wazuh / wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

https://wazuh.com/

Other

11.08k stars 1.68k forks source link

Preliminary support new OSs - RHEL 10 - Test agent package #26935

Open jotacarma90 opened 1 week ago

jotacarma90 commented 1 week ago

Description

Related issue	Epic issue
https://github.com/wazuh/wazuh/issues/26925	-

Agent tier	Central components support	OS type
1	yes	Major

Plan

[ ] Smoke test that the package works, including installation, upgrade, and its related tier functionality.
[ ] Add support for the new OS to the GitHub Actions package builder.

Agent Requested testing code: :white_circle: Requested. :black_circle: Not requested.

Result code: :green_circle: Completed: Test finished with success. :red_circle: Completed with failures. :yellow_circle: Completed with known issues.

Requested checks by tier:

Tier 1	Tier 2	Tier 3	Result
Log collection - System events	:white_circle:	:white_circle:	:white_circle:
Log collection - Log files	:white_circle:	:white_circle:	:white_circle:
Log collection -Command execution	:white_circle:	:white_circle:	:white_circle:
FIM - Scheduled	:white_circle:	:white_circle:	:white_circle:
FIM - Realtime	:white_circle:	:black_circle:	:black_circle:
FIM - Whodata	:white_circle:	:black_circle:	:black_circle:
SCA	:white_circle:	:white_circle:	:black_circle:
Inventory	:white_circle:	:white_circle:	:white_circle:
Active response	:white_circle:	:white_circle:	:black_circle:
Remote upgrade	:white_circle:	:black_circle:	:black_circle:
Command monitoring	:white_circle:	:white_circle:	:black_circle:
Wodles	:white_circle:	:black_circle:	:black_circle:

jotacarma90 commented 5 days ago

Update 22/11/2024

Investigation related to virtualization of RHEL10, kernel panic found. Version of CPU seems not to be valid. Pending deeper investigation.