ReachableCEO
d82c8733fa
shifting away from invoking via curl and using a downloaded zip file or git clone.
27 lines
844 B
Bash
27 lines
844 B
Bash
#!/bin/bash
|
|
|
|
# We don't want to run this on the wazuh server, otherwise bad things happen...
|
|
|
|
export TSYS_NSM_CHECK
|
|
TSYS_NSM_CHECK="$(hostname |grep -c tsys-nsm ||true)"
|
|
|
|
if [ "$TSYS_NSM_CHECK" -eq 0 ]; then
|
|
|
|
if [ -f /usr/share/keyrings/wazuh.gpg ]; then
|
|
rm -f /usr/share/keyrings/wazuh.gpg
|
|
fi
|
|
|
|
curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH | gpg --no-default-keyring --keyring gnupg-ring:/usr/share/keyrings/wazuh.gpg --import
|
|
chmod 644 /usr/share/keyrings/wazuh.gpg
|
|
echo "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main" > /etc/apt/sources.list.d/wazuh.list
|
|
apt-get update
|
|
|
|
WAZUH_MANAGER="tsys-nsm.knel.net" apt-get -y install wazuh-agent
|
|
|
|
systemctl daemon-reload
|
|
systemctl enable wazuh-agent
|
|
systemctl start wazuh-agent
|
|
|
|
echo "wazuh-agent hold" | dpkg --set-selections
|
|
|
|
fi |