feat/agent change

.github/workflows/ci.yaml

@@ -7,20 +7,6 @@ on:
   pull_request:
 
 jobs:
-  # golangci must be the first job as it has different problems
-  golangci:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/setup-go@v2
-        with:
-          go-version: 1.19
-      - uses: actions/checkout@v2
-      - name: golangci-lint
-        uses: golangci/golangci-lint-action@v3
-        with:
-          version: v1.49.0
-          args: --timeout 5m
-          skip-pkg-cache: true
   test:
     runs-on: ubuntu-latest
     permissions:
@@ -46,21 +32,3 @@ jobs:
       - uses: bufbuild/buf-breaking-action@v1
         with:
           against: "https://github.com/${GITHUB_REPOSITORY}.git#branch=main"
-  codegen:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v2
-      - name: Set up Go
-        uses: actions/setup-go@v2
-        with:
-          go-version: 1.19
-      - name: Prepare
-        run: make install-tools
-      - name: generate
-        run: make generate
-      - name: check diff
-        run: git diff --exit-code

.gitignore

@@ -27,3 +27,7 @@ go.work
 .vscode
 
 *.DS_Store
+
+.config.yaml
+
+dist/

.goreleaser.yml

@@ -31,20 +31,8 @@ archives:
     name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}{{ if .Arm }}v{{ .Arm }}{{ end }}"
     wrap_in_directory: true
     format: tar.gz
-
-nfpms:
-  - license: Apache 2.0
-    maintainer: RedCarbon SA
-    vendor: RedCarbon SA
-    homepage: https://redcarbon.ai
-    bindir: /usr
-    description: RedCarbon's Agent
-    formats:
-      - deb
-      - rpm
-    contents:
-      - src: ./service/redcarbon.service
-        dst: /etc/systemd/system/redcarbon.service
-        type: config
-    scripts:
-      postinstall: ./scripts/post_install.sh
+    files:
+      - src: assets/*
+        dst: .
+      - src: templates/*
+        dst: bin/templates

.proto/buf.yaml

@@ -1,13 +1,9 @@
 version: v1
-lint:
-  use:
-    - BASIC
-    - FILE_LOWER_SNAKE_CASE
-  except:
-    - ENUM_NO_ALLOW_ALIAS
-    - IMPORT_NO_PUBLIC
-    - PACKAGE_DIRECTORY_MATCH
-    - PACKAGE_SAME_DIRECTORY
 breaking:
   use:
-    - WIRE_JSON
+    - FILE
+lint:
+  use:
+    - DEFAULT
+  ignore:
+    - google/type/datetime.proto

.proto/redcarbon/agents_public/v1/types.proto

@@ -0,0 +1,13 @@
+syntax = "proto3";
+
+package redcarbon.agents_public.v1;
+
+message AgentConfiguration {
+  optional QRadarJobConfiguration qradar_job_configuration = 1;
+}
+
+message QRadarJobConfiguration {
+  string host = 1;
+  string token = 2;
+  bool verify_ssl = 3;
+}

.proto/redcarbon/agents_public/v1/v1.proto

@@ -0,0 +1,38 @@
+syntax = "proto3";
+
+package redcarbon.agents_public.v1;
+
+import "google/protobuf/timestamp.proto";
+import "redcarbon/agents_public/v1/types.proto";
+
+service AgentsPublicAPIsV1Srv {
+  rpc HZ(HZRequest) returns (HZResponse) {}
+  rpc IngestIncident(IngestIncidentRequest) returns (IngestIncidentResponse) {}
+  rpc FetchAgentConfiguration(FetchAgentConfigurationRequest) returns (FetchAgentConfigurationResponse) {}
+}
+
+message HZRequest {
+  string hostname = 1;
+  string ip = 2;
+}
+
+message HZResponse {
+  google.protobuf.Timestamp received_at = 1;
+}
+
+message IngestIncidentRequest {
+  string title = 1;
+  string description = 2;
+  string raw_data = 3;
+  uint32 severity = 4;
+  string origin = 5;
+  optional string original_id = 6;
+}
+
+message IngestIncidentResponse {}
+
+message FetchAgentConfigurationRequest {}
+
+message FetchAgentConfigurationResponse {
+  AgentConfiguration configuration = 1;
+}

assets/config.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+user_id=`id -u`
+
+# we want to snapshot the environment of the config user
+if [ $user_id -eq 0 -a -z "$AGENT_ALLOW_RUNASROOT" ]; then
+    echo "Must not run with sudo"
+    exit 1
+fi
+
+# Change directory to the script root directory
+# https://stackoverflow.com/questions/59895/getting-the-source-directory-of-a-bash-script-from-within
+SOURCE="${BASH_SOURCE[0]}"
+while [ -h "$SOURCE" ]; do # resolve $SOURCE until the file is no longer a symlink
+  DIR="$( cd -P "$( dirname "$SOURCE" )" && pwd )"
+  SOURCE="$(readlink "$SOURCE")"
+  [[ $SOURCE != /* ]] && SOURCE="$DIR/$SOURCE" # if $SOURCE was a relative symlink, we need to resolve it relative to the path where the symlink file was located
+done
+DIR="$( cd -P "$( dirname "$SOURCE" )" && pwd )"
+cd "$DIR"
+
+shopt -s nocasematch
+./bin/redcarbon configure "$@"