Skip to content

INSTALL.md

Latest commit

 

History

History
120 lines (85 loc) · 2.08 KB

INSTALL.md

File metadata and controls

120 lines (85 loc) · 2.08 KB

Docker

Dockerfile is experimental yet should be super good enough (please provide feedback or PR if it isn't)

clone repo

git clone https://github.com/nabbi/pan-ts-agent-discovery
cd pan-ts-agent-discovery

Build

Once config.tcl is defined, build your custom image with:

cp src/inc/config.example.tcl src/inc/config.tcl
# edit src/inc/config.tcl with your values
docker build .

This will build everything in your local repo (not cloning from github) so you can customize the crontab or code to test within your custom deployment.

Run

Copy the image where ever you spin your containers.

docker run -d <hash>

Manual

YMMV

dependencies

These commands should be in the system default paths

  • dig
  • expect
  • fping
  • logger
  • openssl
  • ssh
  • ssh-keygen
  • tclsh
  • timeout

Ubuntu

sudo apt install fping expect dnsutils

Alpine

apk add fping tcl expect openssl bind-tools openssh

clone repo

cd ~/bin
git clone https://github.com/nabbi/pan-ts-agent-discovery

config

See CONFIGURATION for parameter details.

cp src/inc/config.example.tcl src/inc/config.tcl

initialize log files

writable by the non-privileged account cron jobs are ran as

mkdir /var/log/paloalto
touch /var/log/paloalto/pan-tsagent-discover.log /var/log/paloalto/pan-tsagent-purge.log
chgrp -R $(USER) /var/log/paloalto
chmod -R g+w /var/log/paloalto

logrotate

/etc/logrotate.d/pan-tsa-discovery

/var/log/paloalto/pan-*.log {
    rotate 90
    daily
    missingok
    compress
    nocreate
}

crontab

non-privileged account

# PAN TS Agent Discover
15 * * * *     /opt/pan-ts-agent-discovery/src/discover.tcl >> /var/log/paloalto/pan-tsagent-discover.log 2>&1
# PAN TS Agent Purge - do not run at same time as discovery add!
30 5 * * *     /opt/pan-ts-agent-discovery/src/purge.tcl >> /var/log/paloalto/pan-tsagent-purge.log 2>&1

ssh config

newer OpenSSH defaults are stricter than Panorama

~/.ssh/config

host *
    HostKeyAlgorithms=+ssh-rsa