openappsec/nodes/orchestration/CMakeLists.txt

add_subdirectory(package)

add_executable(orchestration_comp main.cc)

target_link_libraries(
    orchestration_comp
    -Wl,--start-group

    ${COMMON_LIBRARIES}

    generic_rulebase
    generic_rulebase_evaluators
    ip_utilities
    http_transaction_data
    version
    signal_handler

    orchestration
    health_check
    health_check_manager
    updates_process_reporter
    service_controller
    manifest_controller
    package_handler
    orchestration_modules
    details_resolver
    orchestration_downloader
    update_communication
    orchestration_tools
    env_details
    local_policy_mgmt_gen
    curl

    -Wl,--end-group
)

add_dependencies(orchestration_comp ngen_core)

install(TARGETS orchestration_comp DESTINATION bin)
install(TARGETS orchestration_comp DESTINATION orchestration/bin)

install(FILES package/certificate/ngen.body.crt DESTINATION orchestration/certificate/ PERMISSIONS OWNER_READ OWNER_WRITE OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ)
install(FILES package/certificate/public-keys/cloud-ngen.pem DESTINATION orchestration/certificate/ PERMISSIONS OWNER_READ OWNER_WRITE OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ)
install(FILES package/certificate/public-keys/dev-i2.pem DESTINATION orchestration/certificate/ PERMISSIONS OWNER_READ OWNER_WRITE OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ)
install(FILES package/certificate/public-keys/i2.pem DESTINATION orchestration/certificate/ PERMISSIONS OWNER_READ OWNER_WRITE OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ)
install(FILES package/certificate/public-keys/stg-i2.pem DESTINATION orchestration/certificate/ PERMISSIONS OWNER_READ OWNER_WRITE OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ)

execute_process (
	COMMAND sh -c "find /usr/lib* -name \"libboost_regex.so*\" | awk '{printf $0\";\"}'"
	OUTPUT_VARIABLE boost_regex
)
install(FILES ${boost_regex} DESTINATION orchestration/lib/boost)

execute_process (
	COMMAND sh -c "find /usr/lib* -name \"libboost_atomic.so*\" | awk '{printf $0\";\"}'"
	OUTPUT_VARIABLE boost_atomic
)
install(FILES ${boost_atomic} DESTINATION orchestration/lib/boost)

execute_process (
	COMMAND sh -c "find /usr/lib* -name \"libboost_chrono.so*\" | awk '{printf $0\";\"}'"
	OUTPUT_VARIABLE boost_chrono
)
install(FILES ${boost_chrono} DESTINATION orchestration/lib/boost)

execute_process (
	COMMAND sh -c "find /usr/lib* -name \"libboost_context.so*\" | awk '{printf $0\";\"}'"
	OUTPUT_VARIABLE boost_context
)
install(FILES ${boost_context} DESTINATION orchestration/lib/boost)

execute_process (
	COMMAND sh -c "find /usr/lib* -name \"libboost_filesystem.so*\" | awk '{printf $0\";\"}'"
	OUTPUT_VARIABLE boost_filesystem
)
install(FILES ${boost_filesystem} DESTINATION orchestration/lib/boost)

execute_process (
	COMMAND sh -c "find /usr/lib* -name \"libboost_iostreams.so*\" | awk '{printf $0\";\"}'"
	OUTPUT_VARIABLE boost_iostreams
)
install(FILES ${boost_iostreams} DESTINATION orchestration/lib/boost)

execute_process (
	COMMAND sh -c "find /usr/lib* -name \"libboost_system.so*\" | awk '{printf $0\";\"}'"
	OUTPUT_VARIABLE boost_system
)
install(FILES ${boost_system} DESTINATION orchestration/lib/boost)

execute_process (
	COMMAND sh -c "find /usr/lib* -name \"libboost_system.so*\" | awk '{printf $0\";\"}'"
	OUTPUT_VARIABLE boost_system
)
install(FILES ${boost_system} DESTINATION orchestration/lib/boost)

execute_process (
	COMMAND sh -c "find /usr/lib* -name \"libboost_thread.so*\" | awk '{printf $0\";\"}'"
	OUTPUT_VARIABLE boost_thread
)
install(FILES ${boost_thread} DESTINATION orchestration/lib/boost)

execute_process (
	COMMAND sh -c "find /usr/lib* -maxdepth 1 -name \"libcrypto.so*\" | awk '{printf $0\";\"}'"
	OUTPUT_VARIABLE crypto
)
install(FILES ${crypto} DESTINATION orchestration/lib)
execute_process (
        COMMAND sh -c "find /lib* -name \"libcrypto.so*\" | awk '{printf $0\";\"}'"
        OUTPUT_VARIABLE crypto2
)
install(FILES ${crypto2} DESTINATION orchestration/lib)
execute_process (
        COMMAND sh -c "find /usr/lib/x86_64-linux-gnu -name \"libcrypto.so*\" | awk '{printf $0\";\"}'"
        OUTPUT_VARIABLE crypto3
)
install(FILES ${crypto3} DESTINATION orchestration/lib)

execute_process (
	 COMMAND sh -c "find /usr/lib* -maxdepth 1 -name \"libssl.so*\" | awk '{printf $1\";\"}'"
	 OUTPUT_VARIABLE ssl
)
install(FILES ${ssl} DESTINATION orchestration/lib)
execute_process (
         COMMAND sh -c "find /lib* -name \"libssl.so*\" | awk '{printf $1\";\"}'"
         OUTPUT_VARIABLE ssl2
)
install(FILES ${ssl2} DESTINATION orchestration/lib)
execute_process (
        COMMAND sh -c "find /usr/lib/x86_64-linux-gnu  -name \"libssl.so*\" | awk '{printf $1\";\"}'"
        OUTPUT_VARIABLE ssl3
)
install(FILES ${ssl3} DESTINATION orchestration/lib)

execute_process (
	COMMAND sh -c "find /usr/lib* -name \"libcurl.so*\" | awk '{printf $1\";\"}'"
	OUTPUT_VARIABLE curl
)
install(FILES ${curl} DESTINATION orchestration/lib)
execute_process (
        COMMAND sh -c "find /lib* -name \"libcurl.so*\" | awk '{printf $1\";\"}'"
        OUTPUT_VARIABLE curl2
)
install(FILES ${curl2} DESTINATION orchestration/lib)
execute_process (
        COMMAND sh -c "find /usr/lib/x86_64-linux-gnu -name \"libcurl.so*\" | awk '{printf $1\";\"}'"
        OUTPUT_VARIABLE curl3
)
install(FILES ${curl3} DESTINATION orchestration/lib)

execute_process (
	COMMAND sh -c "find /usr/lib* -name \"libz.so*\" | awk '{printf $0\";\"}'"
	OUTPUT_VARIABLE z
)
install(FILES ${z} DESTINATION orchestration/lib)

execute_process (
	COMMAND sh -c "which yq"
	OUTPUT_VARIABLE yq
	OUTPUT_STRIP_TRAILING_WHITESPACE
)
install(FILES ${yq} DESTINATION orchestration/scripts RENAME yq PERMISSIONS OWNER_READ OWNER_WRITE OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE)

install(DIRECTORY scripts DESTINATION orchestration USE_SOURCE_PERMISSIONS)

gen_help(
	"--token <token>" "Registration token"
	"--fog <fog URL>" "Agents Fog Addresss (valid URL)"
	"--proxy [user:pass@]<proxy URL>:<proxy port>" "Proxy address"
	"--offline_mode" "Run the Orchestration Nano service in offline mode"
	"--external_addresses <IPs list>" "List of Agents Host IP Addresses"
	"--certs-dir <Trusted CA directory>" "Path to the hosts trusted ca directory"
	"--public-key <Public key file path>" "Path to the SSL certificate's public key file (PEM format)"
	"--ignore <ignore packages list>" "List of ignored packages"
	"-ia" "Ignore access control package"
)

gen_package(
	install-cp-nano-agent.sh
	orchestration
	"./orchestration_package.sh;--x86"
	Check Point Nano Agent Version ${PACKAGE_VERSION} Install Package
)