mirror of
https://github.com/Sea-Haven-Industries/syslog-server.git
synced 2026-09-30 19:23:17 +00:00
9f39bb3020
* fix(infra): start Vector after first-boot dnf race (PLAT-206) * fix(infra): pin collector private IP at 10.40.10.254 (PLAT-206)
30 lines
845 B
Text
30 lines
845 B
Text
#!/bin/bash
|
|
set -euxo pipefail
|
|
|
|
# Vector: listen on UDP/TCP 514 and IPFIX 2055/2056, parse, ship to Firehose.
|
|
curl -sSL https://setup.vector.dev | bash
|
|
# First boot races AL2023's rpm lock during Vector GPG import.
|
|
for i in 1 2 3 4 5; do
|
|
dnf install -y vector && break
|
|
sleep $((i * 5))
|
|
done
|
|
rpm -q vector
|
|
|
|
install -d -m 0755 /etc/vector /var/lib/vector
|
|
cat > /etc/vector/vector.yaml <<'VECTOREOF'
|
|
${vector_yaml}
|
|
VECTOREOF
|
|
chmod 0644 /etc/vector/vector.yaml
|
|
vector validate /etc/vector/vector.yaml
|
|
|
|
install -d -m 0755 /etc/systemd/system/vector.service.d
|
|
cat > /etc/systemd/system/vector.service.d/override.conf <<'EOF'
|
|
[Service]
|
|
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
|
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETUID CAP_SETGID
|
|
NoNewPrivileges=false
|
|
EOF
|
|
|
|
systemctl daemon-reload
|
|
systemctl enable --now vector
|
|
systemctl restart vector
|