
		||||
    EXTENSIONS_AWS="" \
 | 
			
		||||
    EXTENSIONS_GCP="" \
 | 
			
		||||
    EXTENSIONS_GITHUB=""\
 | 
			
		||||
    EXTENSIONS_OFFICE=""\
 | 
			
		||||
    EXTENSIONS_VIRUSTOTAL="" \
 | 
			
		||||
    EXTENSIONS_OSQUERY="" \
 | 
			
		||||
    EXTENSIONS_DOCKER="" \
 | 
			
		||||
 
 | 
			
		||||
@@ -9,8 +9,8 @@ export CONFIG_DIR=${INSTALLATION_DIR}/config
 | 
			
		||||
 | 
			
		||||
## Variables
 | 
			
		||||
CERT_TOOL=wazuh-certs-tool.sh
 | 
			
		||||
PACKAGES_URL=https://packages.wazuh.com/4.5/
 | 
			
		||||
PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.5/
 | 
			
		||||
PACKAGES_URL=https://packages.wazuh.com/4.6/
 | 
			
		||||
PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.6/
 | 
			
		||||
 | 
			
		||||
## Check if the cert tool exists in S3 buckets
 | 
			
		||||
CERT_TOOL_PACKAGES=$(curl --silent -I $PACKAGES_URL$CERT_TOOL | grep -E "^HTTP" | awk  '{print $2}')
 | 
			
		||||
 
 | 
			
		||||
@@ -25,6 +25,8 @@ declare -A CONFIG_MAP=(
 | 
			
		||||
  [extensions.ciscat]=$EXTENSIONS_CISCAT
 | 
			
		||||
  [extensions.aws]=$EXTENSIONS_AWS
 | 
			
		||||
  [extensions.gcp]=$EXTENSIONS_GCP
 | 
			
		||||
  [extensions.github]=$EXTENSIONS_GITHUB
 | 
			
		||||
  [extensions.office]=$EXTENSIONS_OFFICE
 | 
			
		||||
  [extensions.virustotal]=$EXTENSIONS_VIRUSTOTAL
 | 
			
		||||
  [extensions.osquery]=$EXTENSIONS_OSQUERY
 | 
			
		||||
  [extensions.docker]=$EXTENSIONS_DOCKER
 | 
			
		||||
 
 | 
			
		||||
@@ -53,8 +53,8 @@ tar -xf ${INDEXER_FILE}
 | 
			
		||||
## Variables
 | 
			
		||||
CERT_TOOL=wazuh-certs-tool.sh
 | 
			
		||||
PASSWORD_TOOL=wazuh-passwords-tool.sh
 | 
			
		||||
PACKAGES_URL=https://packages.wazuh.com/4.5/
 | 
			
		||||
PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.5/
 | 
			
		||||
PACKAGES_URL=https://packages.wazuh.com/4.6/
 | 
			
		||||
PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.6/
 | 
			
		||||
 | 
			
		||||
## Check if the cert tool exists in S3 buckets
 | 
			
		||||
CERT_TOOL_PACKAGES=$(curl --silent -I $PACKAGES_URL$CERT_TOOL | grep -E "^HTTP" | awk  '{print $2}')
 | 
			
		||||
 
 | 
			
		||||
@@ -5,7 +5,7 @@ RUN rm /bin/sh && ln -s /bin/bash /bin/sh
 | 
			
		||||
 | 
			
		||||
ARG WAZUH_VERSION
 | 
			
		||||
ARG WAZUH_TAG_REVISION
 | 
			
		||||
ARG TEMPLATE_VERSION=4.5
 | 
			
		||||
ARG TEMPLATE_VERSION=v4.6.0
 | 
			
		||||
ARG FILEBEAT_CHANNEL=filebeat-oss
 | 
			
		||||
ARG FILEBEAT_VERSION=7.10.2
 | 
			
		||||
ARG WAZUH_FILEBEAT_MODULE="wazuh-filebeat-0.2.tar.gz"
 | 
			
		||||
 
 | 
			
		||||
@@ -13,7 +13,7 @@ SPECIAL_CHARS = "@$!%*?&-_"
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
try:
 | 
			
		||||
    from wazuh.rbac.orm import create_rbac_db
 | 
			
		||||
    from wazuh.rbac.orm import check_database_integrity
 | 
			
		||||
    from wazuh.security import (
 | 
			
		||||
        create_user,
 | 
			
		||||
        get_users,
 | 
			
		||||
@@ -69,7 +69,7 @@ if __name__ == "__main__":
 | 
			
		||||
    username, password = read_user_file()
 | 
			
		||||
 | 
			
		||||
    # create RBAC database
 | 
			
		||||
    create_rbac_db()
 | 
			
		||||
    check_database_integrity()
 | 
			
		||||
 | 
			
		||||
    initial_users = db_users()
 | 
			
		||||
    if username not in initial_users:
 | 
			
		||||
 
 | 
			
		||||
@@ -8,8 +8,8 @@
 | 
			
		||||
## Variables
 | 
			
		||||
CERT_TOOL=wazuh-certs-tool.sh
 | 
			
		||||
PASSWORD_TOOL=wazuh-passwords-tool.sh
 | 
			
		||||
PACKAGES_URL=https://packages.wazuh.com/4.5/
 | 
			
		||||
PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.5/
 | 
			
		||||
PACKAGES_URL=https://packages.wazuh.com/4.6/
 | 
			
		||||
PACKAGES_DEV_URL=https://packages-dev.wazuh.com/4.6/
 | 
			
		||||
 | 
			
		||||
## Check if the cert tool exists in S3 buckets
 | 
			
		||||
CERT_TOOL_PACKAGES=$(curl --silent -I $PACKAGES_URL$CERT_TOOL | grep -E "^HTTP" | awk  '{print $2}')
 | 
			
		||||
 
 | 
			
		||||
@@ -117,6 +117,7 @@
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>buster</os>
 | 
			
		||||
      <os>bullseye</os>
 | 
			
		||||
      <os>bookworm</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
@@ -163,6 +164,14 @@
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Alma Linux OS vulnerabilities -->
 | 
			
		||||
    <provider name="almalinux">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>8</os>
 | 
			
		||||
      <os>9</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Aggregate vulnerabilities -->
 | 
			
		||||
    <provider name="nvd">
 | 
			
		||||
      <enabled>yes</enabled>
 | 
			
		||||
 
 | 
			
		||||
@@ -117,6 +117,7 @@
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>buster</os>
 | 
			
		||||
      <os>bullseye</os>
 | 
			
		||||
      <os>bookworm</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
@@ -157,6 +158,14 @@
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Alma Linux OS vulnerabilities -->
 | 
			
		||||
    <provider name="almalinux">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>8</os>
 | 
			
		||||
      <os>9</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Windows OS vulnerabilities -->
 | 
			
		||||
    <provider name="msu">
 | 
			
		||||
      <enabled>yes</enabled>
 | 
			
		||||
 
 | 
			
		||||
@@ -3,7 +3,7 @@ version: '3.7'
 | 
			
		||||
 | 
			
		||||
services:
 | 
			
		||||
  wazuh.master:
 | 
			
		||||
    image: wazuh/wazuh-manager:4.5.4
 | 
			
		||||
    image: wazuh/wazuh-manager:4.6.0
 | 
			
		||||
    hostname: wazuh.master
 | 
			
		||||
    restart: always
 | 
			
		||||
    ulimits:
 | 
			
		||||
@@ -45,7 +45,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf
 | 
			
		||||
 | 
			
		||||
  wazuh.worker:
 | 
			
		||||
    image: wazuh/wazuh-manager:4.5.4
 | 
			
		||||
    image: wazuh/wazuh-manager:4.6.0
 | 
			
		||||
    hostname: wazuh.worker
 | 
			
		||||
    restart: always
 | 
			
		||||
    ulimits:
 | 
			
		||||
@@ -81,7 +81,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_cluster/wazuh_worker.conf:/wazuh-config-mount/etc/ossec.conf
 | 
			
		||||
 | 
			
		||||
  wazuh1.indexer:
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.4
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.6.0
 | 
			
		||||
    hostname: wazuh1.indexer
 | 
			
		||||
    restart: always
 | 
			
		||||
    ports:
 | 
			
		||||
@@ -107,7 +107,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
			
		||||
 | 
			
		||||
  wazuh2.indexer:
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.4
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.6.0
 | 
			
		||||
    hostname: wazuh2.indexer
 | 
			
		||||
    restart: always
 | 
			
		||||
    environment:
 | 
			
		||||
@@ -129,7 +129,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
			
		||||
 | 
			
		||||
  wazuh3.indexer:
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.4
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.6.0
 | 
			
		||||
    hostname: wazuh3.indexer
 | 
			
		||||
    restart: always
 | 
			
		||||
    environment:
 | 
			
		||||
@@ -151,7 +151,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
			
		||||
 | 
			
		||||
  wazuh.dashboard:
 | 
			
		||||
    image: wazuh/wazuh-dashboard:4.5.4
 | 
			
		||||
    image: wazuh/wazuh-dashboard:4.6.0
 | 
			
		||||
    hostname: wazuh.dashboard
 | 
			
		||||
    restart: always
 | 
			
		||||
    ports:
 | 
			
		||||
 
 | 
			
		||||
@@ -117,6 +117,7 @@
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>buster</os>
 | 
			
		||||
      <os>bullseye</os>
 | 
			
		||||
      <os>bookworm</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
@@ -157,6 +158,14 @@
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Alma Linux OS vulnerabilities -->
 | 
			
		||||
    <provider name="almalinux">
 | 
			
		||||
      <enabled>no</enabled>
 | 
			
		||||
      <os>8</os>
 | 
			
		||||
      <os>9</os>
 | 
			
		||||
      <update_interval>1h</update_interval>
 | 
			
		||||
    </provider>
 | 
			
		||||
 | 
			
		||||
    <!-- Windows OS vulnerabilities -->
 | 
			
		||||
    <provider name="msu">
 | 
			
		||||
      <enabled>yes</enabled>
 | 
			
		||||
 
 | 
			
		||||
@@ -3,7 +3,7 @@ version: '3.7'
 | 
			
		||||
 | 
			
		||||
services:
 | 
			
		||||
  wazuh.manager:
 | 
			
		||||
    image: wazuh/wazuh-manager:4.5.4
 | 
			
		||||
    image: wazuh/wazuh-manager:4.6.0
 | 
			
		||||
    hostname: wazuh.manager
 | 
			
		||||
    restart: always
 | 
			
		||||
    ulimits:
 | 
			
		||||
@@ -46,7 +46,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_cluster/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf
 | 
			
		||||
 | 
			
		||||
  wazuh.indexer:
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.5.4
 | 
			
		||||
    image: wazuh/wazuh-indexer:4.6.0
 | 
			
		||||
    hostname: wazuh.indexer
 | 
			
		||||
    restart: always
 | 
			
		||||
    ports:
 | 
			
		||||
@@ -71,7 +71,7 @@ services:
 | 
			
		||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
			
		||||
 | 
			
		||||
  wazuh.dashboard:
 | 
			
		||||
    image: wazuh/wazuh-dashboard:4.5.4
 | 
			
		||||
    image: wazuh/wazuh-dashboard:4.6.0
 | 
			
		||||
    hostname: wazuh.dashboard
 | 
			
		||||
    restart: always
 | 
			
		||||
    ports:
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user