Zach Wasserman
39b01ef7dc
Update .gitignore
2021-03-11 13:02:19 -08:00
Zach Wasserman
42a781dc2d
Fix Linux packaging
...
We no longer pull the Orbit file from the local fileystem.
2021-03-11 13:01:17 -08:00
Zach Wasserman
ae39d9339b
Fix loading of update URL from flag
2021-03-11 12:48:29 -08:00
Mike McNeil
705d6bb2e9
add 30s recommendation
2021-03-11 14:32:46 -06:00
Mike McNeil
835f22a6ab
add link to report bugs ( #7 )
2021-03-11 14:17:23 -06:00
Mike McNeil
cf940ea0cf
Update README.md ( #6 )
2021-03-11 14:11:52 -06:00
noahtalerman
579ff15506
Add enroll secret section ( #4 )
2021-03-11 13:55:08 -06:00
Zach Wasserman
6c4c6e3c61
Update goreleaser configuration
...
Add signing, separate archives, release configuration
2021-03-11 09:50:53 -08:00
Zach Wasserman
be6a282315
Add version command and flag
2021-03-10 19:21:00 -08:00
Zach Wasserman
be596e0949
Add new trust root for production TUF repo
2021-03-10 18:45:13 -08:00
Zach Wasserman
f5792a0746
Make update server URL configurable
...
Configurable in both packaging and orbit invocations
2021-03-10 14:42:02 -08:00
Zach Wasserman
24f9a4c4d8
Update signing cert and notarization username
2021-03-10 14:40:20 -08:00
Zach Wasserman
77cecd87ac
Improve link to try fleet
2021-03-10 10:54:32 -08:00
Mike McNeil
2be04d0bd8
quickstart (first draft) ( #1 )
...
* quickstart (first draft)
* test.fleetdm.com » fleet.example.com
2021-03-10 11:45:47 -06:00
Zach Wasserman
b1b6017a26
Update packaging information
2021-03-09 16:36:34 -08:00
Zach Wasserman
45d99fc3b6
Add support for configuring update channels in packaging
2021-03-09 16:27:35 -08:00
Zach Wasserman
d9839204c5
Update README for .rpm package support
2021-03-09 15:40:27 -08:00
Zach Wasserman
aa562c3a52
Set default config_refresh in fleet flags
...
This ensures we don't end up in a state where osquery does not check in
for config updates.
2021-03-09 15:37:11 -08:00
Zach Wasserman
f38206a927
Move shell to separate file
2021-03-09 15:36:57 -08:00
Zach Wasserman
ad9f9be411
Add debug flag support for packaging
2021-03-09 15:22:17 -08:00
Zach Wasserman
8a13bfd22e
Change launchctl restart mechanism
...
- Don't `stop` before `unload` -- The job will attempt to restart
- anyway.
- Ensure job is enabled.
2021-03-09 12:46:57 -08:00
Zach Wasserman
fc6e6afd34
Add support for RPM packages
...
This was thankfully made easy by NFPM!
Refactored the DEB packaging so that the code is almost entirely shared
between the two.
2021-03-02 17:19:24 -08:00
Zach Wasserman
b1b3f97ada
Fix DEB packaging
...
- Handle restarts properly
- Change symlinking
2021-03-02 13:07:53 -08:00
Zach Wasserman
34d48bac35
Add Orbit itself to update runner
...
Now Orbit will attempt to autoupdate Orbit.
2021-03-02 13:07:26 -08:00
Zach Wasserman
b154b596c0
Prevent insecure and fleet-certificate from being packaged together
...
These were already not allowed on Orbit startup.
2021-03-02 12:05:56 -08:00
Zach Wasserman
73be4c0fe9
Update README with usage information
2021-03-02 11:26:20 -08:00
Zach Wasserman
b8c95154ac
Simplify shell command startup
2021-03-02 11:25:26 -08:00
Zach Wasserman
85b0853ebd
Remove config_path from osquery flags
...
This was not used previously due to conflicting flags
2021-03-02 11:24:57 -08:00
Zach Wasserman
bc39118883
Use symlink for current orbit binary
2021-03-02 11:24:32 -08:00
Zach Wasserman
643201a8ef
Add logs directory to macos cleanup script
2021-03-02 11:24:02 -08:00
Zach Wasserman
7e4d661e84
Move osqueryd run message to info log
2021-03-01 11:16:38 -08:00
Zach Wasserman
4bc6b8afeb
Ensure Fleet URL is prefixed with https
2021-03-01 11:16:19 -08:00
Zach Wasserman
a22eb16845
Add support for packaging certificates
...
- Refactor update initialization
2021-02-25 12:38:21 -08:00
Zach Wasserman
bb6a785309
Clean up URL parsing in proxy
2021-02-24 16:49:26 -08:00
Zach Wasserman
d9f979d277
Improve connection compatibility
...
- Properly handle URL prefixes in Fleet server
- Allow specifying certificate with `--fleet-certificate`
- Add check for TLS connection on startup
2021-02-24 16:36:55 -08:00
Zach Wasserman
47d68c4ca0
Allow TLS proxy to handle wider range of input
...
Supports URL with and without https:// prefix.
2021-02-24 11:11:43 -08:00
Zach Wasserman
212f8c3425
Rename build-go workflow
2021-02-22 16:58:30 -08:00
Zach Wasserman
44a29b86ed
Cleaning and fix lint
2021-02-22 16:57:31 -08:00
Zach Wasserman
8120c2742e
Add MIT license
2021-02-22 16:53:11 -08:00
Zach Wasserman
a96dee0f24
Add TODO sections in readme
2021-02-22 16:51:58 -08:00
Zach Wasserman
a6ab68b393
Initial README
2021-02-22 16:47:51 -08:00
Zach Wasserman
888056bc62
Add macos cleanup script
...
Cleans up an install of Orbit on macOS.
2021-02-22 14:53:13 -08:00
Zach Wasserman
736dbbc600
Add update runner
...
Runner handles watching for updates in the background and exiting the
Orbit process after a successful update.
2021-02-22 14:52:21 -08:00
Zach Wasserman
c4a5785427
Cleanup and rename version to channel
2021-02-20 11:24:44 -08:00
Zach Wasserman
d97c4972f3
Allow enroll secret to read from file
...
This is needed to be able to secure the enroll secret while maintaining
standard file permissions for the macOS launchd plist.
Also moves the default directory from /var/lib/fleet/orbit to
/var/lib/orbit.
2021-02-17 16:22:27 -08:00
Zach Wasserman
bc58206b96
Make macOS notarization optional for packaging
2021-02-17 16:22:03 -08:00
Zach Wasserman
c1dc28d32c
Fix lint
2021-02-17 13:39:25 -08:00
Zach Wasserman
da733d141a
Code signing and Notarization for macOS
2021-02-17 13:25:56 -08:00
Zach Wasserman
be3d70537b
macOS packaging works with launchd
2021-02-16 18:05:18 -08:00
Zach Wasserman
b0ad96b228
Partial progress on macOS packaging
2021-02-08 19:23:50 -08:00