--- - name: RedHat/CentOS 5 | Install Wazuh repo yum_repository: name: wazuh_repo description: Wazuh repository baseurl: "{{ wazuh_manager_config.repo.yum }}5/" gpgkey: "{{ wazuh_manager_config.repo.gpg }}-5" gpgcheck: true changed_when: false when: - (ansible_os_family|lower == 'redhat') and (ansible_distribution|lower != 'amazon') - (ansible_distribution_major_version|int <= 5) - not wazuh_manager_sources_installation.enabled - not wazuh_custom_packages_installation_manager_enabled register: repo_v5_manager_installed - name: RedHat/CentOS/Fedora | Install Wazuh repo yum_repository: name: wazuh_repo description: Wazuh repository baseurl: "{{ wazuh_manager_config.repo.yum }}" gpgkey: "{{ wazuh_manager_config.repo.gpg }}" gpgcheck: true changed_when: false when: - repo_v5_manager_installed is skipped - not wazuh_manager_sources_installation.enabled - not wazuh_custom_packages_installation_manager_enabled - name: RedHat/CentOS/Fedora | Install openscap package: name={{ item }} state=present with_items: - openscap-scanner register: wazuh_manager_openscp_packages_installed until: wazuh_manager_openscp_packages_installed is succeeded tags: - init when: not (ansible_distribution == "Amazon" and ansible_distribution_major_version == "NA") - name: CentOS 6 | Install Software Collections (SCL) Repository package: name=centos-release-scl state=present" register: wazuh_manager_scl_packages_installed until: wazuh_manager_scl_packages_installed is succeeded when: - ansible_distribution == 'CentOS' and ansible_distribution_major_version == '6' - wazuh_manager_config.cluster.disable != 'yes' - name: RedHat 6 | Enabling Red Hat Software Collections (RHSCL) command: yum-config-manager --enable {{ item }} with_items: - rhui-REGION-rhel-server-rhscl - rhel-server-rhscl-6-rpms when: - ansible_distribution == 'RedHat' and ansible_distribution_major_version == '6' - wazuh_manager_config.cluster.disable != 'yes' - name: CentOS/RedHat 6 | Install Python 2.7 package: name=python27 state=present register: wazuh_manager_python_package_installed until: wazuh_manager_python_package_installed is succeeded when: - ( ansible_distribution == 'CentOS' or ansible_distribution == 'RedHat' ) and ansible_distribution_major_version == '6' - wazuh_manager_config.cluster.disable != 'yes' - name: RedHat/CentOS/Fedora | Install OpenJDK 1.8 yum: name=java-1.8.0-openjdk state=present when: - wazuh_manager_config.cis_cat.disable == 'no' - wazuh_manager_config.cis_cat.install_java == 'yes' tags: - init - name: Set Distribution CIS filename for RHEL5/CentOS-5 set_fact: cis_distribution_filename: cis_rhel5_linux_rcl.txt when: ansible_os_family == "RedHat" and ansible_distribution_major_version == '5' - name: Set Distribution CIS filename for RHEL6/CentOS-6 set_fact: cis_distribution_filename: cis_rhel6_linux_rcl.txt when: ansible_os_family == "RedHat" and ansible_distribution_major_version == '6' - name: Set Distribution CIS filename for RHEL7/CentOS-7 set_fact: cis_distribution_filename: cis_rhel7_linux_rcl.txt when: - ansible_os_family == "RedHat" and ansible_distribution_major_version == '7' - name: Set Distribution CIS filename for RHEL7/CentOS-7 (Amazon) set_fact: cis_distribution_filename: cis_rhel7_linux_rcl.txt when: - ansible_distribution == "Amazon" and ansible_distribution_major_version == "NA" - name: CentOS/RedHat/Amazon | Install wazuh-manager package: name: "wazuh-manager-{{ wazuh_manager_version }}" state: "{{ wazuh_manager_package_state }}" register: wazuh_manager_main_packages_installed until: wazuh_manager_main_packages_installed is succeeded when: - ansible_os_family|lower == "redhat" - not wazuh_manager_sources_installation.enabled - not wazuh_custom_packages_installation_manager_enabled tags: - init - include_tasks: "../tasks/installation_from_sources.yml" when: - wazuh_manager_sources_installation.enabled - include_tasks: "../tasks/installation_from_custom_packages.yml" when: - wazuh_custom_packages_installation_manager_enabled - name: CentOS/RedHat 6 | Enabling python2.7 and sqlite3 replace: path: /etc/init.d/wazuh-manager regexp: 'echo -n "Starting Wazuh-manager: "' replace: "echo -n \"Starting Wazuh-manager (EL6): \"; source /opt/rh/python27/enable; export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:{{ wazuh_manager_sources_installation.user_dir }}/framework/lib" when: - ansible_distribution in ['CentOS', 'RedHat', 'Amazon'] and ansible_distribution_major_version|int == 6 - wazuh_manager_config.cluster.disable != 'yes' - name: Install expect (EL5) package: name: "{{ item }}" state: "{{ wazuh_manager_package_state }}" with_items: - expect register: wazuh_manager_main_packages_installed until: wazuh_manager_main_packages_installed is succeeded when: - ansible_os_family|lower == "RedHat" - ansible_distribution_major_version|int < 6 tags: - init