Aaron Meihm
f893afd6e0
[medium] Support fetch of instance meta-data for agents running in AWS
2015-12-30 09:36:37 -06:00
Aaron Meihm
ba7302de77
[minor] Remove old worker code and update documentation
2015-12-29 17:25:09 -06:00
Aaron Meihm
e9825fc328
[medium] Add a runner plugin to process compliance items
2015-12-29 14:00:42 -06:00
Aaron Meihm
0ba9cb93a7
[minor] add a results delay configuration value
...
This supports including a small delay following action expiry before
attempting to retrieve results from the API.
2015-09-18 10:23:21 -05:00
Aaron Meihm
9d313e3932
[minor] support pre-cacheing gpg passphrase for automated operation
2015-09-17 13:43:11 -05:00
Aaron Meihm
20c8a2c40c
[minor] initial commit of mig-runner
2015-09-15 14:40:26 -05:00
Julien Vehent
0cbfa67552
[minor] re-enable Masche by default, upstream issue is fixed
2015-09-02 09:22:57 -04:00
Julien Vehent
ede3858edb
[minor/bug] disable memory module to prevent macos build from breaking
2015-08-26 17:14:37 -04:00
Julien Vehent
f9c24e9828
[minor] change folder structure to go get with nice names
2015-08-26 12:22:02 -04:00
Julien Vehent
e9aa7febf9
[major] reorganize repository structure for `go get mig.ninja/mig`
...
This is a major change to the structure of the repository and the Makefile,
but a minor change in terms of functionalities. It simply changes the structure
of the directories to be compliant with Go's idiomatic build methods.
I also bought the domain `mig.ninja` and will now be using that as
a standard import path for everything. The magic to serve everything
under mig.ninja/mig will be documented elsewhere.
2015-08-25 18:01:22 -04:00
Julien Vehent
668ca47998
Merge pull request #77 from mozilla/exchangerework
...
MQ Exchanges rework
2015-08-22 10:36:44 -04:00
Aaron Meihm
eadec415c3
[minor] mig scribe module implementation
2015-08-07 11:56:20 -05:00
Julien Vehent
e062d41b33
[major] reorg of mq exchanges for stronger access control
2015-08-01 11:47:49 -04:00
Julien Vehent
85787c1d3c
[minor] various fixes to build server packages
2015-05-14 10:21:43 -04:00
Aaron Meihm
044e8bfa57
[minor] rename migoval -> pkg
2015-05-10 12:10:02 -05:00
Aaron Meihm
3c70552282
[minor] basic initial structure for migoval module
2015-05-10 12:10:01 -05:00
Julien Vehent
c09c20858a
[major] Memory module, using Masche
2015-05-08 09:28:47 -04:00
Julien Vehent
b4986e09a7
[minor] add `example` module to list of available modules
2015-04-29 16:14:04 -04:00
Julien Vehent
f6a6120960
[medium] timedrift module, to check that systems use network time
2015-03-17 11:43:09 -04:00
Sushant Dinesh
0f46e8cfdb
[medium] ping module
2015-03-17 11:43:09 -04:00
Julien Vehent
04e822d20a
[medium] improve automated deletion of unused amqp queues in scheduler
2015-02-04 11:25:33 -05:00
Julien Vehent
075167433f
[medium] refactor agents stats into its own table & job
...
the api was previously calculating agent stats on the fly,
which was slow and didn't keep historical data. it's now the
responsibility of the scheduler to periodically calculate
these stats and store them into an agents_stats table
2015-01-25 18:46:17 -05:00
Julien Vehent
5a91049604
[medium] replace agent stun with api call to find its public ip
2015-01-24 14:26:57 -05:00
Julien Vehent
6c53847a66
[doc] upstart conf for api and scheduler, take 2
2015-01-04 15:54:19 -05:00
Julien Vehent
ed853fea25
[doc] upstart init files for api and scheduler
2015-01-04 14:47:30 -05:00
Julien Vehent
4669418d7e
[medium] store pending actions in database instead of spool
2015-01-04 14:47:30 -05:00
Julien Vehent
e6ed8a490d
[medium] Windows MSI packaging of the agent
2014-12-28 13:41:23 -05:00
Julien Vehent
55cbcc6253
[medium] add logic to allow scheduler to automatically kill duplicate agents
2014-12-19 01:34:28 -05:00
Julien Vehent
3b4a06d078
[doc] minor fixups
2014-12-18 11:28:20 -05:00
Julien Vehent
b3d341a0ad
[minor] support setting agent checkin mode via configuration
2014-12-18 11:27:04 -05:00
Julien Vehent
265f84bb8b
[doc] add comments to agent local conf template
2014-12-18 11:26:12 -05:00
Julien Vehent
8ff164d194
[minor] disable filechecker & upgrade modules by default
2014-12-10 17:01:10 -05:00
Julien Vehent
6eac3b1827
[minor] move list of available modules into global mig conf
2014-11-24 12:50:50 -05:00
Julien Vehent
f97c6c4252
[doc] client package example
2014-11-07 09:38:48 -05:00
Julien Vehent
671afba33a
[major] PGP authentication of API clients, includes client code refactoring
...
This is a major change to the client code and the API. All API calls now require
a HTTP header called X-PGPAUTHORIZATION that contains a signature from a
known investigator. This work is also the opportunity to split up the API client
part of the MIG console into a new package called mig/client. This will facilitate
code reuse, particularly for standalone command line utilities.
2014-11-06 23:13:15 -05:00
Julien Vehent
e7b5e3630f
[doc] add comments on sample api conf
2014-11-03 13:37:22 -05:00
Julien Vehent
b536525f52
[minor] split up api pgp code into separate file
2014-10-30 19:30:47 -04:00
Julien Vehent
245e533609
[major] refactor scheduler PGP keyring management
...
Similar to the work done on the api, instead of managing investigator's keys
with a gpg keyring on disk, pull the keys from the database and manage a
keyring in memory.
The addition here is the management of the scheduler's own investigator
identity, that's used during the upgrade protocol to kill old agents. That private
key is also stored in the database, with permissions that limit the access to the
column to the schedulers themselves.
2014-10-30 19:30:08 -04:00
Julien Vehent
2b9ecda3cf
[minor] add support for custom tags in agent conf
2014-09-15 17:05:19 -04:00
Julien Vehent
0926c738d3
[major] rewrite of connected module in netstat module, support all OSes
2014-09-14 13:19:52 -04:00
Julien Vehent
48a2f22f8d
[medium] make max number of DB connections configurable in scheduler
2014-08-25 13:51:10 -04:00
Julien Vehent
3a9c058ce9
[doc] complete rewrite of module documentation, with full example module
2014-08-22 13:51:07 -04:00
Julien Vehent
870c591d9b
[major] refactor module support to use self registration
2014-08-22 09:54:32 -04:00
Julien Vehent
9eadf2fe2e
[medium] discover endpoint IP addresses, both local and public (via stun)
2014-08-22 09:53:16 -04:00
Julien Vehent
8132129386
[doc] use short license header in source files
2014-08-13 12:30:53 -04:00
Julien Vehent
f8486bf673
[medium] load agent configuration from external file
2014-08-04 11:39:46 -04:00
Julien Vehent
8f63a71b5c
[medium] agent stat socket
2014-07-30 16:40:37 -04:00
Julien Vehent
7be40fbb61
[minor] add support for pre-configured proxies in agent
2014-07-21 11:13:46 -04:00
Julien Vehent
cc0658b338
[medium] add CONNECT proxy support to the agent
...
Use the env variables HTTP_PROXY and HTTPS_PROXY for the agent to
automatically attempt to connect using HTTP CONNECT proxy tunneling
2014-07-20 14:08:57 -04:00
Julien Vehent
1ab3cd3947
[medium] Immortality achievement completed (for mig-agent)
...
Also fixing a nasty issue when calling os.exec inside a goroutine causes the process
to become unkillable.
2014-06-26 20:32:46 -04:00