wazuh-ansible-4.8.1/roles/wazuh/ansible-wazuh-manager/tasks/installation_from_sources.yml

---
# Wazuh Manager
  - name: Check if Wazuh Manager is already installed
    stat:
      path: /var/ossec/bin/ossec-control
    register: wazuh_ossec_control

  - name: Installing Wazuh Manager from sources
    block:
      - name: Install dependencies to build Wazuh packages
        package:
          name:
            - make
            - gcc
            - automake
            - autoconf
            - libtool
            - tar
          state: present

      - name: Installing policycoreutils-python (RedHat families)
        package:
          name:
            - policycoreutils-python
        when:
          - ansible_os_family|lower == "redhat"

      - name: Installing policycoreutils-python-utils (Debian families)
        package:
          name:
            - libc6-dev
            - curl
            - policycoreutils
        when:
          - ansible_os_family|lower == "debian"

      - name: Remove old repository folder
        file:
          path: /tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}
          state: absent

      - name: Download required packages from github.com/wazuh/wazuh
        get_url:
          url: "https://github.com/wazuh/wazuh/archive/{{ wazuh_manager_sources_installation.branch }}.tar.gz"
          dest: "/tmp/{{ wazuh_manager_sources_installation.branch }}.tar.gz"
        delegate_to: "{{ inventory_hostname }}"

      - name: Create folder to extract Wazuh branch
        file:
          path: "/tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}"
          state: directory

    # When downloading "v3.10.2" extracted folder name is 3.10.2. 
    # Explicitly creating the folder with proper naming and striping first level in .tar.gz file

      - name: Extract downloaded Wazuh branch from Github # Using shell instead of unarchive due to that module not working properlyh with --strip
        command: >-
          tar -xzvf /tmp/{{ wazuh_manager_sources_installation.branch }}.tar.gz
          --strip 1
          --directory /tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}          
        register: wazuh_untar
        changed_when: wazuh_untar.rc ==0
        args:
          warn: false

      - name: Clean remaining files from others builds
        command: "make -C src {{ item }}"
        args:
          chdir: "/tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}/src/"
        with_items:
          - "clean"
          - "clean-deps"
        register: clean_result
        changed_when: clean_result.rc == 0
        failed_when: false

      - name: Render the "preloaded-vars.conf" file
        template:
          src: "templates/preloaded_vars_manager.conf.j2"
          dest: "/tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}/etc/preloaded-vars.conf"
          owner: root
          group: root
          mode: '644'

      - name: Executing "install.sh" script to build and install the Wazuh Manager
        shell: ./install.sh > /tmp/build_wazuh_manager_log.txt
        register: installation_result
        changed_when: installation_result == 0
        args:
          chdir: "/tmp/wazuh-{{ wazuh_manager_sources_installation.branch }}"
    when:
      - not wazuh_ossec_control.stat.exists
      - wazuh_manager_sources_installation.enabled
    tags:
      - manager

# Wazuh API
  - name: Check if Wazuh API is already installed
    stat:
      path: /var/ossec/api/app.js
    register: wazuh_api

  - name: Install Wazuh API from sources
    block:
      - name: Install dependencies to build Wazuh packages
        package:
          name:
            - make
            - gcc
            - automake
            - autoconf
            - libtool
            - tar
          state: present

      - name: Ensure Git is present in the host
        package:
          name: git
          state: present

      - name: Modify repo url if host is in Debian family
        set_fact:
          node_js_repo_type: deb
        when:
          - ansible_os_family | lower == "debian"

      - name: Download script to install Nodejs repository
        get_url:
          url: "https://{{ node_js_repo_type }}.{{ node_js_repo_url }}"
          dest: "/tmp/setup_nodejs_repo.sh"
          mode: "0700"

      - name: Execute downloaded script to install Nodejs repo
        command: /tmp/setup_nodejs_repo.sh
        register: node_repo_installation_result
        changed_when: node_repo_installation_result.rc == 0

      - name: Install Nodejs
        package:
          name: nodejs
          state: present

      - name: Run NPM under root account
        command: npm config set user 0
        register: allow_root_npm
        changed_when: allow_root_npm.rc == 0

      - name: Remove old repository folder
        file:
          path: /tmp/wazuh-api
          state: absent

      - name: Download the Wazuh API repository
        git:
          repo: 'https://github.com/wazuh/wazuh-api.git'
          version: "{{ wazuh_api_sources_installation.branch }}"
          dest: /tmp/wazuh-api

      - name: Configure Wazuh API installation
        template:
          src: "templates/preloaded_vars_api.conf.j2"
          dest: "/tmp/wazuh-api/configuration/preloaded_vars.conf"
          owner: root
          group: root
          mode: '644'

      - name: Execute Wazuh API installation script
        shell: ./install_api.sh > /tmp/build_wazuh_api_log.txt
        register: install_api
        changed_when: install_api.rc == 0
        args:
          chdir: "/tmp/wazuh-api"
        notify:
          - restart wazuh-api
    when:
      - not wazuh_api.stat.exists
      - wazuh_api_sources_installation.enabled
    tags:
      - api