Commit Graph
86 Commits
Author SHA1 Message Date
Zach Wasserman 39b01ef7dc Update .gitignore 2021-03-11 13:02:19 -08:00
Zach Wasserman 42a781dc2d Fix Linux packaging
We no longer pull the Orbit file from the local fileystem.
2021-03-11 13:01:17 -08:00
Zach Wasserman ae39d9339b Fix loading of update URL from flag 2021-03-11 12:48:29 -08:00
Mike McNeil 705d6bb2e9 add 30s recommendation 2021-03-11 14:32:46 -06:00
Mike McNeil 835f22a6ab add link to report bugs (#7) 2021-03-11 14:17:23 -06:00
Mike McNeil cf940ea0cf Update README.md (#6) 2021-03-11 14:11:52 -06:00
noahtalerman 579ff15506 Add enroll secret section (#4) 2021-03-11 13:55:08 -06:00
Zach Wasserman 6c4c6e3c61 Update goreleaser configuration
Add signing, separate archives, release configuration
2021-03-11 09:50:53 -08:00
Zach Wasserman be6a282315 Add version command and flag 2021-03-10 19:21:00 -08:00
Zach Wasserman be596e0949 Add new trust root for production TUF repo 2021-03-10 18:45:13 -08:00
Zach Wasserman f5792a0746 Make update server URL configurable
Configurable in both packaging and orbit invocations
2021-03-10 14:42:02 -08:00
Zach Wasserman 24f9a4c4d8 Update signing cert and notarization username 2021-03-10 14:40:20 -08:00
Zach Wasserman 77cecd87ac Improve link to try fleet 2021-03-10 10:54:32 -08:00
Mike McNeil 2be04d0bd8 quickstart (first draft) (#1)
* quickstart (first draft)

* test.fleetdm.com » fleet.example.com
2021-03-10 11:45:47 -06:00
Zach Wasserman b1b6017a26 Update packaging information 2021-03-09 16:36:34 -08:00
Zach Wasserman 45d99fc3b6 Add support for configuring update channels in packaging 2021-03-09 16:27:35 -08:00
Zach Wasserman d9839204c5 Update README for .rpm package support 2021-03-09 15:40:27 -08:00
Zach Wasserman aa562c3a52 Set default config_refresh in fleet flags
This ensures we don't end up in a state where osquery does not check in
for config updates.
2021-03-09 15:37:11 -08:00
Zach Wasserman f38206a927 Move shell to separate file 2021-03-09 15:36:57 -08:00
Zach Wasserman ad9f9be411 Add debug flag support for packaging 2021-03-09 15:22:17 -08:00
Zach Wasserman 8a13bfd22e Change launchctl restart mechanism
- Don't `stop` before `unload` -- The job will attempt to restart
- anyway.
- Ensure job is enabled.
2021-03-09 12:46:57 -08:00
Zach Wasserman fc6e6afd34 Add support for RPM packages
This was thankfully made easy by NFPM!

Refactored the DEB packaging so that the code is almost entirely shared
between the two.
2021-03-02 17:19:24 -08:00
Zach Wasserman b1b3f97ada Fix DEB packaging
- Handle restarts properly
- Change symlinking
2021-03-02 13:07:53 -08:00
Zach Wasserman 34d48bac35 Add Orbit itself to update runner
Now Orbit will attempt to autoupdate Orbit.
2021-03-02 13:07:26 -08:00
Zach Wasserman b154b596c0 Prevent insecure and fleet-certificate from being packaged together
These were already not allowed on Orbit startup.
2021-03-02 12:05:56 -08:00
Zach Wasserman 73be4c0fe9 Update README with usage information 2021-03-02 11:26:20 -08:00
Zach Wasserman b8c95154ac Simplify shell command startup 2021-03-02 11:25:26 -08:00
Zach Wasserman 85b0853ebd Remove config_path from osquery flags
This was not used previously due to conflicting flags
2021-03-02 11:24:57 -08:00
Zach Wasserman bc39118883 Use symlink for current orbit binary 2021-03-02 11:24:32 -08:00
Zach Wasserman 643201a8ef Add logs directory to macos cleanup script 2021-03-02 11:24:02 -08:00
Zach Wasserman 7e4d661e84 Move osqueryd run message to info log 2021-03-01 11:16:38 -08:00
Zach Wasserman 4bc6b8afeb Ensure Fleet URL is prefixed with https 2021-03-01 11:16:19 -08:00
Zach Wasserman a22eb16845 Add support for packaging certificates
- Refactor update initialization
2021-02-25 12:38:21 -08:00
Zach Wasserman bb6a785309 Clean up URL parsing in proxy 2021-02-24 16:49:26 -08:00
Zach Wasserman d9f979d277 Improve connection compatibility
- Properly handle URL prefixes in Fleet server
- Allow specifying certificate with `--fleet-certificate`
- Add check for TLS connection on startup
2021-02-24 16:36:55 -08:00
Zach Wasserman 47d68c4ca0 Allow TLS proxy to handle wider range of input
Supports URL with and without https:// prefix.
2021-02-24 11:11:43 -08:00
Zach Wasserman 212f8c3425 Rename build-go workflow 2021-02-22 16:58:30 -08:00
Zach Wasserman 44a29b86ed Cleaning and fix lint 2021-02-22 16:57:31 -08:00
Zach Wasserman 8120c2742e Add MIT license 2021-02-22 16:53:11 -08:00
Zach Wasserman a96dee0f24 Add TODO sections in readme 2021-02-22 16:51:58 -08:00
Zach Wasserman a6ab68b393 Initial README 2021-02-22 16:47:51 -08:00
Zach Wasserman 888056bc62 Add macos cleanup script
Cleans up an install of Orbit on macOS.
2021-02-22 14:53:13 -08:00
Zach Wasserman 736dbbc600 Add update runner
Runner handles watching for updates in the background and exiting the
Orbit process after a successful update.
2021-02-22 14:52:21 -08:00
Zach Wasserman c4a5785427 Cleanup and rename version to channel 2021-02-20 11:24:44 -08:00
Zach Wasserman d97c4972f3 Allow enroll secret to read from file
This is needed to be able to secure the enroll secret while maintaining
standard file permissions for the macOS launchd plist.

Also moves the default directory from /var/lib/fleet/orbit to
/var/lib/orbit.
2021-02-17 16:22:27 -08:00
Zach Wasserman bc58206b96 Make macOS notarization optional for packaging 2021-02-17 16:22:03 -08:00
Zach Wasserman c1dc28d32c Fix lint 2021-02-17 13:39:25 -08:00
Zach Wasserman da733d141a Code signing and Notarization for macOS 2021-02-17 13:25:56 -08:00
Zach Wasserman be3d70537b macOS packaging works with launchd 2021-02-16 18:05:18 -08:00
Zach Wasserman b0ad96b228 Partial progress on macOS packaging 2021-02-08 19:23:50 -08:00