)]}'
{"osquery/installKolideFleet.yml":[{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":20,"context_line":"    - vars/variables.yml"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"  pre_tasks:"},{"line_number":23,"context_line":"    - name: Check init system"},{"line_number":24,"context_line":"      command: cat /proc/1/comm"},{"line_number":25,"context_line":"      register: _pid1_name"},{"line_number":26,"context_line":"    - name: Set the name of pid1"},{"line_number":27,"context_line":"      set_fact:"},{"line_number":28,"context_line":"        pid1_name: \"{{ _pid1_name.stdout }}\""},{"line_number":29,"context_line":"    - name: Galera database block"},{"line_number":30,"context_line":"      block:"},{"line_number":31,"context_line":"        - name: Check for db password"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"5f7c97a3_68662bf0","line":28,"range":{"start_line":23,"start_character":0,"end_line":28,"end_character":44},"updated":"2018-06-08 14:27:05.000000000","message":"this is actually recorded as a fact using the variable `ansible_service_mgr`. With that we can get rid of the extra \"set_fact\" and just use the variable `ansible_service_mgr`.","commit_id":"2676b038c53657ba17bc3817297d377300f21492"},{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":130,"context_line":"      template:"},{"line_number":131,"context_line":"        src: templates/redis_service.yml.j2"},{"line_number":132,"context_line":"        dest: /etc/systemd/system/redis.service"},{"line_number":133,"context_line":"      when: pid1_name \u003d\u003d \"systemd\""},{"line_number":134,"context_line":"    - name: Drop redis.service systemd file"},{"line_number":135,"context_line":"      template:"},{"line_number":136,"context_line":"        src: templates/redis_service.yml.j2"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"5f7c97a3_a82203a2","line":133,"updated":"2018-06-08 14:27:05.000000000","message":"for the sake of uniformity, the \"when\" conditionals should be in a list format.","commit_id":"2676b038c53657ba17bc3817297d377300f21492"},{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":125,"context_line":"        enabled: yes"},{"line_number":126,"context_line":"      when: pid1_name \u003d\u003d \"init\""},{"line_number":127,"context_line":""},{"line_number":128,"context_line":"    # add files for systemd"},{"line_number":129,"context_line":"    - name: Drop redis.service systemd file"},{"line_number":130,"context_line":"      template:"},{"line_number":131,"context_line":"        src: templates/redis_service.yml.j2"},{"line_number":132,"context_line":"        dest: /etc/systemd/system/redis.service"},{"line_number":133,"context_line":"      when: pid1_name \u003d\u003d \"systemd\""},{"line_number":134,"context_line":"    - name: Drop redis.service systemd file"},{"line_number":135,"context_line":"      template:"},{"line_number":136,"context_line":"        src: templates/redis_service.yml.j2"},{"line_number":137,"context_line":"        dest: /etc/systemd/system/redis.service"},{"line_number":138,"context_line":"      when: pid1_name \u003d\u003d \"systemd\""},{"line_number":139,"context_line":"    - name: Drop fleet.service systemd file"},{"line_number":140,"context_line":"      template:"},{"line_number":141,"context_line":"        src: templates/fleet_service.yml.j2"},{"line_number":142,"context_line":"        dest: /etc/systemd/system/fleet.service"},{"line_number":143,"context_line":"      when: pid1_name \u003d\u003d \"systemd\""},{"line_number":144,"context_line":"    - name: Reload systemd"},{"line_number":145,"context_line":"      command: systemctl daemon-reload"},{"line_number":146,"context_line":"      when: pid1_name \u003d\u003d \"systemd\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"5f7c97a3_08fe97ae","line":146,"range":{"start_line":128,"start_character":0,"end_line":146,"end_character":34},"updated":"2018-06-08 14:27:05.000000000","message":"All of these systemd unit file changes can be manged with the include role and a list.\n\nSomething like so:\n\n- name: Run the systemd service role\n  include_role:\n    name: systemd_service\n    private: true\n  vars:\n    systemd_service_restart_changed: false\n    systemd_services:\n      - service_name: \"kolide\"\n        execstarts:\n          - /usr/bin/docker run -v /etc/fleet:/etc/fleet --name fleet_service \n            kolide/fleet:{{ kolide_fleet_version }} \n            --config\u003d/etc/fleet/fleet_config.yml\n        execstops:\n          - /usr/bin/docker stop fleet_fleet \n        config_overrides:\n          Service:\n            ExecStartPre:\n              ? -/usr/bin/docker pull kolide/fleet:{{ kolide_fleet_version }}\n              ? -/usr/bin/docker kill fleet_service\n              ? -/usr/bin/docker rm fleet_service         \n          Unit:\n            Wants: network-online.target\n            After: redis.service\n            Requires: redis.service\n      - service_name: \"redis\"\n        execstarts:\n          - /usr/bin/docker run --name redis_service redis:alpine\n        execstops:\n          - /usr/bin/docker stop redis_service\n        config_overrides:\n          Service:\n            ExecStartPre:\n              ? -/usr/bin/docker pull redis:4-alpine\n              ? -/usr/bin/docker kill redis_service\n              ? -/usr/bin/docker rm redis_service        \n          Unit:\n            Wants: network-online.target\n            After: docker.service\n            Requires: docker.service","commit_id":"2676b038c53657ba17bc3817297d377300f21492"}],"osquery/readme.rst":[{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Install Grafana"},{"line_number":2,"context_line":"###############"},{"line_number":3,"context_line":":tags: openstack, ansible"},{"line_number":4,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"5f7c97a3_c54baa84","line":1,"range":{"start_line":1,"start_character":8,"end_line":1,"end_character":15},"updated":"2018-06-08 14:27:05.000000000","message":"OSQuery?","commit_id":"2676b038c53657ba17bc3817297d377300f21492"},{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":11,"context_line":"There multiple ways to aggregate the data. At this point this repo does not provide"},{"line_number":12,"context_line":"one of said methods.  It is currently intended to be utilized with the `elk_metrics_6x`."},{"line_number":13,"context_line":"It is the intention that at a later point to the ability to configure osquery to report"},{"line_number":14,"context_line":"to a centralized place like (kolide/fleet)[https://github.com/kolide/fleet], (zentral)[https://github.com/zentralopensource/zentral], "},{"line_number":15,"context_line":"etc. "},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"**These playbooks require Ansible 2.4+.**"}],"source_content_type":"text/x-rst","patch_set":1,"id":"5f7c97a3_c5308a0a","line":14,"range":{"start_line":14,"start_character":133,"end_line":14,"end_character":134},"updated":"2018-06-08 14:27:05.000000000","message":"whitespace.","commit_id":"2676b038c53657ba17bc3817297d377300f21492"},{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":12,"context_line":"one of said methods.  It is currently intended to be utilized with the `elk_metrics_6x`."},{"line_number":13,"context_line":"It is the intention that at a later point to the ability to configure osquery to report"},{"line_number":14,"context_line":"to a centralized place like (kolide/fleet)[https://github.com/kolide/fleet], (zentral)[https://github.com/zentralopensource/zentral], "},{"line_number":15,"context_line":"etc. "},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"**These playbooks require Ansible 2.4+.**"},{"line_number":18,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"5f7c97a3_655c164b","line":15,"range":{"start_line":15,"start_character":4,"end_line":15,"end_character":5},"updated":"2018-06-08 14:27:05.000000000","message":"whitespace.","commit_id":"2676b038c53657ba17bc3817297d377300f21492"}],"osquery/templates/fleet_initd.yml.j2":[{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":5,"context_line":"# description: docker daemon."},{"line_number":6,"context_line":"### BEGIN INIT INFO"},{"line_number":7,"context_line":"# Provides: me"},{"line_number":8,"context_line":"# Required-Start: "},{"line_number":9,"context_line":"# Required-Stop: "},{"line_number":10,"context_line":"# Default-Start: 2 3 5"},{"line_number":11,"context_line":"# Default-Stop: 0 1 6"}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"5f7c97a3_45247ac6","line":8,"range":{"start_line":8,"start_character":17,"end_line":8,"end_character":18},"updated":"2018-06-08 14:27:05.000000000","message":"whitespace","commit_id":"2676b038c53657ba17bc3817297d377300f21492"},{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":6,"context_line":"### BEGIN INIT INFO"},{"line_number":7,"context_line":"# Provides: me"},{"line_number":8,"context_line":"# Required-Start: "},{"line_number":9,"context_line":"# Required-Stop: "},{"line_number":10,"context_line":"# Default-Start: 2 3 5"},{"line_number":11,"context_line":"# Default-Stop: 0 1 6"},{"line_number":12,"context_line":"# Short-Description: manage docker daemon"}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"5f7c97a3_652176b4","line":9,"range":{"start_line":9,"start_character":16,"end_line":9,"end_character":17},"updated":"2018-06-08 14:27:05.000000000","message":"whitespace","commit_id":"2676b038c53657ba17bc3817297d377300f21492"},{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":41,"context_line":"        docker stop -t 2 ${NAME} \u0026\u003e /dev/null"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"        if [[ 0 !\u003d $? ]]; then"},{"line_number":44,"context_line":"            echo \"Could not stop container\"    "},{"line_number":45,"context_line":"            exit 4;"},{"line_number":46,"context_line":"        fi"},{"line_number":47,"context_line":"        ;;"}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"5f7c97a3_a53b0ee8","line":44,"range":{"start_line":44,"start_character":43,"end_line":44,"end_character":47},"updated":"2018-06-08 14:27:05.000000000","message":"whitespace","commit_id":"2676b038c53657ba17bc3817297d377300f21492"}],"osquery/templates/fleet_service.yml.j2":[{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"5f7c97a3_850ff237","updated":"2018-06-08 14:27:05.000000000","message":"this can be done with out common role, which will take care of all systemd related service tasks. See here https://github.com/openstack/openstack-ansible-ops/blob/master/elk_metrics_6x/installJournalbeat.yml#L90-L111 for an example starting the journalbeat process.","commit_id":"2676b038c53657ba17bc3817297d377300f21492"},{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":9,"context_line":"ExecStartPre\u003d-/usr/bin/docker rm fleet_service"},{"line_number":10,"context_line":"ExecStart\u003d/usr/bin/docker run -v /etc/fleet:/etc/fleet --name fleet_service kolide/fleet:{{ kolide_fleet_version }} --config\u003d/etc/fleet/fleet_config.yml"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"ExecStop\u003d-/usr/bin/docker stop fleet_fleet  "},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"ExecReload\u003d/usr/bin/docker restart fleet_service"},{"line_number":15,"context_line":""}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"5f7c97a3_052a0290","line":12,"range":{"start_line":12,"start_character":42,"end_line":12,"end_character":44},"updated":"2018-06-08 14:27:05.000000000","message":"whitespace","commit_id":"2676b038c53657ba17bc3817297d377300f21492"}],"osquery/templates/redis_initd.yml.j2":[{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":5,"context_line":"# description: docker daemon."},{"line_number":6,"context_line":"### BEGIN INIT INFO"},{"line_number":7,"context_line":"# Provides: me"},{"line_number":8,"context_line":"# Required-Start: "},{"line_number":9,"context_line":"# Required-Stop: "},{"line_number":10,"context_line":"# Default-Start: 2 3 5"},{"line_number":11,"context_line":"# Default-Stop: 0 1 6"}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"5f7c97a3_e8031b0c","line":8,"range":{"start_line":8,"start_character":17,"end_line":8,"end_character":18},"updated":"2018-06-08 14:27:05.000000000","message":"whitespace.","commit_id":"2676b038c53657ba17bc3817297d377300f21492"},{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":6,"context_line":"### BEGIN INIT INFO"},{"line_number":7,"context_line":"# Provides: me"},{"line_number":8,"context_line":"# Required-Start: "},{"line_number":9,"context_line":"# Required-Stop: "},{"line_number":10,"context_line":"# Default-Start: 2 3 5"},{"line_number":11,"context_line":"# Default-Stop: 0 1 6"},{"line_number":12,"context_line":"# Short-Description: manage docker daemon"}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"5f7c97a3_a809a32b","line":9,"range":{"start_line":9,"start_character":16,"end_line":9,"end_character":17},"updated":"2018-06-08 14:27:05.000000000","message":"whitespace.","commit_id":"2676b038c53657ba17bc3817297d377300f21492"},{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[{"line_number":40,"context_line":"        docker stop -t 2 ${NAME} \u0026\u003e /dev/null"},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"        if [[ 0 !\u003d $? ]]; then"},{"line_number":43,"context_line":"            echo \"Could not stop container\"    "},{"line_number":44,"context_line":"            exit 4;"},{"line_number":45,"context_line":"        fi"},{"line_number":46,"context_line":"        ;;"}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"5f7c97a3_680f0b2e","line":43,"range":{"start_line":43,"start_character":43,"end_line":43,"end_character":47},"updated":"2018-06-08 14:27:05.000000000","message":"whitespace.","commit_id":"2676b038c53657ba17bc3817297d377300f21492"}],"osquery/templates/redis_service.yml.j2":[{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"13cff8a43befde0513c2cd38c36b426c99b5120e","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"5f7c97a3_0818d773","updated":"2018-06-08 14:27:05.000000000","message":"this can be done with out common role, which will take care of all systemd related service tasks. See here https://github.com/openstack/openstack-ansible-ops/blob/master/elk_metrics_6x/installJournalbeat.yml#L90-L111 for an example starting the journalbeat process.","commit_id":"2676b038c53657ba17bc3817297d377300f21492"}]}