Commit Graph
114 Commits
Author SHA1 Message Date
Lucas Manuel RodriguezandZach Wasserman ecdfd627b6 Fleet Desktop MVP (#4530)
* WIP

* WIP2

* Fix orbit and fleetctl tests

* Amend macos-app default

* Add some fixes

* Use fleetctl updates roots command

* Add more fixes to Updater

* Fixes to app publishing and downloading

* Add more changes to support fleetctl cross generation

* Amend comment

* Add pkg generation to ease testing

* Make more fixes

* Add changes entry

* Add legacy targets (until our TUF system exposes the new app)

* Fix fleetctl preview

* Fix bool flag

* Fix orbit logic for disabled-updates and dev-mode

* Fix TestPreview

* Remove constant and fix zip-slip attack (codeql)

* Return unknown error

* Fix updater's checkExec

* Add support for executable signing in init_tuf.sh

* Try only signing orbit

* Fix init_tuf.sh targets, macos-app only for osqueryd

* Specify GOARCH to support M1s

* Add workflow to generate osqueryd.app.tar.gz

* Use 5.2.2 on init_tuf.sh

* Add unit test for tar.gz target

* Use artifacts instead of releases

* Remove copy paste residue

* Fleet Desktop Packaging WIP

* Ignore gosec warning

* Trigger on PR too

* Install Go in workflow

* Pass url parameter to desktop app

* Fix fleetctl package

* Final set of changes for v1 of Fleet Desktop

* Add changes

* PR fixes

* Fix CI build

* add larger menu bar icon

* Add transparency item

* Delete host_device_auth entry on host deletion

* Add SetTargetChannel

* Update white logo and add desktop to update runner

* Add fleet-desktop monitoring to orbit

* Define fleet-desktop app exec name

* Fix update runner creation

* Add API test before enabling the My device menu item

Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2022-03-21 14:53:53 -03:00
Guillaume Ross befbe88eb8 Adding manual execution to ossf scorecard workflow 2022-03-18 14:36:10 -04:00
Guillaume Ross 62d3b9145f 4620 pin action dependencies (#4622)
* Update build-binaries.yaml

Pin action versions + add read only token to build-binaries.yaml

* Update codeql-analysis.yml

Pin dependencies with hash for codeql-analysis.yml

* Update deploy-fleet-website.yml

Pin dependencies in deploy-fleet-website.yml

* Update docs.yml

Pin dependencies for docs.yml

* Update fleet-and-orbit.yml

Pinning dependencies for fleet-and-orbit.yml

* Update generate-osqueryd-app-tar-gz.yml

Pin dependencies for generate-osqueryd-app-tar-gz.yml

* Pin dependencies in goreleaser workflows

Pinned dependencies in the 3 goreleaser workflows

* Update integration.yml

Pinned dependencies with hash

* Update pr-helm.yaml

Pinned dependencies with hash

* Update push-osquery-perf-to-ecr.yml

Pinned dependencies with a hash

* Update release-helm.yaml

Pinned one dependency with a hash

* Update semgrep-analysis.yml

Pinned dependencies with hashes

* Update test-go.yaml

Pinned dependencies with hash

* Update test-packaging.yml

Pinned dependencies with hashes

* Update test-website.yml

Pinned dependencies with hashes

* Update test.yml

Pinned dependencies with hashes
2022-03-16 15:42:28 -04:00
Guillaume Ross 8700fc6498 Go 1.17.8 (#4560)
* Go 1.17.8

* Enforcing go minimum 1.17.8

Bumping minimum version in a few more files
2022-03-16 14:56:58 -04:00
Lucas Manuel Rodriguez f4d3159cc9 Fleetctl to package .app bundles for osquery (and changes for orbit to support them) (#4393)
* WIP

* WIP2

* Fix orbit and fleetctl tests

* Amend macos-app default

* Add some fixes

* Use fleetctl updates roots command

* Add more fixes to Updater

* Fixes to app publishing and downloading

* Add more changes to support fleetctl cross generation

* Amend comment

* Add pkg generation to ease testing

* Make more fixes

* Add changes entry

* Add legacy targets (until our TUF system exposes the new app)

* Fix fleetctl preview

* Fix bool flag

* Fix orbit logic for disabled-updates and dev-mode

* Fix TestPreview

* Remove constant and fix zip-slip attack (codeql)

* Return unknown error

* Fix updater's checkExec

* Add support for executable signing in init_tuf.sh

* Try only signing orbit

* Fix init_tuf.sh targets, macos-app only for osqueryd

* Specify GOARCH to support M1s

* Add workflow to generate osqueryd.app.tar.gz

* Use 5.2.2 on init_tuf.sh

* Add unit test for tar.gz target

* Use artifacts instead of releases

* Remove copy paste residue

* Trigger workflow on PR

* Fixes to ease handling of artifact

* Fix, do not use target name as dir

* Remove workaround
2022-03-15 16:04:12 -03:00
Guillaume Ross b620d2b7d8 Fix code scanning issues with golangci-lint.yml (#4606)
Making permissions more restricted to reduce impact if token leaked, and pinning dependencies more strictly.
2022-03-15 14:44:30 -04:00
Lucas Manuel Rodriguez 29bd76f60d Add manual dispatch to golangci-lint.yml (#4440) 2022-03-03 17:15:17 -03:00
Lucas Manuel Rodriguez b5be858071 Fix update checks for orbit at startup (#3835)
* Fix update checks for orbit at startup

* Add tests

* Add scripts for testing local TUF server

* Remove -x used for debugging
2022-02-23 14:58:07 -03:00
Guillaume Ross 0ac0c9de3e Update scorecards-analysis.yml (#4322)
Update scorecard analysis version from 1.0.2 to 1.0.4 - has updates on how env variables are handled, need to update and see if it fixes the issue we have with the cron job.
2022-02-22 20:00:41 -05:00
Lucas Manuel Rodriguez e39ba93a90 Orbit to wait for osqueryd extension manager socket to be ready (#3836)
* Wait for osquery extension manager socket to be ready

* PR review feedback

* Add WIP Github Action to test orbit

* Set fleet address on fleetctl

* Add logging for troubleshooting

* Add prepare db statement

* Use tls-skip-verify on fleetctl

* Move steps around

* Fix addresses

* Fix fleetctl path

* Add certs.pem to orbit root dir

* Add orbit logs

* Increase timeout

* Add proper orbit log paths

* Fix tmp path orbit

* Add get hosts command to troubleshoot

* Fix orbit job termination

* Add comments to workflows

* Wait for server to go down

* Add orbit Windows job

* Use bash on windws-latest

* Fix missing quote

* Run orbit on Ubuntu

* Bump host count

* Increase timeout for extensions and not terminate on err

* Add comment to clarify high timeout value

* Revert change, we do want to exit in case of err
2022-02-22 15:05:32 -03:00
Lucas Manuel Rodriguez d8b8794d51 Fix setting of envs for schedule (#4205)
* Attempt to fix setting of env for schedule

* Revert logic after testing
2022-02-15 09:26:28 -03:00
Lucas Manuel Rodriguez 297dd245ec Run go tests with -race at night (#4090)
* Run go tests with race at night

* Add missing run on step

* Fix boolean logic

* Allow manual run for test-go.yaml

* Add slack notification step

* Try global environment variable for cron schedule

* Fix indentation

* Try number 2

* Try setting cron as usual

* Remove global env

* Only send notification in case of failure when running schedule

* Run with race enable to test

* Add more fixes

* Fix github event variable name

* Set timeouts

* Fix slack notification link

* Re-enable if clause

* Last try on Github Actions

* Re-enable the if clause
2022-02-14 16:38:53 -03:00
Lucas Manuel Rodriguez 0ed0c4e27f Allow manual dispatch of test-go.yml (#4160) 2022-02-14 12:13:02 -03:00
Noah TalermanandZach Wasserman 67827474c2 Prepare for Fleet 4.10.0 (#4161)
Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2022-02-13 18:13:06 -08:00
Zach Wasserman 96d81596f3 Add GitHub action for updating CA certs bundle (#4041)
See #4029
2022-02-07 09:44:31 -08:00
Mike McNeil 3f26d650a5 Disable link checking for more sites (#4000)
gusto, crunchbase, and angellist

relates to https://github.com/fleetdm/fleet/pull/3999#issuecomment-1028545628
2022-02-03 15:14:08 -06:00
Zach Wasserman a5b2e60075 Update triggers for link check Action (#3972)
Only check on changes to .md files, nightly, and on manual trigger.

This was generating a lot of false positives in CI.
2022-02-01 18:02:37 -08:00
Guillaume Ross 05431b556a Configuring OSSF Scorecard (#3960)
From https://github.com/ossf/scorecard-action#installation

Configuring the OSSF Scorecard on the Fleet repo and configuring it so results are sent back to dashboard and github codescanning alerts.
2022-02-01 09:31:07 -05:00
Zach Wasserman b9696f67e6 Skip link check for goreportcard.com (#3805)
It goes down relatively often, causing flaky CI.
2022-01-19 17:56:01 -08:00
Zach Wasserman be1105757b Simplify docker publish action (#3769) 2022-01-18 18:03:14 -08:00
Zach Wasserman 1782fc7b8f Build Docker images on push to any branch (#3756)
Allows for testing release branches and any others.
2022-01-18 12:41:04 -08:00
Zach Wasserman 9c845ec26b Integration test packaging (#3633) 2022-01-13 13:59:22 -08:00
Zach Wasserman d358c703b8 Only run E2E tests on relevant commits (#3674) 2022-01-13 10:48:26 -08:00
Lucas Manuel Rodriguez 49ceee59aa Add fixes for running tests with mysql:8 and add mysql to test-go job matrix (#3627)
* Add fixes for running tests with mysql:8

* Add getServer function

* Test github matrix

* Add changes file for the user facing fix

* Remove unused mysql8 docker-compose
2022-01-11 22:44:37 -03:00
Zach Wasserman b56c620007 Pin actions to commit (#3566) 2022-01-04 09:30:02 -08:00
Zach Wasserman ee96418d82 Add integration test for fleetctl preview (#3545)
Add nightly and manual job to run `fleetctl preview` and check for enrolled hosts.

Works on macOS and Linux. Windows cannot be tested on GitHub Actions due to lack of Docker Linux support.
2022-01-01 09:24:52 -08:00
Zach Wasserman 404ca8a2bc Download artifact to build path in staging deploy (#3540) 2021-12-30 15:57:51 -08:00
Zach Wasserman 26479ccd3f Start staging tunnel in background (#3538) 2021-12-30 15:00:36 -08:00
Zach Wasserman e008f70e1f Fix staging action to deploy Fleet server on PR and merge (#3531) 2021-12-30 13:23:39 -08:00
Zach Wasserman 12df9fbfce Add Fleet server deployment in CI (#3530)
Still needs further testing as it must be merged to `main` to test it out on GitHub.
2021-12-29 20:29:18 -08:00
Zach Wasserman ab664e5304 Clean up E2E testing configurations (#3360) 2021-12-24 12:18:00 -08:00
Zach Wasserman 46ec514ffc Remove certificate file after import in Orbit release Action (#3416)
Otherwise, GoReleaser errors due to a dirty git tree.
2021-12-19 17:43:54 -08:00
Zach Wasserman 698ef79495 Update GitHub goreleaser configuration for Orbit (#3414) 2021-12-19 17:37:54 -08:00
Zach Wasserman 4e72ebb68f Build Orbit releases in GitHub Actions (#3413)
Complete build including macOS signing+notarization.
2021-12-19 17:06:17 -08:00
Zach Wasserman cad7674430 Disable fail-fast for E2E test runs (#3342)
Also update to Go 1.17+
2021-12-12 18:10:06 -08:00
Zach Wasserman 4e7a0ce88a Upload Cypress recordings/screenshots on E2E failure (#3341) 2021-12-12 18:08:07 -08:00
Tomas Touceda a0404b6736 Add software count API (#3105)
* Add software count API

* Fix makefile

* Fine no mock generating at this point

* Actually, one last try

* Use go install instead

* Fix go sum/mod

* Improve documentation

* Try setting node to 14
2021-12-03 10:54:17 -03:00
Zach Wasserman 850d36543d Filter GitHub actions triggers on file types (#3009)
Reduce the total amount of Actions running by only running actions
relevant to the changes.
2021-11-18 15:14:29 -08:00
Zach Wasserman 8d4416b2d3 Update Go versions to 1.17.2 (#2805) 2021-11-04 19:50:00 -07:00
Zach Wasserman 8dc34be3a3 Updates and fixes for packaging (#2682)
- Fix Windows MSI generation by changing permissions (#2655).
- Refactor temp directory initialization.
- Use root user for Wine in WiX Docker container.
- Support .pkg packaging on Linux without dependencies (besides Docker)
2021-10-27 16:17:41 -07:00
Zach Wasserman 27a4fa75d0 Run Actions on patch branches (#2565) 2021-10-18 14:49:32 -07:00
Martin Angers eda6d60be8 Add replicas to the redis docker-compose setup. (#2511) 2021-10-18 08:33:26 -04:00
Tomas Touceda 07342e95c9 Need to checkout code explicitly (#2192) 2021-09-22 17:26:02 -03:00
Tomas Touceda 1db2acbff7 Add host count input (#2191) 2021-09-22 17:21:50 -03:00
Tomas Touceda 8600d71d35 Add osquery perf (#2190)
* Add osquery perf

* Update dockerfile and gh action
2021-09-22 17:18:55 -03:00
Zach Wasserman bc3d7fbe2b Always check doc links in CI (#2178)
- Check all links on every PR to better avoid broken links.
2021-09-22 10:29:43 -04:00
Zach Wasserman 8b04b84b0c Fix tagging branch name in development Docker publish (#2167) 2021-09-21 14:01:38 -07:00
Benjamin Edwards bd8cda15ce Publish development Docker images (#2114)
Publish Docker images for the following events:
1) A user with write access to the repo opens a PR.
2) Any commit is made to the `main`, or `patch-*` branches.
2021-09-21 13:06:22 -07:00
Zach Wasserman dd31779aac Increase timeout for golangci-lint (#2143) 2021-09-20 11:13:55 -07:00
Martin Angers 86dce785ae Improve performance of the Go test suite (#2060)
Closes #1805
2021-09-20 14:09:38 -04:00