Commit Graph
14287 Commits
Author SHA1 Message Date
Gabriel Hernandez c71237daa2 add error message for host having mdm off to host details (#23080)
relates to #22041

This adds an error message when refetching a host when mdm is not turned
on for it. This was accidentally added to the My Device page, so we are
moving it to the Host details page.
2024-10-23 18:15:53 +01:00
Jahziel Villasana-Espinoza aaea56de2b fix: various setup experience bugs (#23091)
> No issue, just stuff I noticed while testing

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [x] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-10-23 13:06:54 -04:00
Sam PflugerandEric 010f80d594 Add Scott MacVicar (#23111)
<img width="330" alt="image"
src="https://github.com/user-attachments/assets/454df86f-bea8-4392-a50e-df84a68703f6">

@eashaw, can I get your help with this part?  
- [ ] Then make Scott's one of the default quotes on the
device-management page, and on the contact form and wherever else eric
shaw thinks it belongs.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-10-23 12:06:03 -05:00
aysiu b5c0e61f7d Enable launch daemon before trying to bootstrap it (#22764)
## Description
Moves the enabling of the launch daemon to before trying to launch it,
so it doesn't fail if the launch daemon is disabled

## Testing Done
launch daemon is enabled
```
 launchctl print system | grep fleetdm
		   78074      - 	com.fleetdm.orbit
		"com.fleetdm.orbit" => enabled
```
uninstalling FleetDM via
https://github.com/fleetdm/fleet/blob/main/orbit/tools/cleanup/cleanup_macos.sh
```
sudo ~/Desktop/removefleet.sh 
Removing fleet, system will be unenrolled in 15 seconds...
Executing detached child process
```
launch daemon is still enabled:
```
launchctl print system | grep fleetdm   
		   78074      - 	com.fleetdm.orbit
		"com.fleetdm.orbit" => enabled
```
If I manually disable the launch daemon...
```
sudo launchctl disable system/com.fleetdm.orbit
```
```
launchctl print system | grep fleetdm          
		       0     78 	com.fleetdm.orbit
		"com.fleetdm.orbit" => disabled
```
... then the install will fail:
```
sudo installer -pkg ~/Desktop/fleet-osquery-1.18.3.pkg -target /
installer: Package name is Fleet osquery
installer: Installing at base path /
installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “fleet-osquery-1.18.3.pkg”.)
```
Excerpt from `/var/log/install.log`:
```
2024-10-08 15:00:57-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:00:57-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:00:58-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:00:58-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:00:59-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:00:59-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:01:00-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:01:00-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:01:01-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:01:01-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:01:02-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:01:02-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:01:03-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:01:03-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:01:04-07 HOSTNAME package_script_service[80350]: ./postinstall: Failed to bootstrap system /Library/LaunchDaemons/com.fleetdm.orbit.plist
```
If I then enable the launch daemon...
```
sudo launchctl enable system/com.fleetdm.orbit  
```
```
launchctl print system | grep fleetdm                           
		"com.fleetdm.orbit" => enabled
```
... then the postinstall in the pkg works fine:
```
sudo installer -pkg ~/Desktop/fleet-osquery-1.18.3.pkg -target /
installer: Package name is Fleet osquery
installer: Installing at base path /
installer: The install was successful.
```
So, yeah, the enabling has to be before the launching of the launch
daemon.
2024-10-23 13:54:41 -03:00
Gabriel Hernandez d5e11a212b Fix UI build (#23129)
quick fix to fix the ui build failing
2024-10-23 17:30:54 +01:00
Mike McNeilandEric 4d6a81c564 Update testimonials.yml (#22483)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-10-23 10:54:31 -05:00
Rachael Shaw 8fa5aafa9d Update configuration docs (#22990)
Move `license.enforce_host_limit` to contributor docs
2024-10-23 10:50:08 -05:00
Lucas Manuel Rodriguez c1835c6a01 Document umask requirement for fleetctl package (#23120)
Documentation for #22877.
2024-10-23 10:49:43 -05:00
Brock Walters b12f8695a2 Update windows-mdm-setup.md (#23122)
Changed instances of Azure AD to Microsoft Entra ID. Did not change URLs
because they still seem to work to connect to the service. @noahtalerman
has already verbally ok'd this change.
2024-10-23 10:49:01 -05:00
dependabot[bot] 30b3a1ea37 Bump grunt from 1.0.4 to 1.5.3 in /ee/bulk-operations-dashboard (#21510) 2024-10-23 10:19:45 -05:00
Neil Blazevic 58ce48dea8 Update Render deploy pricing (#23113) 2024-10-23 10:07:20 -05:00
Ian Littman 921d8c8afd Check for TUF expirations 2x daily, and warn 4 days in advance rather than 2 (#23039) 2024-10-23 10:06:03 -05:00
Gabriel Hernandez 68cdcde4eb fix to PUT /setup_experience/software and GET /setup_experience/software endpoints (#23074)
This PR fixes two issues:

1. `PUT /setup_experience/software` will now take the correct json body
of `software_title_ids` to update the software to install during setup
experience

2. include the `install_during_setup` attribute on the software titles
software package results from `GET /setup_experience` endpoint
2024-10-23 15:57:02 +01:00
Lucas Manuel Rodriguez 3e29f16f53 dogfood: Restore VPP token association to teams (#23114)
To fix
https://github.com/fleetdm/fleet/actions/runs/11468989615/job/31915263035#step:7:174

```
Error: applying app store apps for team: "🔳🏢 Company-owned iPads": POST /api/latest/fleet/software/app_store_apps/batch received status 422 Unprocessable Entity: could not retrieve vpp token: No available VPP Token
```

https://github.com/fleetdm/fleet/pull/22326 fixed so that GitOps removes
associations if they are not set (GitOps mode of operation where stuff
that's not set is removed), thus we now need to define it.
2024-10-23 11:15:56 -03:00
RachelElysia c7b4127e33 Fleet UI: Tabbing through hdp tabs and global view all host links fixed (#23101) 2024-10-23 09:24:42 -04:00
Gabriel Hernandez 8838630b2f Merge branch 'main' into feat-setup-experience 2024-10-23 12:20:41 +01:00
Sam Pfluger 3e39be0604 Add "Change a contact's organization in Salesforce" (#23112) 2024-10-23 02:08:04 -05:00
Drew BakerandSam Pfluger 59692fd4da Drew p drawers events (#23055)
Updating DRI for events

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-10-23 01:43:36 -05:00
Sam Pfluger 4f485cc07c Change DRI for security policies (#23110) 2024-10-22 20:25:47 -05:00
Eric 5309f8fe53 Website: add swag request CTA to /better (#23108)
Closes: https://github.com/fleetdm/confidential/issues/8439

Changes:
- Added a swag request CTA to the /better page that is visible to users
visiting the website from the contiguous US.
2024-10-22 18:25:34 -05:00
Eric 46e0549ed8 Website: add CTA back to device-management page (#23105)
Closes: #23028

Changes:
- Added a CTA to the Hero section of the device management page
2024-10-22 18:18:46 -05:00
Rebecca Cowart d9fabdb698 Update macos-mdm-setup.md (#23081)
Added step on line 15 concerning pressing a "Turn on" button (two
different "Turn on" buttons are on screen)
2024-10-22 17:58:00 -05:00
Ian Littman 98f2d15c59 Provide better error messages on 404s for install or uninstall results (#23106)
#22965

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-10-22 17:51:11 -05:00
Rebecca Cowart 111426d62f Update mdm-migration.md (#23090)
Updates for clarity
2024-10-22 17:46:37 -05:00
Rebecca Cowart 101c2adfe7 Update deploy-software-packages.md (#23097)
Adjusted prerequisites, moved sections, etc.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-10-22 17:44:39 -05:00
Jahziel Villasana-Espinoza d25e6cd067 fix: add ios minimum version to os list (#23104)
> No issue, just a fix from a customer convo today

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->
2024-10-22 17:22:34 -05:00
Rebecca Cowart a2c9e378f2 Update install-fleet-maintained-apps-on-macos-hosts.md (#23098)
Updates to last paragraph
2024-10-22 16:16:13 -05:00
Rebecca Cowart c1d12529b9 Update automatic-software-install-in-fleet.md (#23099)
Change “Press the top right “Add policy” button.” to “Press the “Add
policy” button”

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-10-22 16:14:31 -05:00
Noah Talerman 6692ec9cfe Update policy-automation-run-script.md (#23100)
Walked through this guide during CS+QA setup and came up w/ some tweaks:
- Consistent language
- Less language
2024-10-22 16:13:59 -05:00
Marko Lisica 3c3e6d6d1a Add callout that software-related features are experimental (#23089) 2024-10-22 15:43:56 -05:00
Lucas Manuel Rodriguez 103727b5f4 Use ubuntu 22.04 for trivy ci scheduled check (#23088)
Fixing these failures:
https://github.com/fleetdm/fleet/actions/runs/11454239765/job/31881900492

Following this advice
https://github.com/orgs/community/discussions/139074#discussioncomment-10935090.
It seems it works.
2024-10-22 15:41:32 -05:00
Rebecca Cowart 4142ba7723 Update AddAbmModal.tsx (#23083) 2024-10-22 15:40:34 -05:00
Jahziel Villasana-Espinoza 4ee4243f9f feat: add pattern for transaction functions (#23087)
> No issue, just a doc update

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality
2024-10-22 14:46:59 -04:00
Benjamin Edwards 6781d154fb only render the policy document if we are creating the bucket (#23085) 2024-10-22 14:06:02 -04:00
jacobshandlingandJacob Shandling d3ccb51755 UI - Improve UX of Flash messages (#22836)
## #22661 


![ezgif-6-71e48912ae](https://github.com/user-attachments/assets/01144620-0eba-48f0-9254-cc4795fde9fd)

- Update `FlashMessage` behavior to, by default, hide itself when the
user performs any URL-changing navigation
- Add `persistOnPageChange` option to `renderFlash` API and associated
notification context and reducer logic, allowing override of this
behavior on a per-call basis
- Ensure proper order of evaluation of URL changes and render flash
action dispatches on the event loop
- Clean up legacy unused "undo"-related arguments and logic
- Allow the user to click in the same horizontal dimension as a flash
message
- Other misc. cleanup and refactoring

[Demo - messages hidden on page (any URL)
change](https://www.loom.com/share/1e884b6ba11c4b59bc74f51df3690131?sid=9b53e78b-6535-4541-b676-377760366cf4)

- [x] Changes file added for user-visible changes in `changes/`,
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-10-22 10:52:20 -07:00
Ian Littman 3e8f68f80d Pass through original status of an install when the removed flag is set when GETing the install result (#23072)
#23070 // https://www.loom.com/share/6ac7260712c94d4890f67fe8d5a26ea1

Also removes the unused, undocumented Detail field on software install
results

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Manual QA for all new/changed functionality
2024-10-22 12:47:46 -05:00
Mike McNeilandEric 89d53330f5 Update process_open_sockets.yml (#23033)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-10-22 12:41:33 -05:00
Lucas Manuel Rodriguez 2c891447d4 Release osqueryd 5.14.1 (#23045) 2024-10-22 12:27:00 -05:00
Sharon Katz f9c5139b5e Additional comments to the release instructions. (#23005) 2024-10-22 12:26:14 -05:00
Luke Heath 6166a4967a Update patch release instructions (#22831) 2024-10-22 12:22:53 -05:00
jacobshandlingandJacob Shandling ad9c919219 Frontend – Custom MDM URL UI, Update data validation pattern (#22727)
## #22700 


![ezgif-6-801855a36d](https://github.com/user-attachments/assets/72ddd339-acfa-4afe-a322-c1e6a2a38dd2)

- [x] Changes file added for user-visible changes in `changes/`, 
- [ ] Manual QA for all new/changed functionality - TODO when backend is
ready

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-10-22 10:10:50 -07:00
Tim Lee d69100940e Add config for custom MDM URL (#22878) 2024-10-22 11:05:35 -06:00
Brock Walters 6b4f705f20 Update macos-mdm-setup.md (#23084)
Added info box around "no team" verbiage for clarity.
2024-10-22 11:23:13 -05:00
Sam Pfluger fe59c7482c Remove CPE (#23007) 2024-10-22 10:59:16 -05:00
Sam PflugerandNoah Talerman c3085bc8a1 Add responsibilities to product design (#23019)
- Handbook flow from new feature request to drafting board. 
- File new GitHub issues for every customer/prospect requests:
https://github.com/fleetdm/fleet/pull/23019/files#diff-c99d12c3af50c0c2aca2b9ef7597c02ccfe87678291956ff0b2e83d63978ea38R77
- Handbook new "Unpacking the why", "Unpacking the how", and "Product
design check in" product design responsibilities

---------

Co-authored-by: Noah Talerman <noahtal@umich.edu>
2024-10-22 10:22:27 -05:00
Sam Pfluger ad7c529a90 Add DRIs (#23076) 2024-10-22 10:21:57 -05:00
Sharon Katz d8b3a1c7bb Fix CIS query (#23062) 2024-10-22 09:54:19 -04:00
github-actions[bot]andlucasmrod cc3f4e0bde Update versions of fleetd components in Fleet's TUF [automated] (#23071)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-10-22 07:28:08 -03:00
Eric 1e593375f8 Msp dashboard: Update error handling in software-related actions (#23065)
For: https://github.com/fleetdm/confidential/issues/8473

Changes:
- Updated the cloud error components message
- Updated the upload-software action to log errors about failed requests
to the Fleet API
- Updated the edit-software action to log errors about failed requests
to the Fleet API, and to delete temporary files when requests fail.
- Updated the software page to clear cloud errors when modals are
closed.
2024-10-21 21:13:06 -05:00
Ian Littman 91eef00d05 Fall back to pending-outline when we see an unexpected or blank host software install status (#23069)
#23068

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-10-21 18:20:34 -05:00