2026-09-17 18:48:25 +00:00
|
|
|
#!/bin/bash
|
|
|
|
|
set -euxo pipefail
|
|
|
|
|
|
|
|
|
|
# Vector: listen on UDP/TCP 514 and IPFIX 2055/2056, parse, ship to Firehose.
|
|
|
|
|
curl -sSL https://setup.vector.dev | bash
|
2026-09-28 20:16:53 +00:00
|
|
|
# First boot races AL2023's rpm lock during Vector GPG import.
|
|
|
|
|
for i in 1 2 3 4 5; do
|
|
|
|
|
dnf install -y vector && break
|
|
|
|
|
sleep $((i * 5))
|
|
|
|
|
done
|
|
|
|
|
rpm -q vector
|
2026-09-17 18:48:25 +00:00
|
|
|
|
|
|
|
|
install -d -m 0755 /etc/vector /var/lib/vector
|
|
|
|
|
cat > /etc/vector/vector.yaml <<'VECTOREOF'
|
|
|
|
|
${vector_yaml}
|
|
|
|
|
VECTOREOF
|
|
|
|
|
chmod 0644 /etc/vector/vector.yaml
|
|
|
|
|
vector validate /etc/vector/vector.yaml
|
|
|
|
|
|
|
|
|
|
install -d -m 0755 /etc/systemd/system/vector.service.d
|
|
|
|
|
cat > /etc/systemd/system/vector.service.d/override.conf <<'EOF'
|
|
|
|
|
[Service]
|
|
|
|
|
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
|
|
|
|
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETUID CAP_SETGID
|
|
|
|
|
NoNewPrivileges=false
|
|
|
|
|
EOF
|
|
|
|
|
|
|
|
|
|
systemctl daemon-reload
|
|
|
|
|
systemctl enable --now vector
|
|
|
|
|
systemctl restart vector
|
