search

adoptium / infrastructure

This repo contains all information about machine maintenance.
Apache License 2.0
86 stars 101 forks source link

Upgrade Wazuh Server & Agents To Version 4.8.0 #3654

Closed steelhead31 closed 4 months ago

steelhead31 commented 4 months ago

The current version of Wazuh is out of date, and requires upgrading.

Part of: #3047

steelhead31 commented 4 months ago

Wazuh Server Upgraded to Wazuh 4.8.0

New vulnerability scanner configured and working OK.

Agents Require Upgrading:

/var/ossec/bin/agent_upgrade -l
ID    Name                                Version
002   build-azure-win2022-x64-1           Wazuh v4.5.3
003   dockerhost-equinix-ubuntu2204-armv8-1 Wazuh v4.5.3
004   build-osuosl-aix72-ppc64-1          Wazuh v4.5.3
006   build-siteox-solaris10u11-sparcv9-1 Wazuh v4.5.3
009   test-azure-win11-aarch64-1          Wazuh v4.5.3
010   test-osuosl-ubuntu2004-ppc64le-1    Wazuh v4.5.3
011   test-osuosl-aix72-ppc64-1           Wazuh v4.5.3
012   test-ibmcloud-rhel7-x64-1           Wazuh v4.5.3
014   test-azure-win2022-x64-1            Wazuh v4.5.3
015   build-azure-win2012r2-x64-1         Wazuh v4.5.3
016   build-azure-win2012r2-x64-2         Wazuh v4.5.3
017   build-azure-win2022-x64-2           Wazuh v4.5.3
018   build-digitalocean-centos69-x64-2   Wazuh v4.5.3
021   build-osuosl-aix72-ppc64-2          Wazuh v4.5.3
022   build-osuosl-centos74-ppc64le-1     Wazuh v4.5.3
023   build-osuosl-centos74-ppc64le-2     Wazuh v4.5.3
024   build-osuosl-ubuntu2204-aarch64-1   Wazuh v4.5.3
025   build-marist-rhel79-s390x-1         Wazuh v4.5.3
075   nagios                              Wazuh v4.5.3
076   build-ibmcloud-win2022-x64-1        Wazuh v4.5.3
080   dockerhost-equinix-ubuntu2004-armv8-1 Wazuh v4.5.3
082   dockerhost-osuosl-ubuntu2004-ppc64le-1 Wazuh v4.5.3
083   dockerhost-marist-ubuntu2204-s390x-1 Wazuh v4.5.3
084   dockerhost-skytap-ubuntu2004-ppc64le-1 Wazuh v4.5.3
085   ci.adoptium.net                     Wazuh v4.5.3
086   Trss                                Wazuh v4.5.3
088   infra-osuosl-ubuntu2204-aarch64-1-c3 Wazuh v4.5.3
091   build-azure-win2022-x64-3           Wazuh v4.5.3
092   dockerhost-osuosl-ubuntu2404-aarch64-1 Wazuh v4.5.3

steelhead31 commented 4 months ago

Agents upgraded via Wazuh/API.. the following agents will need to be upgraded individually..

003   dockerhost-equinix-ubuntu2204-armv8-1 Wazuh v4.5.3
004   build-osuosl-aix72-ppc64-1          Wazuh v4.5.3
006   build-siteox-solaris10u11-sparcv9-1 Wazuh v4.5.3
010   test-osuosl-ubuntu2004-ppc64le-1    Wazuh v4.5.3
011   test-osuosl-aix72-ppc64-1           Wazuh v4.5.3
021   build-osuosl-aix72-ppc64-2          Wazuh v4.5.3
022   build-osuosl-centos74-ppc64le-1     Wazuh v4.5.3
023   build-osuosl-centos74-ppc64le-2     Wazuh v4.5.3
024   build-osuosl-ubuntu2204-aarch64-1   Wazuh v4.5.3
025   build-marist-rhel79-s390x-1         Wazuh v4.5.3
080   dockerhost-equinix-ubuntu2004-armv8-1 Wazuh v4.5.3
082   dockerhost-osuosl-ubuntu2004-ppc64le-1 Wazuh v4.5.3
083   dockerhost-marist-ubuntu2204-s390x-1 Wazuh v4.5.3
084   dockerhost-skytap-ubuntu2004-ppc64le-1 Wazuh v4.5.3
088   infra-osuosl-ubuntu2204-aarch64-1-c3 Wazuh v4.5.3
092   dockerhost-osuosl-ubuntu2404-aarch64-1 Wazuh v4.5.3

steelhead31 commented 4 months ago

All agents upgraded, except for 4 problematic ones..

Upgraded : dockerhost-equinix-ubuntu2204-armv8-1
Upgraded : build-siteox-solaris10u11-sparcv9-1
Upgraded : test-osuosl-ubuntu2004-ppc64le-1
Upgraded : test-osuosl-aix72-ppc64-1  ( requires ldlibpath for syscheckd :  export LIBPATH=/opt/freeware/lib/gcc/powerpc-ibm-aix7.2.0.0/8/pthread )
Upgraded : build-osuosl-centos74-ppc64le-1
Upgraded : build-osuosl-centos74-ppc64le-2
Upgraded : build-osuosl-ubuntu2204-aarch64-1
Upgraded : dockerhost-equinix-ubuntu2004-armv8-1
Upgraded : dockerhost-osuosl-ubuntu2004-ppc64le-1
Upgraded : dockerhost-skytap-ubuntu2004-ppc64le-1
Upgraded : infra-osuosl-ubuntu2204-aarch64-1-c3
Upgraded : dockerhost-osuosl-ubuntu2404-aarch64-1

4 problematic agents...

Cant Access : build-osuosl-aix72-ppc64-1
Cant Access : build-osuosl-aix72-ppc64-2
Requires Complex Build From Source : build-marist-rhel79-s390x-1
Requires Complex Build From Source : dockerhost-marist-ubuntu2204-s390x-1
steelhead31 commented 4 months ago 
Upgraded : build-osuosl-aix72-ppc64-1 ( requires ldlibpath for syscheckd :  export LIBPATH=/opt/freeware/lib/gcc/powerpc-ibm-aix7.2.0.0/8/pthread )
Upgraded : build-osuosl-aix72-ppc64-2 ( requires ldlibpath for syscheckd :  export LIBPATH=/opt/freeware/lib/gcc/powerpc-ibm-aix7.2.0.0/8/pthread )
steelhead31 commented 4 months ago

First s390x agent upgraded..

build-marist-rhel79-s390x-1

Required manual builds of shared_modules and dependencies using cmake 3.18.4 and gcc9.4.0

steelhead31 commented 4 months ago

Final existing agent updated: dockerhost-marist-ubuntu2204-s390x-1