pool/velociraptor
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
ecefcb440b
velociraptor/velociraptor-client.service

26 lines
600 B
SYSTEMD
Raw Normal View History

Accepting request 950594 from home:firstyear:branches:security:sensor - Add client service file OBS-URL: https://build.opensuse.org/request/show/950594 OBS-URL: https://build.opensuse.org/package/show/security:sensor/velociraptor?expand=0&rev=2
2022-02-02 08:01:30 +01:00
[Unit]
Description=Velociraptor Client Service
[Service]
Type=simple
User=root
Group=root
UMask=0027
Accepting request 1060003 from home:dirkmueller:Factory - add memory limit to systemd unit OBS-URL: https://build.opensuse.org/request/show/1060003 OBS-URL: https://build.opensuse.org/package/show/security:sensor/velociraptor?expand=0&rev=34
2023-01-20 17:50:46 +01:00
MemoryHigh=4G
MemoryMax=8G
Accepting request 1059625 from home:jeff_mahoney:branches:security:sensor --------------------------------------------------------------------- - Restore requirement to build with clang13. Newer versions cause libbpfgo to crash immediately. ----------------------------------------------------------------- - Added support for setting command line options via sysconfig - Restore requirement to build with clang13. Newer versions cause libbpfgo to crash immediately. - Added support for setting command line options via sysconfig OBS-URL: https://build.opensuse.org/request/show/1059625 OBS-URL: https://build.opensuse.org/package/show/security:sensor/velociraptor?expand=0&rev=32
2023-01-19 16:27:12 +01:00
EnvironmentFile=-/etc/sysconfig/velociraptor-client
Accepting request 1134354 from home:jeff_mahoney:branches:security:sensor - Added workaround for missing Maintainers tag in Debian-based packages. obs-service-format_spec_file strips the Packager tag from the spec file before committing. The build service replaces it with its own. debbuild expects the Packager field to be present to generate the Maintainers tag in the output but it only receives the "cleaned" spec file. - Added Recommends: auditd - Technically not *required* but Velociraptor's audit client enables audit and then listens on the multicast socket. Without a listener on the unicast socket, the kernel will spam the system log with events. - Fixed debian packaging: * /etc/sysconfig -> /etc/default * %postun for systemd service cleanup * Note: obs-service-format_spec_file strips the Packager tag that debbuild uses to generate the Maintainer tag OBS-URL: https://build.opensuse.org/request/show/1134354 OBS-URL: https://build.opensuse.org/package/show/security:sensor/velociraptor?expand=0&rev=59
2023-12-21 01:29:28 +01:00
EnvironmentFile=-/etc/default/velociraptor-client
Accepting request 1085591 from home:jeff_mahoney:branches:security:sensor:updates - Update to version 0.6.7.5~git78.2bef6fc: * bpf: fix path to vmlinux.h - Update to version 0.6.7.5~git77.997aa73: * file_store/test_utils/server_config.go: update test certificate * Update bluemonday dependency. * vql/functions/hash: cache results on Linux * libbpfgo: update to velociraptor-branch-v0.4.8-libbpf-1.2.0 * logscale/backport: don't use networking.GetHttpTransport * vql/tools/logscale: add plugin to post events to LogScale ingestion endpoint * file_store/directory: add ability to report pending size - Change clang dependency to clang16 - Fix velociraptor-golang-mage-vendoring.diff to account for newer 'go mod vendor' honoring build flags. - Fix update-vendoring.sh script to actually run the %setup part of the spec. - Merge client package into server spec and use _multibuild to create client package from same spec file. - Adjust changelog to retain changes for client package. - Fix building in static mode on earlier releases. - Added patch: velociraptor-libbpfgo-only-build-libbpf.patch - Tightening the security of the services a bit: - tmp files are now moved to /var/lib/velociraptor{,-client}/tmp from /tmp - run velociraptor server as user velociraptor instead of root we do not really need root permissions here - introduce /var/lib/velociraptor/filestore to make it easier to split out large file upload - change permissions for the data directory and subdirectories to OBS-URL: https://build.opensuse.org/request/show/1085591 OBS-URL: https://build.opensuse.org/package/show/security:sensor/velociraptor?expand=0&rev=46
2023-05-09 02:49:51 +02:00
Environment=TMPDIR=/var/lib/velociraptor-client/tmp
ExecStart=/usr/bin/velociraptor-client client --config /etc/velociraptor/client.config $VELOCIRAPTOR_CLIENT_OPTS
Accepting request 950594 from home:firstyear:branches:security:sensor - Add client service file OBS-URL: https://build.opensuse.org/request/show/950594 OBS-URL: https://build.opensuse.org/package/show/security:sensor/velociraptor?expand=0&rev=2
2022-02-02 08:01:30 +01:00
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
MemoryDenyWriteExecute=true
Accepting request 1059461 from home:jeff_mahoney:branches:security:sensor - Clean up for Factory submission: - Make bpf-enabled builds conditional - Removed %defattr and combined service lines. - Change clang and llvm dependencies to use >= 13 - Newer versions of clang hit a DWARF parsing bug in go < 1.19, so increase go version dependecy - Define ExclusiveArch for x86_64, ppc64le, aarch64, and s390x Neither the client or server builds on ix86. - Added Restart=on-failure to restart the client automatically. - Update to version 0.6.7.4~git51.a588d6e4: * magefile.go: use current architecture for Linux builds * Update libbpfgo submodule to include non-AMD64 build fixes * bpf: bpf expects s390 instead of s390x - Clean up for Factory submission: - Make bpf-enabled builds conditional - Removed %defattr and combined service lines. - Change clang and llvm dependencies to use >= 13 - Newer versions of clang hit a DWARF parsing bug in go < 1.19, so increase go version dependecy - Define ExclusiveArch for x86_64, ppc64le, aarch64, and s390x Neither the client or server builds on ix86. - Update to version 0.6.7.4~git51.a588d6e4: * magefile.go: use current architecture for Linux builds * Update libbpfgo submodule to include non-AMD64 build fixes * bpf: bpf expects s390 instead of s390x OBS-URL: https://build.opensuse.org/request/show/1059461 OBS-URL: https://build.opensuse.org/package/show/security:sensor/velociraptor?expand=0&rev=30
2023-01-19 02:05:43 +01:00
Restart=on-failure
Accepting request 950594 from home:firstyear:branches:security:sensor - Add client service file OBS-URL: https://build.opensuse.org/request/show/950594 OBS-URL: https://build.opensuse.org/package/show/security:sensor/velociraptor?expand=0&rev=2
2022-02-02 08:01:30 +01:00
[Install]
WantedBy=multi-user.target
Reference in New Issue Copy Permalink