Jeff Mahoney
3f054c52ce
- Clean up for Factory submission:
- Make bpf-enabled builds conditional
- Removed %defattr and combined service lines.
- Change clang and llvm dependencies to use >= 13
- Newer versions of clang hit a DWARF parsing bug in go < 1.19,
so increase go version dependecy
- Define ExclusiveArch for x86_64, ppc64le, aarch64, and s390x
Neither the client or server builds on ix86.
- Added Restart=on-failure to restart the client automatically.
- Update to version 0.6.7.4~git51.a588d6e4:
* magefile.go: use current architecture for Linux builds
* Update libbpfgo submodule to include non-AMD64 build fixes
* bpf: bpf expects s390 instead of s390x
- Clean up for Factory submission:
- Make bpf-enabled builds conditional
- Removed %defattr and combined service lines.
- Change clang and llvm dependencies to use >= 13
- Newer versions of clang hit a DWARF parsing bug in go < 1.19,
so increase go version dependecy
- Define ExclusiveArch for x86_64, ppc64le, aarch64, and s390x
Neither the client or server builds on ix86.
- Update to version 0.6.7.4~git51.a588d6e4:
* magefile.go: use current architecture for Linux builds
* Update libbpfgo submodule to include non-AMD64 build fixes
* bpf: bpf expects s390 instead of s390x
OBS-URL: https://build.opensuse.org/request/show/1059461
OBS-URL: https://build.opensuse.org/package/show/security:sensor/velociraptor?expand=0&rev=30
162 lines
5.4 KiB
RPMSpec
162 lines
5.4 KiB
RPMSpec
#
|
|
# spec file for package velociraptor
|
|
#
|
|
# Copyright (c) 2021 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
%define projname velociraptor
|
|
%define vendor_version 0.6.7.4~git41.678ed56
|
|
%define vmlinux_h_version 5.14.21150400.22-150400-default
|
|
|
|
%if 0%{?suse_version} >= 1500
|
|
%bcond_without bpf
|
|
%else
|
|
%bcond_with bpf
|
|
%endif
|
|
|
|
Name: velociraptor
|
|
Version: 0.6.7.4~git51.a588d6e4
|
|
Release: 0
|
|
Summary: Endpoint visibility and collection tool
|
|
Group: System/Monitoring
|
|
License: AGPL-3.0-only
|
|
URL: https://github.com/Velocidex/velociraptor
|
|
Source: %{projname}-%{version}.tar.xz
|
|
Source1: vendor-golang-%{vendor_version}.tar.xz
|
|
Source2: vendor-golang-kafka-humio-gateway-%{vendor_version}.tar.xz
|
|
Source3: vendor-nodejs-%{vendor_version}.tar.xz
|
|
Source4: %{name}.service
|
|
Source5: %{name}-server.config.placeholder
|
|
Source6: %{name}-client.service
|
|
Source7: %{name}-client.config.placeholder
|
|
Source8: vmlinux.h-%{vmlinux_h_version}.tar.xz
|
|
Source9: update-vendoring.sh
|
|
Patch1: velociraptor-golang-mage-vendoring.diff
|
|
Patch2: velociraptor-skip-git-submodule-import-for-OBS-build.patch
|
|
BuildRequires: golang-packaging
|
|
BuildRequires: systemd-rpm-macros
|
|
BuildRequires: systemd-devel
|
|
BuildRequires: golang(API) >= 1.19
|
|
BuildRequires: fileb0x
|
|
BuildRequires: mage
|
|
%ifarch x86_64
|
|
BuildRequires: libtsan0
|
|
%endif
|
|
BuildRequires: nodejs >= 16
|
|
BuildRequires: npm >= 16
|
|
%if %{with bpf}
|
|
BuildRequires: clang >= 13
|
|
BuildRequires: llvm >= 13
|
|
BuildRequires: bpftool
|
|
BuildRequires: libelf-devel
|
|
BuildRequires: zlib-devel-static
|
|
%endif
|
|
Conflicts: velociraptor-client
|
|
ExclusiveArch: x86_64 ppc64le aarch64 s390x
|
|
|
|
%description
|
|
Velociraptor is a tool for collecting host based state information
|
|
using The Velociraptor Query Language (VQL) queries.
|
|
|
|
To learn more about Velociraptor, read the documentation on:
|
|
|
|
https://docs.velociraptor.app/
|
|
|
|
This package contains the endpoint agent and full console GUI.
|
|
For just the endpoint agent, please install the 'velociraptor-client' package.
|
|
|
|
%package kafka-humio-gateway
|
|
Summary: Gateway between Kafka and Humio for Velociraptor Artifacts
|
|
Version: 0.6.7.4~git51.a588d6e4
|
|
|
|
%description kafka-humio-gateway
|
|
This tool is used to consume events generated by the Kafka Velociraptor plugin
|
|
and post them to a Humio cluster.
|
|
|
|
%prep
|
|
%setup -q -a 1 -a 2 -a 3 -a 8 -n %{projname}-%{version}
|
|
%autopatch -p1
|
|
|
|
# Set the version to something more specific than <next-tag>-dev
|
|
sed -ie "s/\(VERSION *= \).*/\1 \"%{version}\"/" constants/constants.go
|
|
|
|
%if %{with bpf}
|
|
mkdir -p third_party/libbpfgo/output
|
|
|
|
cp vmlinux.h-%{vmlinux_h_version}/vmlinux-%{_arch}.h \
|
|
third_party/libbpfgo/output/vmlinux.h
|
|
%endif
|
|
|
|
# These just clutter the GUI and we don't have Windows clients
|
|
# Note: There are dependencies on these that need to be resolved before
|
|
# removing them outright.
|
|
# rm -rf artifacts/definitions/Windows
|
|
|
|
%build
|
|
(cd gui/velociraptor ; npm run build)
|
|
PATH=$PATH:/usr/sbin make linux BUILD_LIBBPFGO=%{with bpf}
|
|
|
|
(cd contrib/kafka-humio-gateway; go build -o %{name}-kafka-humio-gateway)
|
|
|
|
%install
|
|
mkdir -p %buildroot/%{_bindir}
|
|
mkdir -p %buildroot/%{_sysconfdir}/velociraptor
|
|
mkdir -p %buildroot/%{_unitdir}
|
|
mkdir -p %buildroot/%{_sharedstatedir}/velociraptor/data
|
|
mkdir -p %buildroot/%{_sharedstatedir}/velociraptor/logs
|
|
mkdir -p %buildroot/%{_sharedstatedir}/velociraptor-client
|
|
mkdir -p %buildroot/%{_datadir}/%{name}-kafka-humio-gateway
|
|
install -m 0755 output/velociraptor-v%{version}-linux-* %buildroot/%{_bindir}/velociraptor
|
|
install -m 0755 contrib/kafka-humio-gateway/%{name}-kafka-humio-gateway %buildroot/%{_bindir}
|
|
install -m 0644 contrib/kafka-humio-gateway/sample-config.yml %buildroot/%{_datadir}/%{name}-kafka-humio-gateway/sample-config.yml
|
|
install -m 0644 %{SOURCE4} %{buildroot}%{_unitdir}/%{name}.service
|
|
install -m 0600 %{SOURCE5} %{buildroot}%{_sysconfdir}/velociraptor/server.config
|
|
install -m 0644 %{SOURCE6} %{buildroot}%{_unitdir}/%{name}-client.service
|
|
install -m 0600 %{SOURCE7} %{buildroot}%{_sysconfdir}/velociraptor/client.config
|
|
|
|
%files
|
|
%license LICENSE
|
|
%doc README.md
|
|
%dir %{_sysconfdir}/velociraptor
|
|
%{_bindir}/velociraptor
|
|
%config(noreplace) %{_sysconfdir}/velociraptor/server.config
|
|
%config(noreplace) %{_sysconfdir}/velociraptor/client.config
|
|
%{_unitdir}/%{name}.service
|
|
%{_unitdir}/%{name}-client.service
|
|
%dir %{_sharedstatedir}/velociraptor
|
|
%dir %{_sharedstatedir}/velociraptor/data
|
|
%dir %{_sharedstatedir}/velociraptor/logs
|
|
%dir %{_sharedstatedir}/velociraptor-client
|
|
|
|
%files kafka-humio-gateway
|
|
%license LICENSE
|
|
%doc contrib/kafka-humio-gateway/README.md
|
|
%{_bindir}/%{name}-kafka-humio-gateway
|
|
%dir %{_datadir}/%{name}-kafka-humio-gateway
|
|
%{_datadir}/%{name}-kafka-humio-gateway/sample-config.yml
|
|
|
|
%pre
|
|
%service_add_pre %{name}.service %{name}-client.service
|
|
|
|
%post
|
|
%service_add_post %{name}.service %{name}-client.service
|
|
|
|
%preun
|
|
%service_del_preun %{name}.service %{name}-client.service
|
|
|
|
%postun
|
|
%service_del_postun %{name}.service %{name}-client.service
|
|
|
|
%changelog
|