Commit Graph
53 Commits
Author SHA1 Message Date
Zach Wasserman 9e6ccc4803 Add icloud_private_relay table (#8655) 2022-11-21 10:56:15 -08:00
Artemis TosiniandRoberto Dip a0b11a29d2 Dump pprof when orbit is given a SIGUSR1. Fixes #8456 (#8485)
Co-authored-by: Roberto Dip <me@roperzh.com>
2022-10-28 16:39:47 -04:00
Roberto Dip bd17b38bc3 fix issue in fleet desktop causing it to spam free installations (#8396)
the `switch` statement that checks for errors (including license errors) issues a `continue` before we even have the chance to wait for the ticker.

this has the drawback that premium users will have to wait 5 minutes before they see policy info, but the alternative would be to use labels and go-to, at least with the current code structure.

related to https://github.com/fleetdm/fleet/issues/8373
2022-10-21 09:56:18 -07:00
Marcos Oviedo ec3f49881f 8009 fleet desktop icon duplication (#8017)
* Adding a new synchronization mechanism between fleet-desktop app and Orbit service. Improved windows service teardown to ensure that fleet-desktop does not get force killed without getting signaled. Improved windows process enumeration to avoid unnecessary delays during windows service start and windows service teardown. Updating windows service to reflect service teardown extra time due to synchronization.
2022-10-13 10:58:37 -03:00
Lucas Manuel Rodriguez b016fc8a3a Orbit: Add retries to launchctl bootstrap to fix issue with MDM push (#8187)
* Add retries to launchctl bootstrap to fix MDM push

* Increment retries from 5 to 30
2022-10-12 15:59:01 -03:00
Lucas Manuel Rodriguez 8de3e9f258 Fix Orbit bug when setting empty command_line_flags in agent options (#8176) 2022-10-11 20:11:01 -03:00
Roberto Dip e630fabf89 token rotation for fleet desktop (#7779)
This implements what's described in detail here https://github.com/fleetdm/fleet/blob/main/proposals/fleet-desktop-token-rotation.md
2022-10-10 17:15:35 -03:00
Lucas Manuel Rodriguez a4d7e81475 Orbit to support environments with revoked enroll secrets (#8056)
* Support environments with revoked enroll secrets

* Add instructions on how to fix Orbit enroll

* Rename to last_recorded_error

* Add alternative instructions
2022-10-03 17:28:19 -03:00
Lucas Manuel Rodriguez 3ee29c38ad Orbit: Handle SIGTERM on unix and kill pre-existing fleet-desktop processes at startup (#7966)
* Handle SIGTERM on unix and kill pre-existing fleet-desktop processes at startup

* Add unix build tag

* Remove unused import
2022-09-27 11:57:56 -03:00
Marcos Oviedo 381f628be7 Bug 7874: Adding SCM calls to register Orbit as a windows service (#7934)
* Bug 7874: Adding SCM calls to register Orbit as a windows service
2022-09-27 11:52:41 -03:00
Sharvil Shah 1b59b05862 Orbit enroll retry on unauth (#7928) 2022-09-24 03:16:33 +05:30
Sharvil ShahandRoberto Dip 7d4e2e2b4b Orbit remote management for flags (#7246)
Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
2022-09-24 00:30:23 +05:30
Zach Wasserman c01bf03435 Windows desktop theme detection (#7363)
Windows portion of #6675. Detect dark vs. light theme and change the icon to match (as best as we can).
2022-09-23 10:07:38 -07:00
Marcos Oviedo d5a37dfd1a Bug 6479: Storing proxy certificate in a secure location to avoid unexpected deletion. (#7811)
This prevents proxy certificate used by --insecure mode from being deleted when stored in a user-writable location.
2022-09-19 09:42:53 -03:00
Zach Wasserman 5d35b467d8 Remove errors tooltips from Fleet Desktop menu (#7678)
Now that these errors are available in log files, we think this adds
more confusion for end users.
2022-09-12 08:35:26 -07:00
Roberto Dip 740aafd817 Revert token rotation (#7628)
This reverts all changes related to token rotation.
2022-09-08 15:04:02 -03:00
Roberto DipandMartin Angers 9174c7c711 token rotation for Fleet Desktop (#7517)
See https://github.com/fleetdm/fleet/issues/6348 for a very detailed rundown

Co-authored-by: Martin Angers <martin.n.angers@gmail.com>
2022-09-06 20:25:29 -03:00
Zach Wasserman ecb428a904 Prepare for Orbit 1.1.0 (#7315) 2022-08-19 08:27:50 -07:00
Sharvil Shah 1e62613450 orbit: rename unified_log table from extension to macadmins_unified_log (#7295) 2022-08-19 07:29:14 +05:30
Zach Wasserman 3838ae3a7e Update Orbit changelog for 1.0.0 release (#6678) 2022-07-14 16:03:08 -07:00
Lucas Manuel Rodriguez e92ea532b6 Orbit to cleanup extension socket at startup (#6474)
* Orbit to cleanup extension socket at startup

* Remove extra quote
2022-07-01 16:56:37 -03:00
Roberto Dip d6313c2c15 disable transparency menu item until the device is fully connected (#6439) 2022-06-30 10:30:38 -03:00
Sharvil Shah 7091aa364b Update log location for fleet desktop on macOS (#6420) 2022-06-29 07:54:32 -07:00
Sharvil Shah c59d3249ef Show failed policies count in Fleet Desktop (#6379) 2022-06-24 17:10:05 -07:00
Zach Wasserman 3cf8c06424 Prepare changelog for Orbit v0.0.13 (#6247) 2022-06-16 08:58:34 -07:00
Zach Wasserman 12d915531e Build universal macOS binaries for Orbit (#6208) 2022-06-13 19:43:47 -03:00
Roberto Dip ae21f0b227 use the API specified URL for the transparency link (#6205) 2022-06-13 17:11:19 -03:00
Roberto Dip ef6ae42d86 decouple orbit and Fleet Desktop's logging (#6180) 2022-06-13 15:41:12 -03:00
Lucas Manuel Rodriguez 1406e186be Orbit: Add early update checks before starting sub-systems (#5885)
* Make orbit do a early check of updates

* Support orbit dev-mode

* Add test for NewRunner and Runner.UpdateAction

* Remove unnecessary parallel test
2022-06-01 14:47:04 -03:00
jarnpher_rice 348c67d932 Add WithStdout option for osquery's Runner (#5637)
* Add WithStdout option for osquery's Runner 

fetch the osquery output to do something in other flow

* Create osquery-runner-withstdout

* Update osquery.go
2022-05-31 14:36:19 -03:00
Zach Wasserman efba05f062 Update Orbit changelog for v0.0.12 (#5930) 2022-05-26 16:45:49 -07:00
Sharvil Shah 1365bb6cf8 Fleet Desktop: notify users if policies are failing (#5852) 2022-05-24 01:10:33 +05:30
Zach Wasserman 716e06a7d3 Update changelog for Orbit 0.0.11 (#5672) 2022-05-10 13:09:11 -07:00
Michal NicponandLucas Rodriguez 15c69058bb fix SELinux issue (#5335)
Install orbit to /opt instead of /var/lib. When installing to /var/lib,
the default selinux context of var_lib_t gets applied, which results in
an AVC error when running via systemd.

Co-authored-by: Lucas Rodriguez <lucas@fleetdm.com>
2022-05-02 12:18:59 -06:00
Lucas Manuel Rodriguez f2e8329e57 Changes to support fleetctl preview with custom TUF server (#5418) 2022-04-27 18:17:20 -03:00
Lucas Manuel Rodriguez a2d3b91de2 Prepare for Orbit 0.0.10 (#5387) 2022-04-26 15:09:25 -07:00
Lucas Manuel Rodriguez 6fb4f5b21c Revert orbit's remote osquery paths to use legacy v1 (#5368) 2022-04-26 13:12:44 -03:00
Zach Wasserman eba0047b47 Prepare for Orbit 0.0.9 (#5282) 2022-04-20 16:51:37 -07:00
Zach WassermanandLucas Manuel Rodriguez d15957b431 Make Orbit update interval configurable (#5032)
* Make Orbit update interval configurable

- Also increase default interval from 10s to 15m

* Add update-interval configuration to fleetctl package (#5050)

Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
2022-04-11 17:42:36 -03:00
Lucas Manuel Rodriguez 72629635a5 Update Orbit changelog for 0.0.8 (#4810) 2022-03-31 16:43:37 -03:00
Zach Wasserman d0630b00e1 Allow Orbit shell to run while daemon is running (#4772)
Use a different data path so that the new osquery instance doesn't try
to use the same pidfile, db file, extension socket, etc.

#4769
2022-03-23 15:27:52 -07:00
Zach Wasserman b9beb6c2de Update Orbit changelog for 0.0.7 (#4520) 2022-03-08 12:58:45 -08:00
Lucas Manuel Rodriguez b5be858071 Fix update checks for orbit at startup (#3835)
* Fix update checks for orbit at startup

* Add tests

* Add scripts for testing local TUF server

* Remove -x used for debugging
2022-02-23 14:58:07 -03:00
Lucas Manuel Rodriguez e39ba93a90 Orbit to wait for osqueryd extension manager socket to be ready (#3836)
* Wait for osquery extension manager socket to be ready

* PR review feedback

* Add WIP Github Action to test orbit

* Set fleet address on fleetctl

* Add logging for troubleshooting

* Add prepare db statement

* Use tls-skip-verify on fleetctl

* Move steps around

* Fix addresses

* Fix fleetctl path

* Add certs.pem to orbit root dir

* Add orbit logs

* Increase timeout

* Add proper orbit log paths

* Fix tmp path orbit

* Add get hosts command to troubleshoot

* Fix orbit job termination

* Add comments to workflows

* Wait for server to go down

* Add orbit Windows job

* Use bash on windws-latest

* Fix missing quote

* Run orbit on Ubuntu

* Bump host count

* Increase timeout for extensions and not terminate on err

* Add comment to clarify high timeout value

* Revert change, we do want to exit in case of err
2022-02-22 15:05:32 -03:00
Tomas Touceda fee7fae579 Set log path to root-dir when calling osquery (#4237)
* Set log path to root-dir when calling osquery

* Update based on review and set filesystem,tls as logging plugin
2022-02-17 09:03:54 -03:00
Zach Wasserman 51b19b445f Prepare for Orbit 0.0.5 release (#3478) 2021-12-22 16:02:26 -08:00
Zach Wasserman d377923750 Fix handling of enroll secret env vars in Orbit (#3458) 2021-12-22 15:57:09 -08:00
Zach Wasserman 3ff3d35f45 Update Orbit changelog for 0.0.4 release (#3415) 2021-12-19 17:38:10 -08:00
Zach Wasserman 73ee2c6b16 Add changes files 2021-11-18 16:52:53 -08:00
Zach Wasserman 01f136313d Use UUID as default host identifier for Orbit (#3008)
This matches the default identifier used in Fleet's prior recommended
osquery installation, easing migration for users. It can still be
overridden via a flagfile.
2021-11-18 15:15:28 -08:00