Juan Fernandez
60ad78f897
Resolves #50069 Omarchy 4 ships its own /etc/os-release with ID=omarchy, where earlier versions inherited ID=arch from Arch Linux. Since HostLinuxOSs and HOST_LINUX_PLATFORMS gate nearly every Linux check, these hosts had empty vitals and software inventory, were missed by linux-scoped policies and labels, had no disk encryption or key escrow, and lost Run script in the UI (the API was unaffected). Add "omarchy" to HostLinuxOSs, HostNeitherDebNorRpmPackageOSs (pacman- based), IsLUKSSupported, HOST_LINUX_PLATFORMS, DISK_ENCRYPTION_SUPPORTED_LINUX_PLATFORMS, and the Vitals disk-encryption tooltip. Regenerate understanding-host-vitals.md. Aggregate Omarchy onto the "Arch Linux" / "rolling" OS inventory row, where these hosts sat before quattro. Unlike CachyOS, Omarchy reports a real release number rather than BUILD_ID=rolling, so the version is pinned after parsing instead of rewriting the ingested build value. Also add a fleetd test container, built on archlinux since Omarchy publishes no image.
47 lines
1.4 KiB
YAML
47 lines
1.4 KiB
YAML
---
|
|
x-default-settings:
|
|
environment: &default-environment
|
|
ENROLL_SECRET: "${ENROLL_SECRET:?ENROLL_SECRET must be set for server authentication}"
|
|
platform: &default-platform linux/amd64
|
|
cap_add: &default-caps
|
|
- SYS_PTRACE
|
|
|
|
#
|
|
# SYS_PTRACE is granted so osquery can read /proc/<pid>/io for processes it
|
|
# doesn't own (otherwise: `[... processes.cpp:510] Cannot read /proc/50/io`).
|
|
# We avoid `privileged: true` because running multiple privileged services
|
|
# at once breaks Docker Desktop for Mac.
|
|
#
|
|
|
|
services:
|
|
ubuntu24.04-fleetd:
|
|
image: "fleetd-ubuntu-24.04"
|
|
platform: *default-platform
|
|
environment: *default-environment
|
|
cap_add: *default-caps
|
|
restart: unless-stopped
|
|
fedora43-fleetd:
|
|
image: "fleetd-fedora-43"
|
|
platform: *default-platform
|
|
environment: *default-environment
|
|
cap_add: *default-caps
|
|
restart: unless-stopped
|
|
debian13.4-fleetd:
|
|
image: "fleetd-debian-13.4"
|
|
platform: *default-platform
|
|
environment: *default-environment
|
|
cap_add: *default-caps
|
|
restart: unless-stopped
|
|
cachyos-fleetd:
|
|
image: "fleetd-cachyos"
|
|
platform: *default-platform
|
|
environment: *default-environment
|
|
cap_add: *default-caps
|
|
restart: unless-stopped
|
|
fake-omarchy-fleetd:
|
|
image: "fleetd-fake-omarchy"
|
|
platform: *default-platform
|
|
environment: *default-environment
|
|
cap_add: *default-caps
|
|
restart: unless-stopped
|