Merge pull request #1062 from wazuh/change/1051-wazuh-manager-install-from-sources-fails-due-to-the-gcc-version-tomaster

Removed build from source from wazuh-ansible repo

roles/elastic-stack/ansible-kibana/defaults/main.yml

@@ -45,9 +45,5 @@ nodejs:
       redhat: "rpm"
   repo_url_ext: "nodesource.com/setup_10.x"
 
-# Build from sources
-build_from_sources: false
-wazuh_plugin_branch: 4.1-7.10
-
 #Nodejs NODE_OPTIONS
 node_options: --no-warnings --max-old-space-size=2048 --max-http-header-size=65536

roles/opendistro/opendistro-kibana/defaults/main.yml

@@ -52,9 +52,6 @@ nodejs:
       redhat: "rpm"
   repo_url_ext: "nodesource.com/setup_10.x"
 
-# Build from sources
-build_from_sources: false
-wazuh_plugin_branch: 4.1-7.10
 
 #Nodejs NODE_OPTIONS
 node_options: --no-warnings --max-old-space-size=2048 --max-http-header-size=65536

roles/wazuh/ansible-wazuh-agent/defaults/main.yml

@@ -7,30 +7,6 @@ wazuh_custom_packages_installation_agent_enabled: false
 wazuh_custom_packages_installation_agent_deb_url: ""
 wazuh_custom_packages_installation_agent_rpm_url: ""
 
-# Sources installation
-
-wazuh_agent_sources_installation:
-  enabled: false
-  branch: "v4.8.0"
-  user_language: "y"
-  user_no_stop: "y"
-  user_install_type: "agent"
-  user_dir: "/var/ossec"
-  user_delete_dir: "y"
-  user_enable_active_response: "y"
-  user_enable_syscheck: "y"
-  user_enable_rootcheck: "y"
-  user_enable_openscap: "n"
-  user_enable_sca: "y"
-  user_enable_authd: "y"
-  user_generate_authd_cert: "n"
-  user_update: "y"
-  user_binaryinstall: null
-  user_agent_server_ip: "YOUR_MANAGER_IP"
-  user_agent_server_name: null
-  user_agent_config_profile: null
-  user_ca_store: "{{ wazuh_dir }}/wpk_root.pem"
-
 wazuh_agent_yum_lock_timeout: 30
 
 # We recommend the use of ansible-vault to protect Wazuh, api, agentless and authd credentials.

roles/wazuh/ansible-wazuh-agent/tasks/Debian.yml

@@ -30,7 +30,6 @@
   when:
     - ansible_distribution == "Ubuntu"
     - ansible_distribution_major_version | int == 14
-    - not wazuh_agent_sources_installation.enabled
     - not wazuh_custom_packages_installation_agent_enabled
 
 - name: Debian/Ubuntu | Installing Wazuh repository key
@@ -39,7 +38,6 @@
     id: "{{ wazuh_agent_config.repo.key_id }}"
   when:
     - not (ansible_distribution == "Ubuntu" and ansible_distribution_major_version | int == 14)
-    - not wazuh_agent_sources_installation.enabled
     - not wazuh_custom_packages_installation_agent_enabled
 
 - name: Debian/Ubuntu | Add Wazuh repositories
@@ -49,7 +47,6 @@
     state: present
     update_cache: true
   when:
-    - not wazuh_agent_sources_installation.enabled
     - not wazuh_custom_packages_installation_agent_enabled
 
 - name: Debian/Ubuntu | Set Distribution CIS filename for debian

roles/wazuh/ansible-wazuh-agent/tasks/Linux.yml

@@ -5,10 +5,6 @@
 - include_tasks: "Debian.yml"
   when: ansible_os_family == "Debian"
 
-- include_tasks: "installation_from_sources.yml"
-  when:
-    - wazuh_agent_sources_installation.enabled
-
 - include_tasks: "installation_from_custom_packages.yml"
   when:
     - wazuh_custom_packages_installation_agent_enabled
@@ -20,7 +16,6 @@
     lock_timeout: '{{ wazuh_agent_yum_lock_timeout }}'
   when:
     - ansible_os_family|lower == "redhat"
-    - not wazuh_agent_sources_installation.enabled
     - not wazuh_custom_packages_installation_agent_enabled
   tags:
     - init
@@ -32,7 +27,6 @@
     cache_valid_time: 3600
   when:
     - ansible_os_family|lower != "redhat"
-    - not wazuh_agent_sources_installation.enabled
     - not wazuh_custom_packages_installation_agent_enabled
     - not ansible_check_mode
   tags:
@@ -271,9 +265,7 @@
 - include_tasks: "RMRedHat.yml"
   when:
     - ansible_os_family == "RedHat"
-    - not wazuh_agent_sources_installation.enabled
 
 - include_tasks: "RMDebian.yml"
   when:
     - ansible_os_family == "Debian"
-    - not wazuh_agent_sources_installation.enabled

roles/wazuh/ansible-wazuh-agent/tasks/RedHat.yml

@@ -10,7 +10,6 @@
   when:
     - (ansible_facts['os_family']|lower == 'redhat') and (ansible_distribution|lower != 'amazon')
     - (ansible_distribution_major_version|int <= 5)
-    - not wazuh_agent_sources_installation.enabled
     - not wazuh_custom_packages_installation_agent_enabled
   register: repo_v5_installed
 
@@ -24,7 +23,6 @@
   changed_when: false
   when:
     - repo_v5_installed is skipped
-    - not wazuh_agent_sources_installation.enabled
     - not wazuh_custom_packages_installation_agent_enabled
 
 - name: RedHat/CentOS/Fedora | Install OpenJDK 1.8

roles/wazuh/ansible-wazuh-agent/tasks/installation_from_sources.yml

@@ -1,100 +0,0 @@
----
-  - name: Install dependencies to build Wazuh packages
-    package:
-      name:
-        - make
-        - gcc
-        - automake
-        - autoconf
-        - libtool
-        - tar
-      state: present
-
-  - name: Removing old files
-    file:
-      path: "/tmp/{{ wazuh_agent_sources_installation.branch }}.tar.gz"
-      state: absent
-
-  - name: Removing old folders
-    file:
-      path: "/tmp/wazuh-{{ wazuh_agent_sources_installation.branch }}"
-      state: absent
-
-  - name: Installing policycoreutils-python (RedHat families)
-    package:
-      name:
-        - policycoreutils-python
-    when:
-      - ansible_os_family|lower == "redhat"
-
-  - name: Installing policycoreutils-python-utils (Debian families)
-    package:
-      name:
-        - libc6-dev
-        - curl
-        - policycoreutils
-    when:
-      - ansible_os_family|lower == "debian"
-
-  - name: Download required packages from github.com/wazuh/wazuh
-    get_url:
-      url: "https://github.com/wazuh/wazuh/archive/{{ wazuh_agent_sources_installation.branch }}.tar.gz"
-      dest: "/tmp/{{ wazuh_agent_sources_installation.branch }}.tar.gz"
-    delegate_to: "{{ inventory_hostname }}"
-    changed_when: false
-
-  - name: Create folder to extract Wazuh branch
-    file:
-      path: "/tmp/wazuh-{{ wazuh_agent_sources_installation.branch }}"
-      mode: 0755
-      state: directory
-    changed_when: false
-
-  - name: Extract downloaded Wazuh branch from Github # Using shell instead of unarchive due to that module not working properlyh with --strip
-    command: >-
-      tar -xzvf /tmp/{{ wazuh_agent_sources_installation.branch }}.tar.gz
-      --strip 1
-      --directory /tmp/wazuh-{{ wazuh_agent_sources_installation.branch }}
-    register: wazuh_untar
-    changed_when: false
-    args:
-      warn: false
-
-  - name: Clean remaining files from others builds
-    command: "make -C src {{ item }}"
-    args:
-      chdir: "/tmp/wazuh-{{ wazuh_agent_sources_installation.branch }}/src/"
-    with_items:
-      - "clean"
-      - "clean-deps"
-    register: clean_result
-    changed_when: clean_result.rc == 0
-    failed_when: false
-
-  - name: Render the "preloaded-vars.conf" file
-    template:
-      src: "templates/preloaded_vars_agent.conf.j2"
-      dest: "/tmp/wazuh-{{ wazuh_agent_sources_installation.branch }}/etc/preloaded-vars.conf"
-      owner: root
-      group: root
-      mode: 0644
-    changed_when: false
-
-  - name: Executing "install.sh" script to build and install the Wazuh Agent
-    shell: ./install.sh > /tmp/build_agent_log.txt
-    register: installation_result
-    changed_when: installation_result == 0
-    args:
-      chdir: "/tmp/wazuh-{{ wazuh_agent_sources_installation.branch }}"
-
-  - name: Cleanup downloaded files
-    file:
-      path: "/tmp/{{ wazuh_agent_sources_installation.branch }}.tar.gz"
-      state: absent
-    changed_when: false
-
-  - name: Cleanup created folders
-    file:
-      path: "/tmp/wazuh-{{ wazuh_agent_sources_installation.branch }}"
-      state: absent
-    changed_when: false

roles/wazuh/ansible-wazuh-agent/templates/preloaded_vars_agent.conf.j2

@@ -1,7 +0,0 @@
-{% for key, value in wazuh_agent_sources_installation.items() %}
-{% if "user_" in key %}
-{% if value is defined and value is not none %}
-{{ key|upper }}="{{ value }}"
-{% endif %}
-{% endif %}
-{% endfor %}

roles/wazuh/ansible-wazuh-manager/defaults/main.yml

@@ -9,32 +9,6 @@ wazuh_custom_packages_installation_manager_enabled: false
 wazuh_custom_packages_installation_manager_deb_url: "https://s3-us-west-1.amazonaws.com/packages-dev.wazuh.com/"
 wazuh_custom_packages_installation_manager_rpm_url: "https://s3-us-west-1.amazonaws.com/packages-dev.wazuh.com/"
 
-# Sources installation
-wazuh_manager_sources_installation:
-  enabled: false
-  branch: "v4.8.0"
-  user_language: "en"
-  user_no_stop: "y"
-  user_install_type: "server"
-  user_dir: "/var/ossec"
-  user_delete_dir: null
-  user_enable_active_response: null
-  user_enable_syscheck: "y"
-  user_enable_rootcheck: "y"
-  user_enable_openscap: "n"
-  user_enable_authd: "y"
-  user_generate_authd_cert: null
-  user_update: "y"
-  user_binaryinstall: null
-  user_enable_email: "n"
-  user_auto_start: "y"
-  user_email_address: null
-  user_email_smpt: null
-  user_enable_syslog: "n"
-  user_white_list: "n"
-  user_ca_store: null
-  threads: "2"
-
 wazuh_dir: "/var/ossec"
 
 ##########################################

roles/wazuh/ansible-wazuh-manager/files/create_user.py

@@ -13,7 +13,7 @@ SPECIAL_CHARS = "@$!%*?&-_"
 
 
 try:
-    from wazuh.rbac.orm import create_rbac_db
+    from wazuh.rbac.orm import check_database_integrity
     from wazuh.security import (
         create_user,
         get_users,
@@ -69,7 +69,7 @@ if __name__ == "__main__":
     username, password = read_user_file()
 
     # create RBAC database
-    create_rbac_db()
+    check_database_integrity()
 
     initial_users = db_users()
     if username not in initial_users:

roles/wazuh/ansible-wazuh-manager/tasks/Debian.yml

@@ -24,7 +24,6 @@
   when:
     - ansible_distribution == "Ubuntu"
     - ansible_distribution_major_version | int == 14
-    - not wazuh_manager_sources_installation.enabled
     - not wazuh_custom_packages_installation_manager_enabled
 
 - name: Debian/Ubuntu | Installing Wazuh repository key
@@ -33,7 +32,6 @@
     id: "{{ wazuh_manager_config.repo.key_id }}"
   when:
     - not (ansible_distribution == "Ubuntu" and ansible_distribution_major_version | int == 14)
-    - not wazuh_manager_sources_installation.enabled
     - not wazuh_custom_packages_installation_manager_enabled
 
 - name: Debian/Ubuntu | Add Wazuh repositories
@@ -44,7 +42,6 @@
     update_cache: true
   changed_when: false
   when:
-    - not wazuh_manager_sources_installation.enabled
     - not wazuh_custom_packages_installation_manager_enabled
 
 - name: Debian/Ubuntu | Set Distribution CIS filename for Debian/Ubuntu
@@ -98,12 +95,6 @@
   tags:
     - config
 
-- name: Install dependencies to build from sources
-  apt:
-    name: ['make', 'gcc', 'automake', 'autoconf', 'libtool', 'tar', 'libssl-dev', 'g++']
-    state: present
-  when: wazuh_manager_sources_installation.enabled
-
 - name: Debian/Ubuntu | Install wazuh-manager
   apt:
     name:
@@ -111,13 +102,8 @@
     state: present
   tags: init
   when:
-    - not wazuh_manager_sources_installation.enabled
     - not wazuh_custom_packages_installation_manager_enabled
 
-- include_tasks: "installation_from_sources.yml"
-  when:
-    - wazuh_manager_sources_installation.enabled
-
 - include_tasks: "installation_from_custom_packages.yml"
   when:
     - wazuh_custom_packages_installation_manager_enabled

roles/wazuh/ansible-wazuh-manager/tasks/RedHat.yml

@@ -10,7 +10,6 @@
   when:
     - (ansible_os_family|lower == 'redhat') and (ansible_distribution|lower != 'amazon')
     - (ansible_distribution_major_version|int <= 5)
-    - not wazuh_manager_sources_installation.enabled
     - not wazuh_custom_packages_installation_manager_enabled
   register: repo_v5_manager_installed
 
@@ -24,7 +23,6 @@
   changed_when: false
   when:
     - repo_v5_manager_installed is skipped
-    - not wazuh_manager_sources_installation.enabled
     - not wazuh_custom_packages_installation_manager_enabled
 
 - name: RedHat/CentOS/Fedora | Install openscap
@@ -93,12 +91,6 @@
   when:
     - ansible_distribution == "Amazon" and ansible_distribution_major_version == "NA"
 
-- name: Install dependencies to build from sources
-  yum:
-    name: ['make', 'gcc', 'automake', 'autoconf', 'libtool', 'tar', 'openssl-devel', 'gcc-c++']
-    state: present
-  when: wazuh_manager_sources_installation.enabled
-
 - name: CentOS/RedHat/Amazon | Install wazuh-manager
   package:
     name: "wazuh-manager-{{ wazuh_manager_version }}"
@@ -107,15 +99,10 @@
   until: wazuh_manager_main_packages_installed is succeeded
   when:
     - ansible_os_family|lower == "redhat"
-    - not wazuh_manager_sources_installation.enabled
     - not wazuh_custom_packages_installation_manager_enabled
   tags:
     - init
 
-- include_tasks: "../tasks/installation_from_sources.yml"
-  when:
-    - wazuh_manager_sources_installation.enabled
-
 - include_tasks: "../tasks/installation_from_custom_packages.yml"
   when:
     - wazuh_custom_packages_installation_manager_enabled

roles/wazuh/ansible-wazuh-manager/tasks/installation_from_sources.yml

@@ -1,125 +0,0 @@
----
-# Wazuh Manager
-  - name: Check if Wazuh Manager is already installed
-    stat:
-      path: "{{ wazuh_dir }}/bin/wazuh-control"
-    register: wazuh_control_path
-
-  - name: Installing Wazuh Manager from sources
-    block:
-      - name: Install dependencies to build Wazuh packages
-        package:
-          name:
-            - make
-            - gcc
-            - automake
-            - autoconf
-            - libtool
-            - tar
-          state: present
-
-      - name: Install CMake 
-        include_tasks: install_cmake.yml
-
-      - name: Removing old files
-        file:
-          path: "/tmp/{{ wazuh_manager_sources_installation.branch }}.tar.gz"
-          state: absent
-
-      - name: Removing old folders
-        file:
-          path: "/tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}"
-          state: absent
-
-      - name: Installing policycoreutils-python (RedHat families)
-        package:
-          name:
-            - policycoreutils-python
-        when:
-          - ansible_os_family|lower == "redhat"
-
-      - name: Installing policycoreutils-python-utils (Debian families)
-        package:
-          name:
-            - libc6-dev
-            - curl
-            - policycoreutils
-        when:
-          - ansible_os_family|lower == "debian"
-
-      - name: Remove old repository folder
-        file:
-          path: /tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}
-          state: absent
-
-      - name: Download required packages from github.com/wazuh/wazuh
-        get_url:
-          url: "https://github.com/wazuh/wazuh/archive/{{ wazuh_manager_sources_installation.branch }}.tar.gz"
-          dest: "/tmp/{{ wazuh_manager_sources_installation.branch }}.tar.gz"
-        delegate_to: "{{ inventory_hostname }}"
-
-      - name: Create folder to extract Wazuh branch
-        file:
-          path: "/tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}"
-          owner: root
-          group: root
-          mode: 0644
-          state: directory
-
-    # When downloading "v3.11.0" extracted folder name is 3.11.0.
-
-    # Explicitly creating the folder with proper naming and striping first level in .tar.gz file
-
-      - name: Extract downloaded Wazuh branch from Github # Using shell instead of unarchive due to that module not working properlyh with --strip
-        command: >-
-          tar -xzvf /tmp/{{ wazuh_manager_sources_installation.branch }}.tar.gz
-          --strip 1
-          --directory /tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}
-        register: wazuh_untar
-        changed_when: wazuh_untar.rc ==0
-        args:
-          warn: false
-
-      - name: Clean remaining files from others builds
-        command: "make -C src {{ item }}"
-        args:
-          chdir: "/tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}/src/"
-        with_items:
-          - "clean"
-          - "clean-deps"
-        register: clean_result
-        changed_when: clean_result.rc == 0
-        failed_when: false
-
-      - name: Render the "preloaded-vars.conf" file
-        template:
-          src: "templates/preloaded_vars_manager.conf.j2"
-          dest: "/tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}/etc/preloaded-vars.conf"
-          owner: root
-          group: root
-          mode: 0644
-
-      - name: Executing "install.sh" script to build and install the Wazuh Manager
-        shell: ./install.sh > /tmp/build_wazuh_manager_log.txt
-        register: installation_result
-        changed_when: installation_result == 0
-        args:
-          chdir: "/tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}"
-        environment:
-          PATH: /usr/local/bin:{{ ansible_env.PATH }}
-
-      - name: Cleanup downloaded files
-        file:
-          path: "/tmp/{{ wazuh_manager_sources_installation.branch }}.tar.gz"
-          state: absent
-
-      - name: Cleanup created folders
-        file:
-          path: "/tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}"
-          state: absent
-
-    when:
-      - not wazuh_control_path.stat.exists
-      - wazuh_manager_sources_installation.enabled
-    tags:
-      - manager

roles/wazuh/ansible-wazuh-manager/tasks/main.yml

@@ -336,4 +336,3 @@
 
 - name: Run uninstall tasks
   include_tasks: uninstall.yml
-  when: not wazuh_manager_sources_installation.enabled

roles/wazuh/ansible-wazuh-manager/templates/preloaded_vars_manager.conf.j2

@@ -1,7 +0,0 @@
-{% for key, value in wazuh_manager_sources_installation.items() %}
-{% if "user_" in key %}
-{% if value is defined and value is not none %}
-{{ key|upper }}="{{ value }}"
-{% endif %}
-{% endif %}
-{% endfor %}

roles/wazuh/wazuh-dashboard/tasks/RedHat.yml

@@ -3,7 +3,6 @@
 
   - name: RedHat/CentOS/Fedora | Add Wazuh dashboard repo
     yum_repository:
-      file: wazuh
       name: wazuh_repo
       description: Wazuh yum repository
       baseurl: "{{ wazuh_repo.yum }}"

roles/wazuh/wazuh-indexer/tasks/RedHat.yml

@@ -3,7 +3,6 @@
 
   - name: RedHat/CentOS/Fedora | Add Wazuh indexer repo
     yum_repository:
-      file: wazuh
       name: wazuh_repo
       description: Wazuh yum repository
       baseurl: "{{ wazuh_repo.yum }}"