Commit graph

132 commits

Author SHA1 Message Date
Thomas Gerbet f29911cd75 elk7: 7.17.9 -> 7.17.10
Fixes CVE-2023-31413, CVE-2023-26486 and CVE-2023-26487.

https://discuss.elastic.co/t/elastic-stack-8-7-0-7-17-10-security-updates/332327

The non official analysis-lemmagen plugin has not yet been released for ES 7.17.10.
It is marked as broken in the meantime.
2023-05-20 00:33:51 +02:00
Thomas Gerbet b41c49ee2d elk7: 7.17.4 -> 7.17.9
Fixes CVE-2022-38779.

Advisory:
https://discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782

Changelogs:
https://www.elastic.co/guide/en/welcome-to-elastic/7.17/new.html
2023-04-26 23:42:46 +02:00
山下 8050381a43 elasticsearch: bump version, adjust sha256, drop esversion 6.8.21 support 2023-04-17 08:23:42 +09:00
Thiago Kenji Okada e58bfe9ba8
Merge pull request #224551 from yamashitax/elasticsearch-kuromoji
elasticsearchPlugins: add analysis-kuromoji plugin
2023-04-14 21:23:46 +01:00
ajs124 09a6672bbf elasticsearch6*: remove 2023-04-04 10:32:23 +02:00
山下 58af20bd05 elasticsearchPlugins: add analysis-kuromoji plugin 2023-04-04 08:51:41 +09:00
Artturin c55b931644 treewide: fix lints and remove a unneeded cmake input 2022-12-09 01:16:08 +02:00
Dmitry Ivankov 18271606a2 elasticsearch6: add libcrypt dependency to fix build
glibc's libcrypt is deprecated and since
ff30c899d8
is built by default without libcrypt, that's probably the point when `elasticsearch6`
started failing with
```
auto-patchelf: 3 dependencies could not be satisfied
error: auto-patchelf could not satisfy dependency libcrypt.so.1 wanted by /nix/store/nd0gn95yfnnmnnw8zk2jnafc9gj2qy91-elasticsearch-6.8.21/modules/x-pack-ml/platform/linux-x86_64/lib/liblog4cxx.so.10
error: auto-patchelf could not satisfy dependency libcrypt.so.1 wanted by /nix/store/nd0gn95yfnnmnnw8zk2jnafc9gj2qy91-elasticsearch-6.8.21/modules/x-pack-ml/platform/linux-x86_64/lib/libaprutil-1.so.0
error: auto-patchelf could not satisfy dependency libcrypt.so.1 wanted by /nix/store/nd0gn95yfnnmnnw8zk2jnafc9gj2qy91-elasticsearch-6.8.21/modules/x-pack-ml/platform/linux-x86_64/lib/libapr-1.so.0
```

Let's add libxcrypt dependency, also note that `elasticsearch6-oss` doesn't
seem to need it.

Should resolve https://github.com/NixOS/nixpkgs/issues/203467

Extra note is elk6 may get removed from nixpkgs soon in favor of elk7
https://github.com/NixOS/nixpkgs/pull/194420
2022-11-28 21:59:18 +01:00
Robert Scott 3d6c926c4f treewide/servers,shells,tools: add sourceType for more packages 2022-07-02 13:38:00 +01:00
PedroHLC ☭ e827840ae5
elasticsearch-plugins: 7.16.1 -> 7.17.4 2022-06-04 12:10:07 -03:00
PedroHLC ☭ 8b4c4bf34f elk7: 7.16.1 -> 7.17.4 2022-06-03 11:11:06 -04:00
Vladimír Čunát 5e845236f2
Merge branch 'staging-next' into staging 2022-04-10 17:11:36 +02:00
OPNA2608 d2f268745a treewide: autoPatchelfHook only on Linux 2022-03-23 21:37:39 +01:00
Abraham Chan 729988f5c6 elasticsearch7: add darwin-aarch64 2022-03-16 23:57:25 +11:00
Kim Lindberger ebaa226853
elk7: 7.11.1 -> 7.16.1, 6.8.3 -> 6.8.21 + add filebeat module and tests (#150879)
* elk7: 7.11.1 -> 7.16.1

* nixosTests.elk: Improve reliability and compatibility with ELK 7.x

- Use comparisons in jq instead of grepping
- Match for `.hits.total.value` if version >= 7, otherwise it always
  passes
- Make curl fail if requests fails

* nixos/filebeat: Add initial module and test

Filebeat is an open source file harvester, mostly used to fetch logs
files and feed them into logstash.

This module can be used instead of journalbeat if used with
`filebeat7` and configured with the `journald` input.

* python3Packages.parsedmarc.tests: Fix breakage

- Don't use the deprecated elasticsearch7-oss package
- Improve jq query robustness and add tracing

* rl-2205: Note the addition of the filebeat service

* elk6: 6.8.3 -> 6.8.21

The latest version includes a fix for CVE-2021-44228.

* nixos/journalbeat: Add a loose dependency on elasticsearch

Avoid unnecssary back-off when elasticsearch is running on the same
host.
2021-12-17 00:20:52 +09:00
Robert Hensing 58c4cebf6f elasticsearch/plugin: Fix rebase error 2021-11-03 12:34:47 +01:00
Andrew Childs 1faa5d5915 elasticsearch/plugins: build with "modules" from elasticsearch
Fixes dependency error while building search-guard:

    Exception in thread "main" java.lang.IllegalArgumentException: Missing plugin [lang-painless], dependency of [search-guard-7]
2021-11-03 11:39:08 +01:00
Andrew Childs 8fba8ef596 elasticsearch7: remove manual elf patching
The options as specified were not a coherent set. There were three
things to consider: autoPatchelfHook, the regular rpath
fixup (controlled by dontPatchELF) and the elf interpreter rewrite in
the postFixup hook.

The autoPatchelfHook will set the interpreter, so the explicit
invocation of patchelf to do so in postFixup should not be required.

The autoPatchelfHook will rewrite rpaths entirely, so disabling the
rpath minimizing via dontPatchELF should have no effect.
2021-11-03 11:37:07 +01:00
Andrew Childs 6c2478f462 elasticsearch7: 7.5.1 -> 7.11.1; drop enableUnfree 2021-11-03 11:32:16 +01:00
Andrew Childs 499807e106 elasticsearch/plugins: 7.5.1 -> 7.11.1 2021-11-03 11:30:12 +01:00
happysalada 3b7fa8744c elasticsearch7: wrap elasticcearch-keystore 2021-09-02 10:57:02 +09:00
happysalada f9321de0f3 elk7: 7.5.1 -> 7.10.2
Update pkgs/development/tools/misc/kibana/7.x.nix

Co-authored-by: Mihai Fufezan <36706276+fufexan@users.noreply.github.com>

Update pkgs/servers/search/elasticsearch/7.x.nix

Co-authored-by: Mihai Fufezan <36706276+fufexan@users.noreply.github.com>

Update pkgs/servers/search/elasticsearch/7.x.nix

Co-authored-by: Mihai Fufezan <36706276+fufexan@users.noreply.github.com>

Update pkgs/development/tools/misc/kibana/7.x.nix

Co-authored-by: Mihai Fufezan <36706276+fufexan@users.noreply.github.com>
2021-08-31 09:06:13 +09:00
happysalada d702fbfe32 elasticsearch: nixpkgs-fmt 2021-08-31 09:06:13 +09:00
Felix Buehler a56d117bdb servers: replace name with pname&version 2021-07-26 20:15:46 +02:00
Jan Tojnar 6d1958ad2d
Merge branch 'staging-next' into staging 2021-03-04 22:16:45 +01:00
René Løwe Jacobsen 704a0ab8c3 elasticsearch: Fix broken unfree version
The current unfree versions are broken because makeWrapper is not a part
of nativeBuildInputs. The bug was introduced in #112276.
2021-03-02 11:58:45 +01:00
Ben Siraphob 127733211e
treewide: unzip buildInputs to nativeBuildInputs (#112302) 2021-02-20 16:01:53 -05:00
Ben Siraphob e03c068af5 treewide: makeWrapper buildInputs to nativeBuildInputs 2021-02-19 20:09:16 +07:00
Ben Siraphob 872973d7d1 pkgs/servers: stdenv.lib -> lib 2021-01-15 14:24:03 +07:00
Profpatsch 4a7f99d55d treewide: with stdenv.lib; in meta -> with lib;
Part of: https://github.com/NixOS/nixpkgs/issues/108938

meta = with stdenv.lib;

is a widely used pattern. We want to slowly remove
the `stdenv.lib` indirection and encourage people
to use `lib` directly. Thus let’s start with the meta
field.

This used a rewriting script to mostly automatically
replace all occurances of this pattern, and add the
`lib` argument to the package header if it doesn’t
exist yet.

The script in its current form is available at
https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix
2021-01-11 10:38:22 +01:00
Graham Christensen bc49a0815a
utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
Jon Roberts 2dd2b2fdcb
elasticsearchPlugins.analysis-phonetic: add 2019-09-04 15:19:29 -05:00
Michael Reilly 84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
Nick Braga c1e376e4f9 elasticsearchPlugins: add analysis-icu plugin 2020-02-25 10:05:34 -05:00
vasile luta 0e122f5c8e elasticsearch-plugins: 7.3.1 -> 7.5.1 2020-01-06 15:43:25 +02:00
vasile luta 206e66bbbb elasticsearch7: 7.3.1 -> 7.5.1 2020-01-06 15:21:19 +02:00
ash lea f92cc632ae elasticsearchPlugins.search-guard: fix homepage link 2019-11-10 00:30:12 -08:00
ash lea a23730cf9a elasticsearchPlugins: style fixups 2019-11-10 00:26:56 -08:00
ash lea 2e3d3cff7e elasticsearchPlugins: match elasticsearch version 2019-11-10 00:10:51 -08:00
ash lea 98875b5b4e elasticsearchPlugins: add ingest-attachment 2019-11-09 20:53:00 -08:00
volth 7b8fb5c06c treewide: remove redundant quotes 2019-09-08 23:38:31 +00:00
adisbladis 723148f92e
elastic7: 7.0.1 -> 7.3.1 2019-09-07 12:48:42 +01:00
adisbladis 3ab433df34
elastic6: 6.7.2 -> 6.8.3 2019-09-07 12:43:40 +01:00
Jan Tojnar f9237f3152
Merge branch 'master' into staging-next 2019-09-06 16:55:11 +02:00
adisbladis a870cad373
elasticsearch5: Remove package
It's EOL
2019-09-06 14:22:15 +01:00
volth 35d68ef143 treewide: remove redundant quotes 2019-08-26 21:40:19 +00:00
volth 46420bbaa3 treewide: name -> pname (easy cases) (#66585)
treewide replacement of

stdenv.mkDerivation rec {
  name = "*-${version}";
  version = "*";

to pname
2019-08-15 13:41:18 +01:00
worldofpeace 3f4a353737 treewide: use dontUnpack 2019-07-01 04:23:51 -04:00
volth f3282c8d1e treewide: remove unused variables (#63177)
* treewide: remove unused variables

* making ofborg happy
2019-06-16 19:59:05 +00:00
Jaka Hudoklin e4d89879f8
elasticsearch: add missing gnugrep and coreutils to wrapper 2019-05-12 16:31:13 +02:00