patchmon: fetch only SCAP datastream XMLs, not the full 2.1GB content archive

This commit is contained in:
MickLesk
2026-08-16 20:53:07 +02:00
parent 4f04894a19
commit 7a80b6c5b0
2 changed files with 17 additions and 3 deletions
+7 -1
View File
@@ -86,7 +86,13 @@ for arch in "${AGENT_NAME[@]}"; do
done
msg_ok "Fetched PatchMon agent binaries"
fetch_and_deploy_gh_release "ssg-content" "ComplianceAsCode/content" "prebuild" "latest" "/opt/patchmon/ssg-content" "scap-security-guide-*.tar.gz"
msg_info "Fetching SCAP Content"
RELEASE=$(get_latest_github_release "ComplianceAsCode/content")
curl_with_retry "https://github.com/ComplianceAsCode/content/releases/download/v${RELEASE}/scap-security-guide-${RELEASE}.tar.gz" "/tmp/ssg.tar.gz"
mkdir -p /opt/patchmon/ssg-content
tar -xzf /tmp/ssg.tar.gz -C /opt/patchmon/ssg-content --strip-components=1 --wildcards '*/ssg-*-ds.xml'
rm -f /tmp/ssg.tar.gz
msg_ok "Fetched SCAP Content"
msg_info "Creating service"
cat <<EOF >/etc/systemd/system/patchmon-server.service