From be19c70082cd8805df31726583cf8c771b170e9e Mon Sep 17 00:00:00 2001 From: vcerenu Date: Thu, 14 Sep 2023 12:25:57 -0300 Subject: [PATCH 1/2] remove goss install --- .github/goss/goss.yaml | 103 +++++++++++++++++++ build-docker-images/wazuh-manager/Dockerfile | 2 - 2 files changed, 103 insertions(+), 2 deletions(-) create mode 100644 .github/goss/goss.yaml diff --git a/.github/goss/goss.yaml b/.github/goss/goss.yaml new file mode 100644 index 00000000..ee81b870 --- /dev/null +++ b/.github/goss/goss.yaml @@ -0,0 +1,103 @@ +file: + /etc/filebeat/filebeat.yml: + exists: true + mode: "0644" + owner: root + group: root + filetype: file + contains: [] + /var/ossec/bin/wazuh-control: + exists: true + mode: "0750" + owner: root + group: root + filetype: file + contains: [] + /var/ossec/etc/lists/audit-keys: + exists: true + mode: "0660" + owner: wazuh + group: wazuh + filetype: file + contains: [] + /var/ossec/etc/ossec.conf: + exists: true + mode: "0660" + owner: root + group: wazuh + filetype: file + contains: [] + /var/ossec/etc/rules/local_rules.xml: + exists: true + mode: "0660" + owner: wazuh + group: wazuh + filetype: file + contains: [] + /var/ossec/etc/sslmanager.cert: + exists: true + mode: "0640" + owner: root + group: root + filetype: file + contains: [] + /var/ossec/etc/sslmanager.key: + exists: true + mode: "0640" + owner: root + group: root + filetype: file + contains: [] +package: + filebeat: + installed: true + versions: + - 7.10.2 + wazuh-manager: + installed: true + versions: + - 4.5.2-1 +port: + tcp:1514: + listening: true + ip: + - 0.0.0.0 + tcp:1515: + listening: true + ip: + - 0.0.0.0 + tcp:55000: + listening: true + ip: + - 0.0.0.0 +process: + filebeat: + running: true + wazuh-analysisd: + running: true + wazuh-authd: + running: true + wazuh-execd: + running: true + wazuh-monitord: + running: true + wazuh-remoted: + running: true + wazuh-syscheckd: + running: true + s6-supervise: + running: true + wazuh-db: + running: true + wazuh-modulesd: + running: true +user: + wazuh: + exists: true + groups: + - wazuh + home: /var/ossec + shell: /sbin/nologin +group: + wazuh: + exists: true \ No newline at end of file diff --git a/build-docker-images/wazuh-manager/Dockerfile b/build-docker-images/wazuh-manager/Dockerfile index c1894489..d0e59189 100644 --- a/build-docker-images/wazuh-manager/Dockerfile +++ b/build-docker-images/wazuh-manager/Dockerfile @@ -24,8 +24,6 @@ RUN curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/${FILEBEAT_ dpkg -i ${FILEBEAT_CHANNEL}-${FILEBEAT_VERSION}-amd64.deb && rm -f ${FILEBEAT_CHANNEL}-${FILEBEAT_VERSION}-amd64.deb && \ curl -s https://packages.wazuh.com/4.x/filebeat/${WAZUH_FILEBEAT_MODULE} | tar -xvz -C /usr/share/filebeat/module -RUN curl -L https://github.com/aelsabbahy/goss/releases/latest/download/goss-linux-amd64 -o /usr/local/bin/goss && chmod +rx /usr/local/bin/goss - ARG S6_VERSION="v2.2.0.3" RUN curl --fail --silent -L https://github.com/just-containers/s6-overlay/releases/download/${S6_VERSION}/s6-overlay-amd64.tar.gz \ -o /tmp/s6-overlay-amd64.tar.gz && \ From e9f689dbfce41f6604167d76a41a99c03f00dd91 Mon Sep 17 00:00:00 2001 From: vcerenu Date: Thu, 14 Sep 2023 15:17:13 -0300 Subject: [PATCH 2/2] remove goss directory --- .github/goss/goss.yaml | 103 ----------------------------------------- 1 file changed, 103 deletions(-) delete mode 100644 .github/goss/goss.yaml diff --git a/.github/goss/goss.yaml b/.github/goss/goss.yaml deleted file mode 100644 index ee81b870..00000000 --- a/.github/goss/goss.yaml +++ /dev/null @@ -1,103 +0,0 @@ -file: - /etc/filebeat/filebeat.yml: - exists: true - mode: "0644" - owner: root - group: root - filetype: file - contains: [] - /var/ossec/bin/wazuh-control: - exists: true - mode: "0750" - owner: root - group: root - filetype: file - contains: [] - /var/ossec/etc/lists/audit-keys: - exists: true - mode: "0660" - owner: wazuh - group: wazuh - filetype: file - contains: [] - /var/ossec/etc/ossec.conf: - exists: true - mode: "0660" - owner: root - group: wazuh - filetype: file - contains: [] - /var/ossec/etc/rules/local_rules.xml: - exists: true - mode: "0660" - owner: wazuh - group: wazuh - filetype: file - contains: [] - /var/ossec/etc/sslmanager.cert: - exists: true - mode: "0640" - owner: root - group: root - filetype: file - contains: [] - /var/ossec/etc/sslmanager.key: - exists: true - mode: "0640" - owner: root - group: root - filetype: file - contains: [] -package: - filebeat: - installed: true - versions: - - 7.10.2 - wazuh-manager: - installed: true - versions: - - 4.5.2-1 -port: - tcp:1514: - listening: true - ip: - - 0.0.0.0 - tcp:1515: - listening: true - ip: - - 0.0.0.0 - tcp:55000: - listening: true - ip: - - 0.0.0.0 -process: - filebeat: - running: true - wazuh-analysisd: - running: true - wazuh-authd: - running: true - wazuh-execd: - running: true - wazuh-monitord: - running: true - wazuh-remoted: - running: true - wazuh-syscheckd: - running: true - s6-supervise: - running: true - wazuh-db: - running: true - wazuh-modulesd: - running: true -user: - wazuh: - exists: true - groups: - - wazuh - home: /var/ossec - shell: /sbin/nologin -group: - wazuh: - exists: true \ No newline at end of file