Comments (8)
@D1Ck3n did you run the falcon_install
role first? If you haven't, that is the role that actually installs the falcon sensor. Once the sensor is installed, then you can configure it accordingly with the falcon_configure
role.
from ansible_collection_falcon.
maybe i add the whole debug of my ansible play:
https://gist.github.com/D1Ck3n/866088edc2a8e3a88d35dc47bafd876c
It works fine on other distributions, like Ubuntu 22.04, RHEL8, RHEL9 and Debian 11
just Debian 12 does not work
from ansible_collection_falcon.
Ahh got it - thanks for the gist and yes, sorry I should have led with Debian 12 is still not supported. Docs are here: https://falcon.us-2.crowdstrike.com/documentation/20/falcon-sensor-for-linux#kernel-mode-operating-systems
Currently still 9/10/11
from ansible_collection_falcon.
oh okay, thanks for the info! is there some ETA when it will be supported?
from ansible_collection_falcon.
I've got no idea. But I hope soon enough as more and more Cx's request support for it.
from ansible_collection_falcon.
would it be possible to "fool" the role into installing CS on Debian 11 or Ubuntu 22.04? That would be a temp. workaround.
vars:
falcon_target_os: "Debian"
falcon_os_version: "*11*"
falcon_os_vendor: "debian"
from ansible_collection_falcon.
Yes you can do that - just know that if you have any issues with those hosts (ie, incorrect data showing up, false positives, etc) then there is not much CS can do to help since it's not supported in that configuration. But it should install and most likely put you into eBPF mode.
from ansible_collection_falcon.
@D1Ck3n going to go ahead and close this since there is no work that needs to be done from the project side. Once Debian 12 is supported by CS, this should work just fine. Feel free to re-open later down the road or open a new issue if you run into any other problems.
from ansible_collection_falcon.
Related Issues (20)
- new module - get host details using falcon hosts sc
- [falcon_install] Add ability to change permissions of the downloaded Falcon Sensor Installer HOT 3
- [falcon_configure] Add ability to prevent service falcon-sensor to start HOT 5
- [falcon_configure] Add ability to specify Customer ID and remove Agent ID HOT 4
- new module - query hidden hosts
- update sensor_download module to use new v2 endpoint
- update falcon_install role to take advantage of v2 sensor_download module
- new lookup plugin - get maintenance token
- new module - manage sensor update policies
- new module - manage prevention policies
- new module - manage filevantage policies
- new module - manage host groups
- new module - find|search for hosts to get list of AIDs HOT 1
- new plugin - lookup plugin for fetching host ids
- Consider adding /docs to the collection HOT 1
- New plugin - mssp children lookup HOT 1
- New module - mssp child info
- update uninstall role for handling maintenance tokens
- update fctl lookup plugin return value for gcid
- ansible partner - check if README needs to be updated
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ansible_collection_falcon.