feat(ca): artifact mirror live — pinned wazuh-agent debs on tsys-ca [#758]

dist/wazuh-agent/4.14.7-1/ (amd64+arm64+armhf) + SHA256SUMS, autoindex
enabled, workstation hash-verified against published manifest.
deploy-agent.sh now installs from the mirror (upstream fallback) and
auto-detects arch. #335: kali-tsys enrolled+active (30 total agents).

Detail: https://projects.knownelement.com/issues/758
This commit is contained in:
2026-09-03 13:25:28 -05:00
parent e27e3a06b8
commit 1620351028
2 changed files with 53 additions and 3 deletions
+7 -3
View File
@@ -8,11 +8,15 @@ set -euo pipefail
MGR="tsys-wazuh.knel.net"
VER="4.14.7-1"
ARCH="$(dpkg --print-architecture)"
# Pinned mirror on tsys-ca [#758]; upstream fallback if the mirror is down
MIRROR="http://tsys-ca.knel.net/ca/dist/wazuh-agent/${VER}/wazuh-agent_${VER}_${ARCH}.deb"
UPSTREAM="https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-agent/wazuh-agent_${VER}_${ARCH}.deb"
if ! dpkg -s wazuh-agent >/dev/null 2>&1; then
echo "installing wazuh-agent $VER (manager: $MGR)"
curl -sSf --max-time 120 -o /tmp/wazuh-agent.deb \
"https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-agent/wazuh-agent_${VER}_amd64.deb"
echo "installing wazuh-agent $VER ($ARCH; manager: $MGR)"
curl -sSf --max-time 120 -o /tmp/wazuh-agent.deb "$MIRROR" \
|| curl -sSf --max-time 120 -o /tmp/wazuh-agent.deb "$UPSTREAM"
WAZUH_MANAGER="$MGR" WAZUH_REGISTRATION_SERVER="$MGR" \
DEBIAN_FRONTEND=noninteractive dpkg -i /tmp/wazuh-agent.deb
rm -f /tmp/wazuh-agent.deb