Commit Graph
13042 Commits
Author SHA1 Message Date
Dante Catalfamo bf3d849bd0 Fix Deleted Host Software Installs Details (#20820)
#20271

This fix requires an accompanying front end fix to pass the
`display_name` from the activity feed to the modal when displaying the
install results.
2024-08-01 15:41:37 -04:00
Eric d95a12bda6 Website: update homepage and endpoint ops personalization (#20961)
Closes: #20736

Changes:
- Updated the category switcher on the (buying situation agnostic)
homepage to be MDM, IT engineering and Security engineering.
- Updated the personalization of the product category sections of the
homepage
- Updated the tagline for the endpoint ops page.
2024-08-01 14:23:28 -05:00
Luke Heath 3df700b1e6 Update release script to branch off main for minor releases (#20956) 2024-08-01 12:18:59 -07:00
Mike ThomasandMike McNeil 8fb64cdd00 Banner update (#20925)
Updated the banner image on
https://github.com/fleetdm/fleet/tree/main/tools/fleetctl-npm

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-08-01 14:04:18 -05:00
Dante Catalfamo 7abae84be5 Use gitops format for software installer query (#20891)
#20747
2024-08-01 14:36:40 -04:00
Victor Lyuboslavsky 580a81ded5 Fixed duplicate app install activity on host (#20944)
Unreleased bug for iOS/iPadOS VPP #19447

# Checklist for submitter
- [x] Added/updated tests
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Manual QA for all new/changed functionality
2024-08-01 20:32:45 +02:00
Noah Talerman a28e4d800b Supported operating systems docs (#20679)
- Google Chrome and a gnome extension have to
be installed to use Fleet Desktop + Firefox on Fedora.
- You don't have to set Google Chrome as the default browser.
2024-08-01 13:43:07 -04:00
Roberto Dip 30cbaf0a74 address PR feedback for FileVault improvements (#20935)
feedback left by @mna and @gillespi314 in
https://github.com/fleetdm/fleet/pull/20842

also fixes a bug found by @PezHub
https://github.com/fleetdm/fleet/issues/13157#issuecomment-2261615471

related to https://github.com/fleetdm/fleet/issues/13157

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-08-01 14:04:54 -03:00
Roberto Dip 7a4773cd0a escape % in query (#20954)
for https://github.com/fleetdm/fleet/issues/20940. Ran `make
generate-doc` as well but docs don't change with this.
2024-08-01 13:56:09 -03:00
Eric 81af71b80a Website: Update questionnaire pre-filling. (#20953)
Changes:
- Updated the /start questionnaire to not prefill the "What will you use
Fleet for?" question if the user has a primaryBuyingSituation set to
`vm`
2024-08-01 11:24:07 -05:00
jacobshandlingandJacob Shandling 2ccc0f79e7 UI – Follow-ups for iPadOS/iPadOS VPP (#20916)
## Follow ups to #20467, part 4 of #20917
- Use combination of apps' fields to uniquely identify them – [bug and
fix
demo/explanation](https://www.loom.com/share/2e5f088677604f04927bce8d9dacf8fe?sid=d946bea5-11a9-419a-b946-962829a53adc)
- Add new field to vpp `POST` requests for correct add VPP software
functionality

![Screenshot-2024-07-31-at-50131PM](https://github.com/user-attachments/assets/57c925f9-53cb-4860-b6b6-475b6d5cb2a5)

- Implement desired states for software action dropdown

![Screenshot-2024-07-31-at-45556PM](https://github.com/user-attachments/assets/b6d3db97-dea2-43bb-9662-29256e87fbf0)


- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-08-01 09:17:57 -07:00
Mike ThomasandEric 08d08d5602 Homepage tagline update (#20931)
Updated homepage to include the new tagline that was settled in [this
design
review](https://us-65885.app.gong.io/call?id=186190266621232138&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A2009%2C%22to%22%3A2061%7D%5D).

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-08-01 11:09:51 -05:00
Sarah Gillespie e761543262 Fix unreleased bugs related to VPP app install details UI (#20952) 2024-08-01 11:08:30 -05:00
Marko Lisica 5820d028e0 API design: Improve host identifiers in the docs, CLI and API (#19752)
API design for: #19127
2024-08-01 11:11:07 -04:00
Georg Schölly a41fb636bc Detect software from deb_packages which is 'on hold' (#20751)
The list of installed software was missing packages put ['on
hold'](https://askubuntu.com/questions/18654/how-to-prevent-updating-of-a-specific-package)

The reason for this is that the old query looks for the status

    install ok installed

but there are other valid status which are also installed, like `hold ok
installed`. The syntax is `<desired> <error> <status>` so we only need
to look at the last or two last parts and ignore the first one.

See https://man7.org/linux/man-pages/man1/dpkg-query.1.html for a list
of status.

# Checklist for submitter

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
2024-08-01 11:39:01 -03:00
Dante Catalfamo feb32a274a Linux Mask systemd-user-sessions (#20877)
#20370

Part 2 to #20699. Apparently `systemd` now automatically deletes
`/etc/nologin` on startup. In the previous PR, rebooting the machine
would remove the nologin file and allow users to login. This PR masks
the service that performs the deletion, preventing it from running.

The message displayed to the user will be what is specified in [this
file](https://github.com/systemd/systemd/blob/7767896d127264f660e1e8a714e5cd760840921f/tmpfiles.d/systemd-nologin.conf#L10).
It's not the best, but I suspect messing with too many systemd files
could come back to bite us in the future if things change, so I'll leave
it as-is.
2024-08-01 10:27:17 -04:00
dependabot[bot] 1dbdb57d76 Bump google.golang.org/grpc from 1.64.0 to 1.64.1 (#20852)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from
1.64.0 to 1.64.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.64.1</h2>
<h1>Dependencies</h1>
<ul>
<li>Update x/net/http2 to address <a
href="https://nvd.nist.gov/vuln/detail/CVE-2023-45288">CVE-2023-45288</a>
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/7352">#7352</a>)</li>
<li>metadata: remove String method from MD to make printing consistent
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/7374">#7374</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-go/commit/4d833de0e0ea4345c2f8333f5e1d1155f93c5222"><code>4d833de</code></a>
Change version to 1.64.1 (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7381">#7381</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/e9193a42987f93cf634aedb7c6f32d607281f8c4"><code>e9193a4</code></a>
*: update deps (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7375">#7375</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/ab292411ddc0f3b7a7786754d1fe05264c3021eb"><code>ab29241</code></a>
metadata: remove String method (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7374">#7374</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/355b9a557b63896fc569d8be1518905eabde0026"><code>355b9a5</code></a>
Change version to 1.64.1-dev (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7219">#7219</a>)</li>
<li>See full diff in <a
href="https://github.com/grpc/grpc-go/compare/v1.64.0...v1.64.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.64.0&new-version=1.64.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-01 09:17:15 -03:00
Victor Lyuboslavsky 0b2369b963 Added null checks to GoogleCalendarLowLevelAPI (#20887)
# Checklist for submitter

Fixing unreleased bug for #19352

- [x] Manual QA for all new/changed functionality
2024-08-01 07:42:38 +02:00
Mike Thomas 99fccbbffc updated archival note (#20927)
Update archive notice on deployment guides.
2024-08-01 12:05:14 +09:00
Mike Thomas bcc723cabc Maintenance windows article update (#20926)
- added a note about DDM and updated graphics (as part of
https://github.com/fleetdm/fleet/issues/20680).

cc @noahtalerman
2024-08-01 12:01:51 +09:00
Mike McNeilandEric 68f2f58ebe Website: test bringing below-the-fold content higher (#20913)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-07-31 18:24:31 -05:00
Eric ba2f79e1c4 Website: personalize /better page for Secure Frame users (#20890)
Related to: https://github.com/fleetdm/confidential/issues/7227

Changes:
- Added a banner to the /better page that is visible to users who visit
it with a `?utm_content=secureframe` query param.
- Updated the `<animated-arrow-button>` component to support customizing
text and arrow color.
2024-07-31 17:40:41 -05:00
Eric 6fd628463d Website: fix pricing table filtering (#20912)
Changes:
- Fixed the IT and Security filtering on the pricing features table.
2024-07-31 17:25:18 -05:00
Grant Bilstad 8b5094ff37 Fix link for fleetctl install (#20835) 2024-07-31 16:10:46 -06:00
Roberto Dip 7a080a9b36 use Escrow Buddy to rotate FileVault keys on macOS (#20842)
back-end and agent part of #13157

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [x] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-07-31 16:59:30 -03:00
Eric fbf1f55399 Website: Remove duplicate "Fleet" from page titles (#20893)
Changes:
- Removed the duplicate "Fleet" from page titles.
2024-07-31 14:50:42 -05:00
Roberto Dip 42ff57d059 UI/Docs changes to rotate keys using Escrow Buddy (#20843)
UI portion for #13157

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-07-31 16:49:24 -03:00
Eric fa529e47f9 Website: add Segment analytics (#20867)
Related to: https://github.com/fleetdm/confidential/issues/7339

Changes:
- Added a script tag for segment
- Added segment tracking for contact form submissions, signups, and swag
requests.
2024-07-31 13:26:54 -05:00
Luke Heath d16f0e085e Add isExperimental property to features table (#20775) 2024-07-31 14:26:41 -04:00
jacobshandlingandJacob Shandling 672da9049d UI - improve comment syntax for better VSCode hints (#20864)
## https://github.com/fleetdm/fleet/pull/20850#discussion_r1697497788

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-07-31 11:06:02 -07:00
Martin Angers 134534a9d8 Special-case the name of the .exe installer for Notion as it uses non-standard naming (#20881) 2024-07-31 13:56:25 -04:00
jacobshandlingandJacob Shandling d19e5c4a9a UI – Fix hosts table pagination (#20853)
## #20604
<img width="1511" alt="Screenshot 2024-07-30 at 11 50 20 AM"
src="https://github.com/user-attachments/assets/c96ff108-4c3b-436a-8d4b-c3e2099264dd">

<img width="1511" alt="Screenshot 2024-07-30 at 11 50 48 AM"
src="https://github.com/user-attachments/assets/63a4596a-dd12-41e3-8c83-f196ac3b3a40">

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-07-31 10:02:16 -07:00
Sarah Gillespie a33bd65272 Revert "Add minimum os version requirements to DEP enrollment flow" (#20878) 2024-07-31 11:34:01 -05:00
allenhouchins ff623f9875 Shortened up the Event lead follow-up section (#20883)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-07-31 11:18:36 -05:00
Sarah Gillespie 13e5e14a2f Update UI to allow for showing software install details from activities related to deleted hosts (#20866) 2024-07-31 10:03:10 -05:00
Victor Lyuboslavsky 438b0ff4d6 Added available_for_install query parameter to host details (#20876)
Missing part of #19447
Added `available_for_install` query parameter to `GET
/api/v1/fleet/hosta/:id/software`

# Checklist for submitter

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-07-31 16:27:43 +02:00
RachelElysia c27dc992ae Fleet UI: Update profile verification copies to be more generic (#20858) 2024-07-31 09:21:53 -04:00
Tim Lee bda812c329 Hotfix: Pass sql test dump in via stdin (#20871) 2024-07-31 05:09:52 -06:00
Tim Lee bac1afd5f7 Hotfix: Docker Upgrade (#20862) 2024-07-30 18:31:47 -06:00
jacobshandling 3ae0544c43 UI – iPad/iOS VPP follow-ups (#20850) 2024-07-30 13:50:15 -07:00
Zach Wasserman f9927a1859 Allow /repo access in mdm proxy (#20552)
Customer reported that their clients need access to this path in the
existing server during migration.
2024-07-30 13:45:53 -07:00
Victor Lyuboslavsky 31224ccd34 Added VPP support for iOS/iPadOS (#20837)
#19447 
iOS and iPadOS apps can be installed using Apple's VPP (Volume Purchase
Program)

VPP apps are now using a composite primary key (Adam ID and platform)
because we want to keep iOS/iPadOS/macOS separate. It is possible for
one app to be installable on all Apple platforms.

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Manual QA for all new/changed functionality
2024-07-30 22:43:51 +02:00
dependabot[bot] 2923b606da Bump github.com/docker/docker from 24.0.9+incompatible to 26.1.4+incompatible (#20839) 2024-07-30 11:47:21 -07:00
RachelElysia d5b928d5e5 Fleet UI: No team view for software pages (#20641) 2024-07-30 13:20:13 -04:00
Tim Lee 0e9705fdf7 Add No Team to Software Backend (#20822) 2024-07-30 11:19:05 -06:00
jacobshandlingandJacob Shandling 19a64941ba UI – Add VPP features for iPadOS and iOS (#20755)
## Addresses #20467 – part 2

### Aggregate software:

#### Software titles
<img width="1616" alt="sw-titles-updated"
src="https://github.com/user-attachments/assets/0b9922c7-e36e-4d2f-b204-95c3cdf9b602">

#### Software versions
<img width="1616" alt="Screenshot 2024-07-29 at 6 14 21 PM"
src="https://github.com/user-attachments/assets/5a097700-cd6c-45b1-a21f-9d76a733f0ae">

#### Host software
<img width="1616" alt="Screenshot 2024-07-29 at 6 23 01 PM"
src="https://github.com/user-attachments/assets/84e18695-f47a-4022-bd53-7f5d37ce452a">


### Add software modal (VPP) _screenshots use mocked data - UI is
flexible enough to display cleanly before and after backend is in
place:_
<img width="1339" alt="happy"
src="https://github.com/user-attachments/assets/8900aa93-316c-4a09-8e5a-1a1e45b0c458">

#### No apps:
<img width="1572" alt="Screenshot 2024-07-29 at 6 35 03 PM"
src="https://github.com/user-attachments/assets/466b9b6c-4d3d-49dd-94a9-94e395d89cb7">

#### Not enabled:
<img width="1572" alt="Screenshot 2024-07-29 at 6 37 45 PM"
src="https://github.com/user-attachments/assets/9bcfd480-8741-4d95-ba3b-550dee4dc673">

#### Error:
<img width="1572" alt="Screenshot 2024-07-29 at 6 39 39 PM"
src="https://github.com/user-attachments/assets/e944dd40-676e-4aba-9cd9-49ff319bf402">

### Vuln support – Not supported for now:
_see above screenshots for `list` endpoints_

#### Software title detail
<img width="1616" alt="Screenshot 2024-07-29 at 6 47 29 PM"
src="https://github.com/user-attachments/assets/2e30fd0a-21e4-4d19-bf9b-71a994bfd0e7">

#### Software version and OS detail:
<img width="1616" alt="Screenshot 2024-07-29 at 6 48 28 PM"
src="https://github.com/user-attachments/assets/e8fec769-ba97-4b6b-b10c-9bb4c973c732">
<img width="1616" alt="Screenshot 2024-07-29 at 6 50 25 PM"
src="https://github.com/user-attachments/assets/0ac15727-e0cb-447c-8758-c58b79656d1a">


- [x] Changes file added for user-visible changes in `changes/`,
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-07-30 10:14:25 -07:00
Sam Pfluger 9bb6ef15ae Add link from product groups (#20833) 2024-07-30 09:50:47 -07:00
RachelElysia 56bdfdcda6 Fleet UI: Indicator for min os requirement not met includes warning icon (#20813) 2024-07-30 10:21:27 -04:00
Marko Lisica bec4072ca7 GitOps docs: Configuration profiles - target hosts by excluding any label (#20779)
Changes related to: #17315
2024-07-30 09:13:02 -04:00
Gabriel Hernandez 58fb563433 Fix showing app-wide warning banners correctly on the first page load. (#20806)
relates to #20784

this fixes an issue where the app-wide warning banners were not loading
on the first-page load.

> NOTE: I changed the fetch method for the data needed for the app-wide
banners (e.g. abm, apns, vpp token data) to use react-query `useQuery`
method as it follows our usual pattern for `GET` requests in components.
To enable this, I moved up the react-query query client wrapper in the
`AppWrapper component in `/frontend/router/index.tsx` file. This also
gives us better control of when/how often this request is initiated.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-07-30 13:37:33 +01:00