Commit Graph
275 Commits
Author SHA1 Message Date
Zach Wasserman a87736de5d Bump Fleet Desktop version to 1.0.0 (#6691) 2022-07-19 08:01:28 -03:00
Lucas Manuel Rodriguez 2d3fff7f59 Do not use deprecated macos-10.15 runner (#6724) 2022-07-19 08:00:27 -03:00
Zach Wasserman c9d173e974 Make targets for osquery 5.4.0 (#6536) 2022-07-18 14:25:55 -03:00
dependabot[bot] ec31f523eb Bump actions/setup-go from 3.2.0 to 3.2.1 (#6590)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.2.0 to 3.2.1.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/b22fbbc2921299758641fab08929b4ac52b32923...84cbf8094393cdc5fe1fe1671ff2647332956b1a)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 14:24:51 -03:00
dependabot[bot] f30a31012e Bump github/codeql-action from 2.1.15 to 2.1.16 (#6646)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.15 to 2.1.16.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/3f62b754e23e0dd60f91b744033e1dc1654c0ec6...3e7e3b32d0fb8283594bb0a76cc60a00918b0969)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 14:23:31 -03:00
Roberto Dip 86366b2ed8 add a new S3 datastore to retrieve pre-built packages (#6631)
Related to #6365, this extends the datastore/s3 package to retrieve installers from S3 according to the conventions listed in the parent issue. This also includes:

- A minor refactor to decouple Carves-related functionality from the core S3 functionality
- Set-up to run tests using minio (only enabled via the FILE_STORAGE_TEST env flag)
2022-07-14 14:14:24 -03:00
Benjamin Edwards dc40c80e2e add tf vars for cloudwatch log retention & rds snapshot backup retention (#6532)
* add tf vars for cloudwatch log retention & rds snapshot backup retention, update github workflow to deploy new dogfood configurations for new tf vars

* typo and tf fmt
2022-07-11 15:30:36 -04:00
dependabot[bot]andTomas Touceda b26a5cdb4e Bump github.com/open-policy-agent/opa from 0.40.0 to 0.42.0 (#6537)
* Bump github.com/open-policy-agent/opa from 0.40.0 to 0.42.0

Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 0.40.0 to 0.42.0.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.40.0...v0.42.0)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Include go.* files in tests

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tomas Touceda <chiiph@gmail.com>
2022-07-11 14:58:27 -03:00
Roberto Dip 78fbf4c35a tag fleetdm/fleetctl docker image before pushing to Hub (#6585) 2022-07-11 14:57:54 -03:00
Roberto Dip 6a1724a474 add a workflow to build and push fleetdm/fleetctl images (#6533) 2022-07-11 10:32:40 -03:00
Roberto Dip f7dd8c86cd implement a docker image to package orbit natively in Linux (#6504)
Related to #6364 and #6363, this:

- Adds a new Docker image, `fleetdm/fleetctl` equipped with all necessary dependencies to build Fleet-osquery binaries for all platforms
- Modifies the package generation logic to special case this scenario via an environment variable `FLEETCTL_NATIVE_TOOLING`
- Adds a new GitHub workflow to test this

There are more details in the README, but part of the special-casing logic is in place to output the binaries to a folder named `build` when they are run with `FLEETCTL_NATIVE_TOOLING`, this is so we can persist the binary generated by the docker container via a bind mount:

```bash
docker run -v "$(pwd):/build" fleetdm/fleetctl package --type=msi
```

To test this changeset, I have generated packages for all platforms, both via the new Docker image and via the classic `fleetctl package`.
2022-07-11 09:49:13 -03:00
Lucas Manuel Rodriguez a336ed61e5 Add gotestfmt to improve test output and fix flaky tests (#6528) 2022-07-11 08:12:33 -03:00
Lucas Manuel Rodriguez e92ea532b6 Orbit to cleanup extension socket at startup (#6474)
* Orbit to cleanup extension socket at startup

* Remove extra quote
2022-07-01 16:56:37 -03:00
dependabot[bot] 3da9f6cb38 Bump ossf/scorecard-action from 1.0.4 to 1.1.2 (#6419)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.0.4 to 1.1.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/c1aec4ac820532bab364f02a81873c555a0ba3a1...ce330fde6b1a5c9c75b417e7efc510b822a35564)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 18:31:37 -07:00
dependabot[bot] 985eccc442 Bump dawidd6/action-download-artifact from 2.19.0 to 2.21.1 (#6418)
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 2.19.0 to 2.21.1.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/b2abf1705491048a2d7074f7d90513044fd25d39...6765a42d86407a3d532749069ac03705ad82ebc6)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 18:31:16 -07:00
dependabot[bot] 690595f9b3 Bump returntocorp/semgrep-action (#6417)
Bumps [returntocorp/semgrep-action](https://github.com/returntocorp/semgrep-action) from 619fcfc626fd7b93e0f350c46e67671f2c962265 to 1. This release includes the previously tagged commit.
- [Release notes](https://github.com/returntocorp/semgrep-action/releases)
- [Changelog](https://github.com/returntocorp/semgrep-action/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/returntocorp/semgrep-action/compare/619fcfc626fd7b93e0f350c46e67671f2c962265...177d02a2d1c3f89e977083f7d979dc946b12323d)

---
updated-dependencies:
- dependency-name: returntocorp/semgrep-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 18:30:50 -07:00
dependabot[bot] c160588ef3 Bump aws-actions/amazon-ecr-login from 1.3.3 to 1.5.0 (#6404)
Bumps [aws-actions/amazon-ecr-login](https://github.com/aws-actions/amazon-ecr-login) from 1.3.3 to 1.5.0.
- [Release notes](https://github.com/aws-actions/amazon-ecr-login/releases)
- [Changelog](https://github.com/aws-actions/amazon-ecr-login/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws-actions/amazon-ecr-login/compare/aaf69d68aa3fb14c1d5a6be9ac61fe15b48453a2...b874a33292cc9887d2e80bc63f6f1a11fccb4a7b)

---
updated-dependencies:
- dependency-name: aws-actions/amazon-ecr-login
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 18:30:25 -07:00
dependabot[bot] 314afc694b Bump tfsec/tfsec-sarif-action from 0.1.0 to 0.1.3 (#6415)
Bumps [tfsec/tfsec-sarif-action](https://github.com/tfsec/tfsec-sarif-action) from 0.1.0 to 0.1.3.
- [Release notes](https://github.com/tfsec/tfsec-sarif-action/releases)
- [Commits](https://github.com/tfsec/tfsec-sarif-action/compare/56bc584a8377626a31e511056772298ccfa69501...5d34a982aa8927c5dd8566d25ef248d526aac1f4)

---
updated-dependencies:
- dependency-name: tfsec/tfsec-sarif-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 18:29:11 -07:00
dependabot[bot] 39192a2b89 Bump docker/login-action from 1.14.1 to 2 (#5598)
Bumps [docker/login-action](https://github.com/docker/login-action) from 1.14.1 to 2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/dd4fa0671be5250ee6f50aedf4cb05514abda2c7...49ed152c8eca782a232dede0303416e8f356c37b)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 18:27:48 -07:00
dependabot[bot] c90b4b8d50 Bump github/codeql-action from 2.1.11 to 2.1.15 (#6416)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.11 to 2.1.15.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/a3a6c128d771b6b9bdebb1c9d0583ebd2728a108...3f62b754e23e0dd60f91b744033e1dc1654c0ec6)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 18:26:55 -07:00
dependabot[bot] 15873bfbe2 Bump codecov/codecov-action from 3.0.0 to 3.1.0 (#5310)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/e3c560433a6cc60aec8812599b7844a7b4fa0d71...81cd2dc8148241f03f5839d295e000b8f761e378)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 18:26:00 -07:00
dependabot[bot] d317b2792c Bump returntocorp/semgrep-action (#5309)
Bumps [returntocorp/semgrep-action](https://github.com/returntocorp/semgrep-action) from a9f6c903be5b9bc982d6be6f9312146daa4964b5 to 1. This release includes the previously tagged commit.
- [Release notes](https://github.com/returntocorp/semgrep-action/releases)
- [Changelog](https://github.com/returntocorp/semgrep-action/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/returntocorp/semgrep-action/compare/a9f6c903be5b9bc982d6be6f9312146daa4964b5...619fcfc626fd7b93e0f350c46e67671f2c962265)

---
updated-dependencies:
- dependency-name: returntocorp/semgrep-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 18:25:28 -07:00
Martin Angers 539be8ee09 Add battery info in host details response (#6394) 2022-06-28 14:11:49 -04:00
dependabot[bot] 3b86836c3f Bump actions/upload-artifact from 3.0.0 to 3.1.0 (#5835)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/6673cd052c4cd6fcf4b4e6e60ea986c889389535...3cea5372237819ed00197afe530f5a7ea3e805c8)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-22 16:07:08 -03:00
Zach Wasserman 7cede96089 Generate osqueryd target from DEB package (#6258)
The DEB packages have a stripped (smaller) binary rather than the
unstripped binary in the tarball.
2022-06-20 11:13:01 -07:00
Zach Wasserman 8228681119 Bump Fleet Desktop version (#6255) 2022-06-16 18:34:30 -07:00
Zach Wasserman 12d915531e Build universal macOS binaries for Orbit (#6208) 2022-06-13 19:43:47 -03:00
Zach Wasserman ca1c8ffd58 Generate targets for osquery 5.3.0 (#6188) 2022-06-13 08:04:21 -07:00
Lucas Manuel Rodriguez 4cfeaa1580 Do not use golangci action for better reproducibility (use make lint-go) (#6175)
* Do not use golangci action for better reproducibility

* Add fix to trigger build

* Fix all reported issues

* fix more lint errors

* Add missing import

* Remove unused method

* Remove change not necessary
2022-06-10 18:52:24 -03:00
Lucas Manuel RodriguezandMichal Nicpon 33bb7886b6 Add automation for orbit shell (with TUF) (#5856)
* fix old root dir in orbit

* add changes

* Add automation for orbit shell (with TUF)

* Fix workflow syntax

* Add logging to latest fleetctl preview action

* Add changes to fix workflow

* Use macOS host for TUF server and package generation

* Remove copy/paste if clause

* Fix orbit logs on macOS, Ubuntu

* Simplify TUF and generation of packages

* Set enroll secret instead of getting it

* Increase timeouts

* Add step id

* Fixes to the upload/download of artifacts

* Rearrange steps to not lose the downloads

* Fix copy/paste

* Add fleetctl login step

* Add missing config set

* Fix quotes on Windows

* Increase timeout

* Fix job termination

* Disable FLEET_DESKTOP for now

* Checkout repository on macOS

* Fix logs path

* Enable fleet desktop

* Use cancel, nitpick

Co-authored-by: Michal Nicpon <michal@fleetdm.com>
2022-06-01 13:54:16 -03:00
dependabot[bot] e8c61abc92 Bump goreleaser/goreleaser-action from 2.9.1 to 3 (#5972)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 2.9.1 to 3.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/b953231f81b8dfd023c58e0854a721e35037f28b...68acf3b1adf004ac9c2f0a4259e85c5f66e99bef)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-31 13:24:23 -03:00
dependabot[bot] de3e19e52f Bump actions/setup-go from 3.0.0 to 3.2.0 (#5917)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.0.0 to 3.2.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/f6164bd8c8acb4a71fb2791a8b6c4024ff038dab...b22fbbc2921299758641fab08929b4ac52b32923)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-31 10:13:26 -03:00
Lucas Manuel Rodriguez 5527cf3cef Add --fleet-desktop to linux packaging on test-integration.yml (#5926)
* Add --fleet-desktop to linux packaging on test-integration.yml

* Fix --fleet-desktop flag
2022-05-31 07:14:59 -03:00
Zach Wasserman b9161d008f Use goreleaser v1.1.0 for Orbit build (#5934) 2022-05-26 18:03:15 -07:00
Zach Wasserman 087b85a540 Bump Orbit Go version to 1.18.2 (#5933) 2022-05-26 17:32:34 -07:00
Zach Wasserman 023a9b4be6 Update Fleet Desktop version to 0.0.2 (#5932) 2022-05-26 17:26:00 -07:00
Zach Wasserman bcaa95e5a2 Explicitly set goreleaser version in Orbit release (#5931) 2022-05-26 17:24:57 -07:00
Benjamin Edwards 58d2b66042 add github action deploy via OIDC credentials (#5339)
* remove unused iam poilcy attributes and remove github action on pull request, only workflow dispatch will be required
* update github.tf, commenting out all resources, but leaving in place in case someone else wants to use ODIC providers & Github actions
2022-05-25 14:03:29 -04:00
gillespi314 4a4e832d3a Increase minimum password length to 12 characters (#5712) 2022-05-18 12:03:00 -05:00
dependabot[bot] ade929bc90 Bump github/codeql-action (#5779)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 75b4f1c4669133dc294b06c2794e969efa2e5316 to 2.1.11. This release includes the previously tagged commit.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/75b4f1c4669133dc294b06c2794e969efa2e5316...a3a6c128d771b6b9bdebb1c9d0583ebd2728a108)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-17 16:36:47 -03:00
Lucas Manuel Rodriguez d50e97d250 Upload logs on fleetctl preview action (#5745)
* Upload logs on fleetctl preview action

* Group logs

* Avoid hidden folder
2022-05-16 18:39:31 -03:00
Lucas Manuel Rodriguez 74dfdcb882 Kickoff documentation for Orbit Release Process (#5544)
* Kickoff documentation for Orbit releasing

* Fixes to the github action

* Missing follow redirect on curl

* Run osqueryd --version to verify before uploading artifacts

* Use cmd as shell for windows-latest runner

* Final set of changes to the guide
2022-05-13 07:15:29 -03:00
dependabot[bot] 85013e87a4 Bump github/codeql-action from 2.1.9 to 2.1.10 (#5668)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.9 to 2.1.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7502d6e991ca767d2db617bfd823a1ed925a0d59...75b4f1c4669133dc294b06c2794e969efa2e5316)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-10 18:18:15 -07:00
Lucas Manuel Rodriguez fda79a8770 Run network test serially to prevent timeouts on Github CI (#5557)
* Run network test serially to prevent timeouts on Github CI

* Revert lint changes

* Add simple file lock

* Revert test change

* Clarify error check
2022-05-10 11:52:33 -03:00
Lucas Manuel Rodriguez b6bbbbe186 Add (beta) support for Fleet Desktop to linux (#5221)
* Add (beta) support for Fleet Desktop to linux

* Add dependency for linux desktop

* Amend makefile uname check

* Clarify env vars used for linux in execuser

* Add final set of fixes

* Remove -it from docker run

* Add desktop to the update runner for Linux

* Re-arrange tag.gz and fix upgrade check for linux desktop
2022-05-04 11:14:12 -03:00
Mike McNeil 0b7e07a9fb Website: Ignore top level gitignore when deploying (#5549)
* Website: Ignore top level gitignore when deploying

* Update deploy-fleet-website.yml
2022-05-03 21:05:19 -05:00
Lucas Manuel Rodriguez a5349672eb Amend fleetctl package to support /var/lib legacy orbit (legacy would mean <= 0.0.11) (#5532)
* Add logs to troubleshoot orbit

* Run journalctl on a different step

* Add legacy orbit support to opt version of fleetctl

* Fix macos logs permission error

* Checkout repository

* Compile fleetctl from branch
2022-05-03 16:46:02 -03:00
Lucas Manuel Rodriguez 221232580c Add fleetctl preview automation for latest changes (#5485)
* Add fleetctl preview automation for latest changes

* Fix pwd invocation and remove slack notification

* Just run on ubuntu-latest and macos-latest

* Fix path
2022-05-02 13:10:11 -03:00
Lucas Manuel Rodriguez ed8faa791c Add slack notification (#5481)
* Add slack notification

* Fix standard-query-library.yml
2022-05-02 08:42:20 -03:00
Zach Wasserman 26eae438f6 Document supported MySQL versions (#5421)
- Pin versions in development and CI.
2022-04-27 16:21:16 -07:00