Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adapt cloud code to 4.7.1 #1144

Closed
wants to merge 113 commits into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
113 commits
Select commit Hold shift + click to select a range
3f94f73
Removing logs from Wazuh image (#153)
Phandora Apr 26, 2019
a88e549
Merge branch '3.9.0_6.7.1' into k8s
Phandora May 6, 2019
d276645
Disable additionals X-Pack applications and hide unnecesary managemen…
SitoRBJ May 8, 2019
096246a
Removing log files (#169)
Phandora May 15, 2019
9db0001
conflicts resolved in merge 3.9.1_6.8.0 over k8s branch
SitoRBJ May 28, 2019
d8ac9e6
Update CHANGELOG.md
SitoRBJ Jun 4, 2019
651077e
Update CHANGELOG.md
SitoRBJ Jun 4, 2019
9b2ecdb
Bump version 3.8.2_6.8.0
manuasir Jun 12, 2019
8150393
Updated CHANGELOG
manuasir Jun 12, 2019
c077b49
resolve merge conflicts from branch 3.9.2_6.8.0
SitoRBJ Jun 17, 2019
d98ab1b
Wazuh image improvements (#188)
Phandora Jul 8, 2019
065b5bb
Security for Elastic Stack (#196)
Jul 8, 2019
eca30fb
add CA correct management for Logstash (#202)
SitoRBJ Jul 8, 2019
15dbd60
New volumes declaration in Wazuh Dockerfile (#203)
Phandora Jul 9, 2019
c9ed007
Permissions rw for group added (#206)
Phandora Jul 12, 2019
59f60f6
Upgrade to 3.9.3_6.8.1 version (#207)
SitoRBJ Jul 12, 2019
0bf9766
Check if file exists before removing it (#209)
Phandora Jul 15, 2019
7c11a85
Fixing remove files (#210)
Phandora Jul 15, 2019
37f50da
Fix docker volumes error
crd1985 Jul 19, 2019
7afe64b
Removed write permissions for group and other in Integrations folder …
Phandora Aug 27, 2019
71933d6
Merge branch 'k8s' into cloud-0.5
SitoRBJ Sep 2, 2019
610f6f4
add debug to S3 repository creation in elasticsearch image
SitoRBJ Sep 3, 2019
9d71a6c
install wazuh without custom package
SitoRBJ Sep 3, 2019
abfe509
workaround for wazuh-api issue 440 and 443
SitoRBJ Sep 3, 2019
131d259
improve workaround description
SitoRBJ Sep 3, 2019
6656fdd
Added new volume: wodles folder
Phandora Sep 4, 2019
d1eb6e7
Removed chmod command in entrypoint
Phandora Sep 4, 2019
2918502
save original elasticserach.yml
SitoRBJ Sep 4, 2019
3a06c32
add minimun_master_nodes
SitoRBJ Sep 4, 2019
27c37d8
Changed versions: wazuh 3.9.4 and kibana 6.8.2
Phandora Sep 4, 2019
f3e3abf
Add agents.js
Phandora Sep 4, 2019
7faed76
Added TLS version filter (#227)
ixjosemi Sep 5, 2019
18971e3
Remove 6.8.2 version
Phandora Sep 5, 2019
dccb8ac
Set filebeat to 6.8.1
Phandora Sep 5, 2019
c346863
Merge branch 'issue-234-cloud0.6-wodles' into cloud-0.6-debug
SitoRBJ Sep 5, 2019
84a06e2
Wazuh 3.9.4 Elastic 6.8.1_3.9.3
SitoRBJ Sep 5, 2019
f494f6e
Merge pull request #236 from wazuh/cloud-0.6-debug
jesuslinares Sep 5, 2019
7cb8293
Update version: 3.9.4 - 6.8.1
jesuslinares Sep 5, 2019
4c3f149
Change v6.8.1 version to v6.8.2 (#237)
Phandora Sep 5, 2019
1d35f29
Fix copy except files (#238)
Phandora Sep 6, 2019
303e0f6
Add wodles to permanent_data (#239)
Phandora Sep 6, 2019
086ba71
Elastic 7-x cloud adaption (#255)
SitoRBJ Oct 1, 2019
fdb55e8
Elastic 7-x Docker refactor (#257)
SitoRBJ Oct 1, 2019
ddd37f0
Fixes for cloud Elastic 7 (#260)
SitoRBJ Oct 3, 2019
d15ea1f
Elasticserach 7 - Template mangement (#262)
SitoRBJ Oct 10, 2019
9cdcf05
Merge pull request #263 from wazuh/elastic-7-cloud
jesuslinares Oct 10, 2019
202e166
App 3.10.2 - 7.3.2 with security fix (#264)
jesuslinares Oct 15, 2019
bc69384
Fixed the option to change Filebeat output (#268)
SitoRBJ Nov 5, 2019
a5013d2
Remove Logstash pipeline customization (#280)
SitoRBJ Dec 5, 2019
503200e
Remove kibana custom configuration (#279)
SitoRBJ Dec 5, 2019
3431411
add workaround for vulnerability detector data published field (#282)
SitoRBJ Dec 12, 2019
936b47a
Replace Wazuh App to allow read users access
SitoRBJ Dec 26, 2019
c916818
Custom logos for Kibana (#291)
SitoRBJ Jan 10, 2020
2f0bb8e
Hide index management button
SitoRBJ Jan 10, 2020
3f20667
Add trap for sbin my init (#310)
SitoRBJ Mar 4, 2020
d05ec22
Create .wazuh index before setting the API credentials (#312)
Phandora Mar 10, 2020
33e451f
delaying the backup configuration (#317)
SitoRBJ Mar 24, 2020
99d54f1
Adapt to 3.11.4_7.4.2 (#314)
SitoRBJ Mar 25, 2020
d8a90dc
delay the wazuh remove credentials (#319)
SitoRBJ Mar 26, 2020
70be87c
Upgrade Wazuh to 3.11.5 (#334)
Robin350 Apr 20, 2020
c9e2dac
Improve Wazuh image: overwriting and removing files (#335)
Phandora Apr 23, 2020
6d527b9
Custom app (#336)
SitoRBJ Apr 23, 2020
a29dd86
Merge branch 'cloud-0.21' into cloud-0.22
jesuslinares Apr 24, 2020
5f7f2b6
Update wazuh app (#337)
Robin350 Apr 27, 2020
a8af820
Update Wazuh app for cloud-0.21 (#338)
Robin350 Apr 28, 2020
3aed4a1
Merge branch 'cloud-0.21' into cloud-0.22
jesuslinares Apr 28, 2020
1d777bb
Adapt wazuh to 3.12.2_7.6.1 (#342)
SitoRBJ May 13, 2020
27a354a
queue/fim/db/fim.db removed when updating (#343)
SitoRBJ May 19, 2020
ebd1381
Update to 3.12.3 (#348)
SitoRBJ May 25, 2020
f077443
remove outadated workaround (#352)
SitoRBJ Jun 25, 2020
ee18d9b
update Wazuh version to 3.13.0 (#360)
SitoRBJ Jul 3, 2020
cf98b0e
Add /var/ossec/var/db path to permanent data (#361)
Phandora Jul 3, 2020
593b0af
Adapt wazuh to 3.13.1 and filebeat to 7.7.0 (#367)
SitoRBJ Aug 31, 2020
5d37e1d
Update Wazuh version (#386)
SitoRBJ Sep 24, 2020
505bf04
Read archives events in Filebeat (#387)
SitoRBJ Sep 24, 2020
52df98b
Centos7 wazuh (#389)
josegob Sep 25, 2020
24fb19f
Adapt wazuh 4.0 (#408)
SitoRBJ Nov 23, 2020
d23cee6
update wazuh version to 4.0.3 (#417)
SitoRBJ Dec 14, 2020
244eb25
Update wazuh version to 4.0.3 + block remote commands (#425)
Phandora Jan 4, 2021
13ba5ee
Update to wazuh 4.0.4 (#428)
SitoRBJ Jan 14, 2021
f059034
Merge branch 'cloud-0.70' into cloud-0.60
francobep Jan 15, 2021
87580a2
Merge pull request #429 from wazuh/cloud-0.60
francobep Jan 15, 2021
c6225fa
Update Filebeat version to 7.10.0 (#434)
SitoRBJ Feb 3, 2021
40d15ec
Merge branch 'cloud-0.61' into cloud-0.70
Feb 27, 2021
a42a818
Adap to wazuh 4.1.2 (#454)
SitoRBJ Mar 25, 2021
10d87cc
Update Wazuh to v4.1.4 (#458)
SitoRBJ Mar 31, 2021
d29584a
Update Filebeat to 7.10.2 (#460)
SitoRBJ Apr 14, 2021
aeafdf8
update to wazuh 4.1.5 (#471)
SitoRBJ Apr 22, 2021
6854795
Merge branch 'cloud-0.81' into cloud-0.91
Apr 22, 2021
741b530
Adapt cloud to v4.2.1 (#488)
SitoRBJ Sep 16, 2021
848f512
Add utils.py to files mounted that should not be permanent (#520)
SitoRBJ Sep 24, 2021
5b4e9dc
Update Wazuh version to v4.2.4 (#542)
SitoRBJ Nov 8, 2021
84de386
update to v4.2.5
Nov 23, 2021
81e81b1
Adapt cloud 4.3 (#583)
May 23, 2022
85c16a7
Update Wazuh version to v4.3.2 (#661)
Phandora May 31, 2022
e1f46f0
Update Wazuh version to v4.3.3
jesuslinares May 31, 2022
ea0e754
Update Wazuh version to v4.3.4 (#672)
pepitoenpeligro Jun 8, 2022
84c256d
Update Wazuh version to v4.3.5 (#683)
Phandora Jun 30, 2022
d3ec559
Update Wazuh version to v4.3.6 (#699)
Phandora Jul 27, 2022
0bb118d
Fix /var/ossec/queue/rids permissions for 4.3.X when upgrading from 4…
pepitoenpeligro Aug 4, 2022
f2ed432
Adapt Cloud to Wazuh v4.3.6-debug and fix Dockerfile (#710)
francobep Aug 19, 2022
c586c0c
Include gcloud pubsub and buckets files (#723)
pepitoenpeligro Sep 20, 2022
7a2356f
Update Wazuh version to v4.3.8 (#724)
pepitoenpeligro Sep 20, 2022
68198a2
Adapt cloud to Wazuh v4.3.10 (#746)
Phandora Nov 18, 2022
2a2db1b
Adapt cloud to Wazuh v4.4.3 (#863)
sultanovich Jun 15, 2023
8336d36
Adapt cloud code to v4.4.4 (#870)
mingo-devsec Jul 4, 2023
83370ed
New Version: Update WAZUH_VERSION in Dockerfile
sultanovich Jul 13, 2023
91675fe
Adapt cloud code to v4.4.5
francobep Jul 24, 2023
b46c346
Adapt cloud code to v4.5 (#1087)
ejrodriguezm Oct 27, 2023
93d686a
Adapt cloud code to v4.6
francobep Nov 17, 2023
03fbcd8
Fix create_user.py
francobep Nov 28, 2023
a8b2c43
Fix create_user.py
francobep Nov 28, 2023
6f762ff
Adapt Cloud to Wazuh 4.7.1
francobep Dec 6, 2023
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
70 changes: 70 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,16 +1,85 @@
# Change Log
All notable changes to this project will be documented in this file.

## Wazuh Docker v3.10.2_7.3.2

### Added

- Update to Wazuh version 3.10.2_7.3.2

## Wazuh Docker v3.10.0_7.3.2

### Added

- Update to Wazuh version 3.10.0_7.3.2

## Wazuh Docker v3.9.5_7.2.1

### Added

- Update to Wazuh version 3.9.5_7.2.1

## Wazuh Docker v3.9.4_7.2.0

### Added

- Update to Wazuh version 3.9.4_7.2.0
- Implemented Wazuh Filebeat Module ([jm404](https://www.github.com/jm404)) [#2a77c6a](https://github.com/wazuh/wazuh-docker/commit/2a77c6a6e6bf78f2492adeedbade7a507d9974b2)


## Wazuh Docker v3.9.3_7.2.0

### Fixed
- Wazuh-docker reinserts cluster settings after resuming containers ([@manuasir](https://github.com/manuasir)) [#213](https://github.com/wazuh/wazuh-docker/pull/213)

## Wazuh Docker v3.9.2_7.1.1

### Added

- Update to Wazuh version 3.9.2_7.1.1

## Wazuh Docker v3.9.3_6.8.1

### Added

- Update to Wazuh version 3.9.3_6.8.1
- Option to disable additionals X-Pack applications and hide unnecesary management links ([@SitoRBJ](https://github.com/SitoRBJ)) ([#163](https://github.com/wazuh/wazuh-docker/pull/163))


## Wazuh Docker v3.9.2_6.8.0

### Added

- Update to Wazuh version 3.9.2_6.8.0


## Wazuh Docker v3.9.1_7.1.0

### Added

- Support for Elastic v7.1.0
- New environment variables for Kibana ([@manuasir](https://github.com/manuasir)) [#22ad43](https://github.com/wazuh/wazuh-docker/commit/22ad4360f548e54bb0c5e929f8c84a186ad2ab88)

## Wazuh Docker v3.9.1_6.8.0

### Added

- Update to Wazuh version 3.9.1_6.8.0 ([#181](https://github.com/wazuh/wazuh-docker/pull/181))
- Security for Elastic Stack in Docker implemented ([#186](https://github.com/wazuh/wazuh-docker/issues/186))

### Fixed

- Fixed `ELASTICSEARCH_KIBANA_IP` environment variable ([@manuasir](https://github.com/manuasir)) ([#181](https://github.com/wazuh/wazuh-docker/pull/181))


## Wazuh Docker v3.9.1_7.1.0

### Added

- Support for Elastic v7.1.0
- New environment variables for Kibana ([@manuasir](https://github.com/manuasir)) [#22ad43](https://github.com/wazuh/wazuh-docker/commit/22ad4360f548e54bb0c5e929f8c84a186ad2ab88)


## Wazuh Docker v3.9.0_6.7.2

### Changed
Expand All @@ -19,6 +88,7 @@ All notable changes to this project will be documented in this file.

## Wazuh Docker v3.9.0_6.7.1


### Added

- Support for xPACK authorized requests ([@manuasir](https://github.com/manuasir)) ([#119](https://github.com/wazuh/wazuh-docker/pull/119))
Expand Down
47 changes: 20 additions & 27 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,6 @@
In this repository you will find the containers to run:

* wazuh: It runs the Wazuh manager, Wazuh API and Filebeat (for integration with Elastic Stack)
* wazuh-logstash: It is used to receive alerts generated by the manager and feed Elasticsearch using an alerts template
* wazuh-kibana: Provides a web user interface to browse through alerts data. It includes Wazuh plugin for Kibana, that allows you to visualize agents configuration and status.
* wazuh-nginx: Proxies the Kibana container, adding HTTPS (via self-signed SSL certificate) and [Basic authentication](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication#Basic_authentication_scheme).
* wazuh-elasticsearch: An Elasticsearch container (working as a single-node cluster) using Elastic Stack Docker images. **Be aware to increase the `vm.max_map_count` setting, as it's detailed in the [Wazuh documentation](https://documentation.wazuh.com/current/docker/wazuh-container.html#increase-max-map-count-on-your-host-linux).**
Expand All @@ -27,43 +26,37 @@ In addition, a docker-compose file is provided to launch the containers mentione

wazuh-docker
├── docker-compose.yml
├── kibana
│   ├── config
│   │   ├── entrypoint.sh
│   │   └── kibana.yml
│   └── Dockerfile
├── LICENSE
├── logstash
│   ├── config
│   │   ├── 01-wazuh.conf
│   │   └── run.sh
│   └── Dockerfile
├── nginx
│   ├── config
│   │   └── entrypoint.sh
│   └── Dockerfile
├── README.md
├── CHANGELOG.md
├── VERSION
├── test.txt
└── wazuh
├── config
│   ├── data_dirs.env
│   ├── entrypoint.sh
│   ├── filebeat.runit.service
│   ├── filebeat.yml
│   ├── init.bash
│   ├── postfix.runit.service
│   ├── wazuh-api.runit.service
│   └── wazuh.runit.service
└── Dockerfile
├── config
│ ├── 00-decrypt_credentials.sh
│ ├── 01-wazuh.sh
│ ├── 02-set_filebeat_destination.sh
│ ├── 03-config_filebeat.sh
│ ├── 20-ossec-configuration.sh
│ ├── 25-backups.sh
│ ├── 35-remove_credentials_file.sh
│ ├── 85-save_wazuh_version.sh
│ ├── create_user.py
│ ├── entrypoint.sh
│ ├── filebeat_to_elasticsearch.yml
│ ├── filebeat_to_logstash.yml
│ ├── filebeat.runit.service
│ ├── permanent_data.env
│ ├── postfix.runit.service
│ └── wazuh.runit.service
└── Dockerfile


## Branches

* `stable` branch on correspond to the latest Wazuh-Docker stable version.
* `master` branch contains the latest code, be aware of possible bugs on this branch.
* `Wazuh.Version_ElasticStack.Version` (for example 3.9.1_6.8.2) branch. This branch contains the current release referenced in Docker Hub. The container images are installed under the current version of this branch.
* `Wazuh.Version_ElasticStack.Version` (for example 3.10.2_7.3.2) branch. This branch contains the current release referenced in Docker Hub. The container images are installed under the current version of this branch.

## Credits and Thank you

Expand All @@ -76,7 +69,7 @@ We thank you them and everyone else who has contributed to this project.

## License and copyright

Wazuh App Copyright (C) 2019 Wazuh Inc. (License GPLv2)
Wazuh Docker Copyright (C) 2019 Wazuh Inc. (License GPLv2)

## Web references

Expand Down
4 changes: 2 additions & 2 deletions VERSION
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
WAZUH-DOCKER_VERSION="3.9.1_6.8.0"
REVISION="3901"
WAZUH-DOCKER_VERSION="3.11.5_7.3.2"
REVISION="31150"
71 changes: 48 additions & 23 deletions docker-compose.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,56 +3,81 @@ version: '2'

services:
wazuh:
image: wazuh/wazuh:3.9.1_6.8.0
image: wazuh/wazuh:3.10.2_7.3.2
hostname: wazuh-manager
restart: always
ports:
- "1514:1514/udp"
- "1515:1515"
- "514:514/udp"
- "55000:55000"
depends_on:
- logstash
logstash:
image: wazuh/wazuh-logstash:3.9.1_6.8.0
hostname: logstash
restart: always
links:
- elasticsearch:elasticsearch
ports:
- "5000:5000"
depends_on:
- elasticsearch
environment:
- LS_HEAP_SIZE=2048m
# depends_on:
# - logstash
# logstash:
# image: wazuh/wazuh-elasticsearch:3.10.2_7.3.2
# hostname: logstash
# restart: always
# links:
# - elasticsearch:elasticsearch
# ports:
# - "5000:5000"
# depends_on:
# - elasticsearch
# environment:
# - LS_HEAP_SIZE=2048m
# - SECURITY_ENABLED=no
# - SECURITY_LOGSTASH_USER=service_logstash
# - SECURITY_LOGSTASH_PASS=logstash_pass
# - LOGSTASH_OUTPUT=https://elasticsearch:9200
# - ELASTICSEARCH_URL=https://elasticsearch:9200
# - SECURITY_CA_PEM=server.TEST-CA-signed.pem
elasticsearch:
image: wazuh/wazuh-elasticsearch:3.9.1_6.8.0
image: wazuh/wazuh-elasticsearch:3.10.2_7.3.2
hostname: elasticsearch
restart: always
ports:
- "9200:9200"
environment:
- node.name=node-1
- cluster.name=wazuh
- network.host=0.0.0.0
- bootstrap.memory_lock=true
- "ES_JAVA_OPTS=-Xms1g -Xmx1g"
- ELASTICSEARCH_PROTOCOL=http
- ELASTICSEARCH_IP=elasticsearch
- ELASTICSEARCH_PORT=9200
- SECURITY_ENABLED=no
- SECURITY_ELASTIC_PASSWORD=elastic_pass
- SECURITY_MAIN_NODE=elasticsearch
- ELASTIC_CLUSTER=true
- CLUSTER_NODE_MASTER=true
- CLUSTER_MASTER_NODE_NAME=elasticsearch
- CLUSTER_NODE_DATA=true
- CLUSTER_NODE_INGEST=true
- CLUSTER_MAX_NODES=3
ulimits:
memlock:
soft: -1
hard: -1
mem_limit: 2g

kibana:
image: wazuh/wazuh-kibana:3.9.1_6.8.0
image: wazuh/wazuh-kibana:3.10.2_7.3.2
hostname: kibana
restart: always
depends_on:
- elasticsearch
links:
- elasticsearch:elasticsearch
- wazuh:wazuh
environment:
- ELASTICSEARCH_URL=https://elasticsearch:9200
- SECURITY_ENABLED=no
- SECURITY_KIBANA_USER=service_kibana
- SECURITY_KIBANA_PASS=kibana_pass
- ELASTICSEARCH_KIBANA_IP=https://elasticsearch:9200
- SECURITY_CA_PEM=server.TEST-CA-signed.pem
ports:
- "5601:5601"

nginx:
image: wazuh/wazuh-nginx:3.9.1_6.8.0
image: wazuh/wazuh-nginx:3.10.2_7.3.2
hostname: nginx
restart: always
environment:
Expand All @@ -64,4 +89,4 @@ services:
depends_on:
- kibana
links:
- kibana:kibana
- kibana:kibana
51 changes: 0 additions & 51 deletions elasticsearch/Dockerfile

This file was deleted.

33 changes: 0 additions & 33 deletions elasticsearch/config/config_cluster.sh

This file was deleted.

Loading