search

melicertes / csp

The Cyber Security Platform MeliCERTes is part of the European Strategy for Cyber Security. MeliCERTes is a network for establishing confidence and trust among the national Computer Security Incident Response Teams (CSIRTs) of the Member States and for promoting swift and effective operational cooperation.
Other
30 stars 7 forks source link

standalone version installation? #8

Closed rommelfs closed 4 years ago

rommelfs commented 5 years ago

For testing and standalone installation reasons, where can one download the ova for Melicertes? Or the installation instructions?

thanosa75 commented 5 years ago

It is possible, although for full operation the OVA is not enough, you will need a full CENTRAL installation as well. Are you OK to be contacted directly for details?

rommelfs commented 5 years ago

Sure, you can contact me directly.

thanosa75 commented 5 years ago

Raised internally, you will be contacted hopefully soon. Best regards, Thanos

adulau commented 5 years ago

A small question, can we install the software in this repository without requiring to register to a central node?

thanosa75 commented 5 years ago

No, connectivity to CENTRAL is only required, for the stage of registration, receiving of approved modules and installation. After installation, CSP nodes regularly provide heartbeats to CENTRAL for the purpose of verification of versions installed and general system health. All documented as part of the API (Configuration API, https://github.com/melicertes/csp/blob/develop/Architecture/API/api_configuration_service.yaml#L41)

IMHO, you may cut internet access at that point to central, but connecting to peers (Trust Circle contacts) would require some (limited) internet connectivity. CENTRAL connectivity is mandatory for updates basically. Hope this helps.

adulau commented 5 years ago

Thanks for the feedback. To be sure that I understand correctly, so the software cannot be installed without having access to a closed third-party service?

thanosa75 commented 5 years ago

Hi,

The project role of CENTRAL is currently run by the consortium but it is soon (November '19 if not sooner) to be handed over to the European Agency for Network and Information Security. So it is not going to be a third-party.

Best regards, Thanos

On 31 May 2019, at 16:33, Alexandre Dulaunoy notifications@github.com wrote:

Thanks for the feedback. To be sure that I understand correctly, so the software cannot be installed without having access to a closed third-party service?

— You are receiving this because you modified the open/close state. Reply to this email directly, view it on GitHub https://github.com/melicertes/csp/issues/8?email_source=notifications&email_token=AAJ7HVYJQKKBP4AUIFKYFJ3PYESLNA5CNFSM4HRWEYT2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODWVHJYQ#issuecomment-497710306, or mute the thread https://github.com/notifications/unsubscribe-auth/AAJ7HV5UFFQBEV3D4YLAKTLPYESLNANCNFSM4HRWEYTQ.

iglocska commented 5 years ago

Excellent, so when will the CENTRAL component be open sourced and made available on GitHub?

thanosa75 commented 5 years ago

The CENTRAL component is comprised of modules within this repository that are only centrally installed. Code is already available. I understand that this may not be self-evident so we can provide in documentation, which modules are only centrally installed and which are Node installed. Hopefully this clears it up.

On 31 May 2019, at 16:48, Andras Iklody notifications@github.com wrote:

Excellent, so when will the CENTRAL component be open sourced and made available on GitHub?

— You are receiving this because you modified the open/close state. Reply to this email directly, view it on GitHub https://github.com/melicertes/csp/issues/8?email_source=notifications&email_token=AAJ7HVYDS2CFIHYYALZV3F3PYEUB5A5CNFSM4HRWEYT2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODWVIPIQ#issuecomment-497715106, or mute the thread https://github.com/notifications/unsubscribe-auth/AAJ7HV2ZIEXRBBGDNPFV7O3PYEUB5ANCNFSM4HRWEYTQ.

rommelfs commented 5 years ago

Please re-open the issue until the standalone installer has been made available. Thanks

thanosa75 commented 5 years ago

Hi @rommelfs,

The standalone installer is the same installer. We use a docker-compose.yml to bootstrap the central configuration service (client and server,both) which then are used to install modules in the central and subsequently, install central itself. The actual file (https://github.com/melicertes/csp/blob/develop/deployment/docker/central/docker-compose.yml) is in the repo and the process itself is part of the Central Installation manual. The "central.zip" mentioned in the manual is the content of the directory where the docker-compose file is found.

The process may not be clear ATM but it is straightforward, following the guide. You do need other more vital parts, e.g. a PKI service that are not part of the software but a service in itself though, to be a full central installation.

Hope this helps.

rommelfs commented 5 years ago

Could you be specific and tell me how to install the software? I want to use it tomorrow during the training.

Ideally, without the need to use docker or any other container technology.

intrasoft-rmalik commented 5 years ago

@rommelfs can we close this issue?

rommelfs commented 5 years ago

As far as I can tell no information has been provided how to install and run in standalone mode. I wouldn't recommend closing the issue.

rommelfs commented 4 years ago

As discussed during the handover, the installation guide has since been included in the installation manual.