https://github.com/chainguard-dev/kolide-silverblue
rebuilds Kolide RPM for use with Fedora Silverblue
https://github.com/chainguard-dev/kolide-silverblue
Last synced: 3 months ago
JSON representation
rebuilds Kolide RPM for use with Fedora Silverblue
- Host: GitHub
- URL: https://github.com/chainguard-dev/kolide-silverblue
- Owner: chainguard-dev
- License: apache-2.0
- Created: 2024-05-22T00:28:57.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2025-01-04T03:10:02.000Z (5 months ago)
- Last Synced: 2025-01-13T11:23:50.554Z (4 months ago)
- Language: Shell
- Size: 21.5 KB
- Stars: 2
- Watchers: 1
- Forks: 2
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# kolide-silverblue
This script rebuilds a [Kolide](https://www.kolide.com/) RPM for deployment on Fedora Silverblue.
## Requirements
- Go v1.21 or higher to [rebuild the launcher](https://github.com/kolide/launcher/blob/main/docs/launcher.md)
- podman or docker
- GNU `patch`
## Usage
1. Talk to the @Kolide Slack bot to
1. "Enroll a Device" via the @Kolide Slack bot, selecting the `RPM Linux (.rpm)` installation package.
2. Download the RPM file that @Kolide sends via Slack
2. Run `./rebuild.sh `
3. Get coffee while the script runs
### RPM installation instructions
To install the resulting RPM on Fedora SilverBlue, run:
```
rpm-ostree install
sudo rpm-ostree apply-live
systemctl enable --now launcher.kolide-k2
```
To uninstall the custom package, run:
```
sudo rpm-ostree uninstall launcher-kolide-k2
```
## How it works
This script automates the following steps:
1. Checks out https://github.com/kolide/launcher
2. Patches launcher with:
- https://github.com/kolide/launcher/pull/1721
- https://github.com/kolide/launcher/pull/1722
3. Extracts configuration details from the RPM you provided
4. Builds a new RPM
## Caveats
Autoupdates are not enabled, as this may result in Kolide sending you an incompatible launcher in the future. Hopefully Kolide will natively support Fedora SilverBlue soon so that this hack is unnecessary in the near future.
Be sure to mention to Kolide's support team that you would like native support for immutable Linux distrubitons such as Fedora SilverBlue!