Merge branch '4.10.0' into enhancement/20-rework-distributed-workflow…

…-development

.github/actions/offline-installation/common.sh

@@ -0,0 +1,317 @@
+#!/bin/bash
+
+function check_package() {
+
+    if [ "${sys_type}" == "deb" ]; then
+        if ! apt list --installed 2>/dev/null | grep -q "${1}"; then
+            echo "INFO: The package "${1}" is not installed."
+            return 1
+        fi
+    elif [ "${sys_type}" == "rpm" ]; then
+        if ! yum list installed 2>/dev/null | grep -q "${1}"; then
+            echo "INFO: The package "${1}" is not installed."
+            return 1
+        fi
+    fi
+    return 0
+
+}
+
+function check_system() {
+
+    if [ -n "$(command -v yum)" ]; then
+        sys_type="rpm"
+        echo "INFO: RPM system detected."
+    elif [ -n "$(command -v apt-get)" ]; then
+        sys_type="deb"
+        echo "INFO: DEB system detected."
+    else
+        echo "ERROR: could not detect the system."
+        exit 1
+    fi
+
+}
+
+function check_file() {
+
+    if [ ! -f "${1}" ]; then
+        echo "ERROR: The ${1} file could not be downloaded."
+        exit 1
+    fi
+
+}
+
+function check_shards() {
+
+    retries=0
+    until [ "$(curl -s -k -u admin:admin "https://127.0.0.1:9200/_template/wazuh?pretty&filter_path=wazuh.settings.index.number_of_shards" | grep "number_of_shards")" ] || [ "${retries}" -eq 5 ]; do
+        sleep 5
+        retries=$((retries+1))
+    done
+
+    if [ ${retries} -eq 5 ]; then
+        echo "ERROR: Could not get the number of shards."
+        exit 1
+    fi
+    curl -s -k -u admin:admin "https://127.0.0.1:9200/_template/wazuh?pretty&filter_path=wazuh.settings.index.number_of_shards"
+    echo "INFO: Number of shards detected."
+
+}
+
+function dashboard_installation() {
+
+    install_package "wazuh-dashboard"
+    check_package "wazuh-dashboard"
+
+    echo "INFO: Generating certificates of the Wazuh dashboard..."
+    NODE_NAME=dashboard
+    mkdir /etc/wazuh-dashboard/certs
+    mv -n wazuh-certificates/$NODE_NAME.pem /etc/wazuh-dashboard/certs/dashboard.pem
+    mv -n wazuh-certificates/$NODE_NAME-key.pem /etc/wazuh-dashboard/certs/dashboard-key.pem
+    cp wazuh-certificates/root-ca.pem /etc/wazuh-dashboard/certs/
+    chmod 500 /etc/wazuh-dashboard/certs
+    chmod 400 /etc/wazuh-dashboard/certs/*
+    chown -R wazuh-dashboard:wazuh-dashboard /etc/wazuh-dashboard/certs
+
+    if [ "${sys_type}" == "deb" ]; then
+        enable_start_service "wazuh-dashboard"
+    elif [ "${sys_type}" == "rpm" ]; then
+        /usr/share/wazuh-dashboard/bin/opensearch-dashboards "-c /etc/wazuh-dashboard/opensearch_dashboards.yml" --allow-root > /dev/null 2>&1 &
+    fi
+
+    retries=0
+    # In this context, 302 HTTP code refers to SSL certificates warning: success.
+    until [ "$(curl -k -s -I -w "%{http_code}" https://127.0.0.1 -o /dev/null --fail)" -ne "302" ] || [ "${retries}" -eq 5 ]; do
+        echo "INFO: Sleeping 10 seconds."
+        sleep 10
+        retries=$((retries+1))
+    done
+    if [ ${retries} -eq 5 ]; then
+        echo "ERROR: The Wazuh dashboard installation has failed."
+        exit 1
+    else
+        echo "INFO: The Wazuh dashboard is ready."
+    fi
+
+}
+
+function download_resources() {
+
+    check_file "${ABSOLUTE_PATH}"/wazuh-install.sh
+    bash "${ABSOLUTE_PATH}"/wazuh-install.sh -dw "${sys_type}"
+    echo "INFO: Downloading the resources..."
+
+    curl -sO https://packages.wazuh.com/4.10/config.yml
+    check_file "config.yml"
+
+    sed -i -e '0,/<indexer-node-ip>/ s/<indexer-node-ip>/127.0.0.1/' config.yml
+    sed -i -e '0,/<wazuh-manager-ip>/ s/<wazuh-manager-ip>/127.0.0.1/' config.yml
+    sed -i -e '0,/<dashboard-node-ip>/ s/<dashboard-node-ip>/127.0.0.1/' config.yml
+
+    curl -sO https://packages.wazuh.com/4.10/wazuh-certs-tool.sh
+    check_file "wazuh-certs-tool.sh"
+    chmod 744 wazuh-certs-tool.sh
+    ./wazuh-certs-tool.sh --all
+
+    tar xf wazuh-offline.tar.gz
+    echo "INFO: Download finished."
+
+    if [ ! -d ./wazuh-offline ]; then
+        echo "ERROR: Could not download the resources."
+        exit 1
+    fi
+
+}
+
+function enable_start_service() {
+
+    systemctl daemon-reload
+    systemctl enable "${1}"
+    systemctl start "${1}"
+
+    retries=0
+    until [ "$(systemctl status "${1}" | grep "active")" ] || [ "${retries}" -eq 3 ]; do
+        sleep 2
+        retries=$((retries+1))
+        systemctl start "${1}"
+    done
+
+    if [ ${retries} -eq 3 ]; then
+        echo "ERROR: The "${1}" service could not be started."
+        exit 1
+    fi
+
+}
+
+function filebeat_installation() {
+
+    install_package "filebeat"
+    check_package "filebeat"
+
+    cp ./wazuh-offline/wazuh-files/filebeat.yml /etc/filebeat/ &&\
+    cp ./wazuh-offline/wazuh-files/wazuh-template.json /etc/filebeat/ &&\
+    chmod go+r /etc/filebeat/wazuh-template.json
+
+    sed -i 's|\("index.number_of_shards": \)".*"|\1 "1"|' /etc/filebeat/wazuh-template.json
+    filebeat keystore create
+    echo admin | filebeat keystore add username --stdin --force
+    echo admin | filebeat keystore add password --stdin --force
+    tar -xzf ./wazuh-offline/wazuh-files/wazuh-filebeat-0.4.tar.gz -C /usr/share/filebeat/module
+
+    echo "INFO: Generating certificates of Filebeat..."
+    NODE_NAME=wazuh-1
+    mkdir /etc/filebeat/certs
+    mv -n wazuh-certificates/$NODE_NAME.pem /etc/filebeat/certs/filebeat.pem
+    mv -n wazuh-certificates/$NODE_NAME-key.pem /etc/filebeat/certs/filebeat-key.pem
+    cp wazuh-certificates/root-ca.pem /etc/filebeat/certs/
+    chmod 500 /etc/filebeat/certs
+    chmod 400 /etc/filebeat/certs/*
+    chown -R root:root /etc/filebeat/certs
+
+    if [ "${sys_type}" == "deb" ]; then
+        enable_start_service "filebeat"
+    elif [ "${sys_type}" == "rpm" ]; then
+        /usr/share/filebeat/bin/filebeat --environment systemd -c /etc/filebeat/filebeat.yml --path.home /usr/share/filebeat --path.config /etc/filebeat --path.data /var/lib/filebeat --path.logs /var/log/filebeat &
+    fi
+
+    sleep 10
+    check_shards
+    eval "filebeat test output"
+    if [ "${PIPESTATUS[0]}" != 0 ]; then
+        echo "ERROR: The Filebeat installation has failed."
+        exit 1
+    fi
+
+}
+
+function indexer_initialize() {
+
+    retries=0
+    until [ "$(cat /var/log/wazuh-indexer/wazuh-cluster.log | grep "Node started")" ] || [ "${retries}" -eq 5 ]; do
+        sleep 5
+        retries=$((retries+1))
+    done
+
+    if [ ${retries} -eq 5 ]; then
+        echo "ERROR: The indexer node is not started."
+        exit 1
+    fi
+    /usr/share/wazuh-indexer/bin/indexer-security-init.sh
+
+}
+
+function indexer_installation() {
+
+    if [ "${sys_type}" == "rpm" ]; then
+        rpm --import ./wazuh-offline/wazuh-files/GPG-KEY-WAZUH
+    fi
+
+    install_package "wazuh-indexer"
+    check_package "wazuh-indexer"
+
+    echo "INFO: Generating certificates of the Wazuh indexer..."
+    NODE_NAME=node-1
+    mkdir /etc/wazuh-indexer/certs
+    mv -n wazuh-certificates/$NODE_NAME.pem /etc/wazuh-indexer/certs/indexer.pem
+    mv -n wazuh-certificates/$NODE_NAME-key.pem /etc/wazuh-indexer/certs/indexer-key.pem
+    mv wazuh-certificates/admin-key.pem /etc/wazuh-indexer/certs/
+    mv wazuh-certificates/admin.pem /etc/wazuh-indexer/certs/
+    cp wazuh-certificates/root-ca.pem /etc/wazuh-indexer/certs/
+    chmod 500 /etc/wazuh-indexer/certs
+    chmod 400 /etc/wazuh-indexer/certs/*
+    chown -R wazuh-indexer:wazuh-indexer /etc/wazuh-indexer/certs
+
+    sed -i 's|\(network.host: \)"0.0.0.0"|\1"127.0.0.1"|' /etc/wazuh-indexer/opensearch.yml
+
+    if [ "${sys_type}" == "rpm" ]; then
+        runuser "wazuh-indexer" --shell="/bin/bash" --command="OPENSEARCH_PATH_CONF=/etc/wazuh-indexer /usr/share/wazuh-indexer/bin/opensearch" > /dev/null 2>&1 &
+        sleep 5
+    elif [ "${sys_type}" == "deb" ]; then
+        enable_start_service "wazuh-indexer"
+    fi
+
+    indexer_initialize
+    sleep 10
+    eval "curl -s -XGET https://127.0.0.1:9200 -u admin:admin -k --fail"
+    if [ "${PIPESTATUS[0]}" != 0 ]; then
+        echo "ERROR: The Wazuh indexer installation has failed."
+        exit 1
+    fi
+
+}
+
+function install_dependencies() {
+
+    if [ "${sys_type}" == "rpm" ]; then
+        dependencies=( util-linux initscripts openssl )
+        not_installed=()
+        for dep in "${dependencies[@]}"; do
+            if [ "${dep}" == "openssl" ]; then
+                if ! yum list installed 2>/dev/null | grep -q "${dep}\.";then
+                    not_installed+=("${dep}")
+                fi
+            elif ! yum list installed 2>/dev/null | grep -q "${dep}";then
+                not_installed+=("${dep}")
+            fi
+        done
+
+        if [ "${#not_installed[@]}" -gt 0 ]; then
+            echo "--- Dependencies ---"
+            for dep in "${not_installed[@]}"; do
+                echo "Installing $dep."
+                eval "yum install ${dep} -y"
+                if [  "${PIPESTATUS[0]}" != 0  ]; then
+                    echo "ERROR: Cannot install dependency: ${dep}."
+                    exit 1
+                fi
+            done
+        fi
+
+    elif [ "${sys_type}" == "deb" ]; then
+        eval "apt-get update -q > /dev/null"
+        dependencies=( openssl )
+        not_installed=()
+
+        for dep in "${dependencies[@]}"; do
+            if ! apt list --installed 2>/dev/null | grep -q "${dep}"; then
+                not_installed+=("${dep}")
+            fi
+        done
+
+        if [ "${#not_installed[@]}" -gt 0 ]; then
+            echo "--- Dependencies ----"
+            for dep in "${not_installed[@]}"; do
+                echo "Installing $dep."
+                apt-get install -y "${dep}"
+                if [ "${install_result}" != 0 ]; then
+                    echo "ERROR: Cannot install dependency: ${dep}."
+                    exit 1
+                fi
+            done
+        fi
+    fi
+
+}
+
+function install_package() {
+
+    if [ "${sys_type}" == "deb" ]; then
+        dpkg -i ./wazuh-offline/wazuh-packages/"${1}"*.deb
+    elif [ "${sys_type}" == "rpm" ]; then
+        rpm -ivh ./wazuh-offline/wazuh-packages/"${1}"*.rpm
+    fi
+
+}
+
+function manager_installation() {
+
+    install_package "wazuh-manager"
+    check_package "wazuh-manager"
+
+    if [ "${sys_type}" == "deb" ]; then
+        enable_start_service "wazuh-manager"
+    elif [ "${sys_type}" == "rpm" ]; then
+        /var/ossec/bin/wazuh-control start
+    fi
+
+}

.github/actions/offline-installation/offline-installation.sh

@@ -0,0 +1,21 @@
+#!/bin/bash
+
+# Gets the absolute path of the script, used to load the common.sh file
+ABSOLUTE_PATH="$( cd $(dirname ${0}) ; pwd -P )"
+. ${ABSOLUTE_PATH}/common.sh
+
+check_system
+install_dependencies
+download_resources
+
+indexer_installation
+echo "INFO: Wazuh indexer installation completed."
+
+manager_installation
+echo "INFO: Wazuh manager installation completed."
+
+filebeat_installation
+echo "INFO: Filebeat installation completed."
+
+dashboard_installation
+echo "INFO: Wazuh dashboard installation completed."

.github/actions/passwords-tool/tests-stack-failure.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+apiPass="$(cat wazuh-install-files/wazuh-passwords.txt | awk "/username: 'wazuh'/{getline;print;}" | awk '{ print $2 }' | tr -d \' )"
+adminPass="$(cat wazuh-install-files/wazuh-passwords.txt | awk "/username: 'admin'/{getline;print;}" | awk '{ print $2 }' | tr -d \')"
+
+if ! bash wazuh-passwords-tool.sh -u wazuuuh | grep "ERROR"; then
+   exit 1
+elif ! sudo bash wazuh-passwords-tool.sh -u admin -p password | grep "ERROR"; then
+   exit 1 
+elif ! sudo bash wazuh-passwords-tool.sh -au wazuh -ap "${adminPass}" -u wazuh -p password -A | grep "ERROR"; then
+   exit 1
+elif ! curl -s -u wazuh:wazuh -k -X POST "https://127.0.0.1:55000/security/user/authenticate" | grep "Invalid credentials"; then
+   exit 1
+elif ! curl -s -u wazuuh:"${apiPass}" -k -X POST "https://127.0.0.1:55000/security/user/authenticate" | grep "Invalid credentials"; then
+   exit 1
+elif ! curl -s -XGET https://127.0.0.1:9200/ -u admin:admin -k | grep "Unauthorized"; then
+   exit 1
+elif ! curl -s -XGET https://127.0.0.1:9200/ -u adminnnn:"${adminPass}" -k | grep "Unauthorized"; then
+   exit 1
+fi