Fleet: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
(14 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
== FleetDM Docker-Installation ==
+
*[[Architektur Fleet + osquery]]
===Docker Installation===
+
*[[FleetDM Docker-Installation]]
*apt install -y docker.io docker-compose
+
*[[FleetDM: Policies, Queries und Labels (Debian 12)]]
===Dockercompose===
 
*mkdir -p /mnt/docker/fleet
 
*cd /mnt/docker/fleet
 
*vi docker-compose.yaml
 
<pre>
 
services:
 
  fleet:
 
    image: fleetdm/fleet:latest
 
    ports:
 
      - "8080:8080"
 
      - "3306:3306"
 
    environment:
 
      MYSQL_ROOT_PASSWORD: fleet
 
      MYSQL_DATABASE: fleet
 
    volumes:
 
      - ./db:/var/lib/mysql
 
    restart: unless-stopped
 
</pre>
 
*docker-compose up -d
 
  
=== CLI-Tool installieren ===
 
<pre>
 
curl -sSL https://raw.githubusercontent.com/fleetdm/fleet/main/tools/fleetctl.sh | bash
 
echo 'export PATH="$PATH:$HOME/.fleetctl"' >> ~/.bashrc
 
source ~/.bashrc
 
</pre>
 
  
=== Einrichten ===
+
[[Kategorie:Cybersecurity]]
<pre>
+
[[Kategorie:Hacking]]
fleetctl config set --address http://localhost:8080
 
fleetctl login --email admin@example.com --password fleet
 
</pre>
 
 
 
=== 4. Ersten Query ausführen ===
 
<pre>
 
echo "SELECT * FROM osquery_info;" > query.sql
 
fleetctl query create --name "System Check" --query "$(cat query.sql)"
 
fleetctl query run --name "System Check" --labels "All Hosts"
 
</pre>
 
 
 
=== Wichtige Links ===
 
* Webinterface: [http://localhost:8080](http://localhost:8080)
 
* Standard-Login: admin@example.com / fleet
 
 
 
=== Troubleshooting ===
 
<pre>
 
# Container-Logs anzeigen
 
docker logs $(docker ps -q --filter ancestor=fleetdm/fleet)
 
 
 
# Container-Status prüfen
 
docker ps -a | grep fleet
 
</pre>
 
 
 
[[Kategorie:IT-Sicherheit]]
 
[[Kategorie:Device Management]]
 

Aktuelle Version vom 20. April 2025, 10:01 Uhr