Proxmox/ProxmoxVE
1
0
Fork 1
mirror of https://github.com/community-scripts/ProxmoxVE.git synced 2026-08-15 09:06:11 +02:00
Code Issues Packages Projects Releases Wiki Activity

patchmon: fetch SCAP Security Guide content, bump disk default

Browse Source
This commit is contained in:
MickLesk
2026-08-14 09:29:46 +02:00
parent 6bb15007d5
commit fe6e395fc8
2 changed files with 32 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
install/patchmon-install.sh
+13
View File
@@ -60,6 +60,7 @@ REDIS_PORT=6379
# OIDC_ENFORCE_HTTPS=true
AGENT_BINARIES_DIR=/opt/patchmon/agents
SSG_CONTENT_DIR=/opt/patchmon/ssg-content
EOF
msg_ok "Configured PatchMon"
@@ -85,6 +86,18 @@ for arch in "${AGENT_NAME[@]}"; do
done
msg_ok "Fetched PatchMon agent binaries"
msg_info "Fetching SCAP Security Guide content"
SSG_DIR="/opt/patchmon/ssg-content"
mkdir -p "$SSG_DIR"
SSG_RELEASE=$(get_latest_github_release "ComplianceAsCode/content") || SSG_RELEASE=""
if [[ -n "$SSG_RELEASE" ]] && curl -fsSL "https://github.com/ComplianceAsCode/content/releases/download/v${SSG_RELEASE}/scap-security-guide-${SSG_RELEASE}.tar.gz" |
tar -xz -C "$SSG_DIR" --strip-components=1 --wildcards '*/ssg-*-ds.xml'; then
echo "$SSG_RELEASE" >"$SSG_DIR/.ssg-version"
msg_ok "Fetched SCAP Security Guide content (v${SSG_RELEASE})"
else
msg_warn "Could not fetch SCAP Security Guide content; it will be fetched on the next update"
fi
msg_info "Creating service"
cat <<EOF >/etc/systemd/system/patchmon-server.service
[Unit]