Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove service requirement from RPM packages 4.4.5 #2257

Merged
merged 1 commit into from Jul 7, 2023

Conversation

DFolchA
Copy link
Contributor

@DFolchA DFolchA commented Jul 7, 2023

Related issue
#2223

Description

This PR removes service from the requirements to install RPM packages due to its deprecation in newer systems.

Tests

  • Build the package in any supported platform
    • Linux
    • Windows
    • macOS
    • Solaris
    • AIX
    • HP-UX
  • Package installation
  • Package upgrade
  • Package downgrade
  • Package remove
  • Package install/remove/install
  • Change added to CHANGELOG.md
  • Tests for Linux RPM
    • Build the package for x86_64
    • Build the package for i386
    • Build the package for armhf
    • Build the package for aarch64
    • %files section is correctly updated if necessary
  • Tests for Linux deb
    • Build the package for x86_64
    • Build the package for i386
    • Build the package for armhf
    • Build the package for aarch64
    • Package install/remove/install
    • Package install/purge/install
    • Check file permissions after installing the package
  • Tests for macOS
    • Test the package from macOS Sierra to Mojave
  • Tests for Solaris
    • Test the package on Solaris 10
    • Test the package on Solaris 11
    • Check file permissions on Solaris 11 template
  • Tests for IBM AIX
    • %files section is correctly updated if necessary
    • Check the changes from IBM AIX 5 to 7

@DFolchA DFolchA self-assigned this Jul 7, 2023
@DFolchA DFolchA linked an issue Jul 7, 2023 that may be closed by this pull request
@jotacarma90 jotacarma90 changed the title Remove service reqirement from RPM packages 4.4.5 Remove service requirement from RPM packages 4.4.5 Jul 7, 2023
@jotacarma90 jotacarma90 force-pushed the 2223-remove-service-req-4.4.5 branch from f460f37 to ba26dc8 Compare July 7, 2023 19:07
@jotacarma90
Copy link
Member

Testing

Vagrant box used: oraclebase/oracle-9

Manager

Package:
https://packages-dev.wazuh.com/warehouse/test/4.4/rpm/var/wazuh-manager-4.4.5-2223.remove.service.req.4.4.5.7.7.2023.x86_64.rpm

Output:

[root@oraclelinux9manager vagrant]# rpm -iv /vagrant/wazuh-manager-4.4.5-2223.remove.service.req.4.4.5.7.7.2023.x86_64.rpm 
Verifying packages...
Preparing packages...
wazuh-manager-4.4.5-2223.remove.service.req.4.4.5.7.7.2023.x86_64

Agent

Package:
https://packages-dev.wazuh.com/warehouse/test/4.4/rpm/var/wazuh-agent-4.4.5-2223.remove.service.req.4.4.5.7.7.2023.x86_64.rpm

Output:

[root@oraclelinux9 vagrant]# rpm -iv /vagrant/wazuh-agent-4.4.5-2223.remove.service.req.4.4.5.7.7.2023.x86_64.rpm 
Verifying packages...
Preparing packages...
wazuh-agent-4.4.5-2223.remove.service.req.4.4.5.7.7.2023.x86_64

Checking agent logs, we can see how it connects with the manager and all the modules are running normally with the default configuration.

2023/07/07 20:14:02 wazuh-execd: INFO: Started (pid: 7050).
2023/07/07 20:14:02 wazuh-agentd: INFO: (1410): Reading authentication keys file.
2023/07/07 20:14:02 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60
2023/07/07 20:14:02 wazuh-agentd: INFO: Version detected -> Linux |oraclelinux9 |5.15.0-101.103.2.1.el9uek.x86_64 |#2 SMP Tue May 2 01:10:45 PDT 2023 |x86_64 [Oracle Linux Server|ol: 9.2] - Wazuh v4.4.5
2023/07/07 20:14:02 wazuh-agentd: INFO: Started (pid: 7059).
2023/07/07 20:14:02 wazuh-agentd: INFO: Using AES as encryption method.
2023/07/07 20:14:02 wazuh-agentd: INFO: Trying to connect to server ([192.168.56.20]:1514/tcp).
2023/07/07 20:14:02 wazuh-agentd: INFO: (4102): Connected to the server ([192.168.56.20]:1514/tcp).
2023/07/07 20:14:03 wazuh-syscheckd: INFO: Started (pid: 7074).
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'.
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'.
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'.
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'.
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'.
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'.
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/mtab'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/hosts.deny'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/mail/statistics'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/random-seed'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/random.seed'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/adjtime'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/httpd/logs'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/utmpx'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/wtmpx'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/cups/certs'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/dumpdates'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6206): Ignore 'file' entry '/etc/svc/volatile'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6207): Ignore 'file' sregex '.log$|.swp$'
2023/07/07 20:14:03 wazuh-syscheckd: INFO: (6004): No diff for file: '/etc/ssl/private.key'
2023/07/07 20:14:04 wazuh-syscheckd: INFO: (6000): Starting daemon...
2023/07/07 20:14:04 wazuh-syscheckd: INFO: (6010): File integrity monitoring scan frequency: 43200 seconds
2023/07/07 20:14:04 wazuh-syscheckd: INFO: (6008): File integrity monitoring scan started.
2023/07/07 20:14:04 rootcheck: INFO: Starting rootcheck scan.
2023/07/07 20:14:05 wazuh-logcollector: INFO: Monitoring output of command(360): df -P
2023/07/07 20:14:05 wazuh-logcollector: INFO: Monitoring full output of command(360): netstat -tulpn | sed 's/\([[:alnum:]]\+\)\ \+[[:digit:]]\+\ \+[[:digit:]]\+\ \+\(.*\):\([[:digit:]]*\)\ \+\([0-9\.\:\*]\+\).\+\ \([[:digit:]]*\/[[:alnum:]\-]*\).*/\1 \2 == \3 == \4 \5/' | sort -k 4 -g | sed 's/ == \(.*\) ==/:\1/' | sed 1,2d
2023/07/07 20:14:05 wazuh-logcollector: INFO: Monitoring full output of command(360): last -n 20
2023/07/07 20:14:05 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/audit/audit.log'.
2023/07/07 20:14:05 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'.
2023/07/07 20:14:05 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/messages'.
2023/07/07 20:14:05 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'.
2023/07/07 20:14:05 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/maillog'.
2023/07/07 20:14:05 wazuh-logcollector: INFO: Started (pid: 7089).
2023/07/07 20:14:06 wazuh-modulesd: INFO: Started (pid: 7111).
2023/07/07 20:14:06 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting...
2023/07/07 20:14:06 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started.
2023/07/07 20:14:06 sca: INFO: Module started.
2023/07/07 20:14:06 sca: INFO: Loaded policy '/var/ossec/ruleset/sca/cis_rhel9_linux.yml'
2023/07/07 20:14:06 wazuh-modulesd:control: INFO: Starting control thread.
2023/07/07 20:14:06 wazuh-modulesd:osquery: INFO: Module disabled. Exiting...
2023/07/07 20:14:06 sca: INFO: Starting Security Configuration Assessment scan.
2023/07/07 20:14:06 wazuh-modulesd:syscollector: INFO: Module started.
2023/07/07 20:14:06 wazuh-modulesd:syscollector: INFO: Starting evaluation.
2023/07/07 20:14:06 sca: INFO: Starting evaluation of policy: '/var/ossec/ruleset/sca/cis_rhel9_linux.yml'
2023/07/07 20:14:06 wazuh-syscheckd: INFO: (6009): File integrity monitoring scan ended.
2023/07/07 20:14:06 wazuh-modulesd:syscollector: INFO: Evaluation finished.
2023/07/07 20:14:11 sca: INFO: Evaluation finished for policy '/var/ossec/ruleset/sca/cis_rhel9_linux.yml'
2023/07/07 20:14:11 sca: INFO: Security Configuration Assessment scan finished. Duration: 5 seconds.
2023/07/07 20:14:23 rootcheck: INFO: Ending rootcheck scan.

@Dwordcito Dwordcito merged commit fa9103f into 4.4.5 Jul 7, 2023
4 checks passed
@Dwordcito Dwordcito deleted the 2223-remove-service-req-4.4.5 branch July 7, 2023 20:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

The RPM package is unable to install on Oracle Linux 9
3 participants