fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
2.93k stars 409 forks source link

Best practice script to package Tenable agents into one .pkg #19021

Open noahtalerman opened 4 months ago

noahtalerman commented 4 months ago

Goal

User story
As an IT admin,
I want to run a script on my macOS workstation that packages the Tenable agent into one .pkg
so that I can upload this .pkg to Fleet and deploy it on my macOS hosts.

Context

As part of the "Deploy security agents" (#14921) story, Fleet supports uploading one package.

In the Tenable docs, they say...

Extract Install Nessus Agent.pkg and .NessusAgent.pkg from NessusAgent-<version number>.dmg. 

Note that these are two pakcages, the Install Nessus Agent.pkg needs the .NessusAgent.pkg in the same directory, otherwise the install fails:

$ sudo installer -allowUntrusted -pkg ~/Downloads/Install\ Nessus\ Agent.pkg -target /
installer: Package name is Tenable Nessus Agent
installer: Installing at base path /
installer: The install failed. (The Installer can't locate the data it needs to install the software. Check your install media or Internet connection and try again, or contact the software manufacturer for assistance. )

Changes

Product

Engineering

ℹ️  Please read this issue carefully and understand it. Pay special attention to UI wireframes, especially "dev notes".

QA

Risk assessment

Manual testing steps

  1. Step 1
  2. Step 2
  3. Step 3

Testing notes

Confirmation

  1. [ ] Engineer (@____): Added comment to user story confirming successful completion of QA.
  2. [ ] QA (@____): Added comment to user story confirming successful completion of QA.
georgekarrv commented 1 month ago

Update guide -> https://github.com/fleetdm/fleet/issues/20179 to point to this script example.