RPM/DEB agent creation from API

[Paolo Leoni Work]

Hi Mike,

how can I create RPM/DEB agent from API? 

I know that I can create it locally launching these commands:

velociraptor --config "$file_yaml" debian client
velociraptor --config "$file_yaml" rpm client

Can I do it remotely with API to obtain a similar result to what I get with the "Server.Utils.CreateMSI" artifact?

Thanks in advance.

~p

[Mike Cohen]

Hi Paolo,

  We had similar questions recently around creating MSI/RPM from the API. Although you can do it - it really do not make much sense in practice

creating an RPM/MSI/DEB means to just bundle the config file inside the a standard package - there is really nothing special about it needing to be done on the server. 

Probably the easiest thing is to use the API to get the client config (using SELECT _client_config from orgs() ) and then just bundle using that locally.

If you make the server create the bundles then you still have to somehow fetch the data from the server, which for the API means connecting over a second fetch file API. This complicates things a lot from the api program's end for not apparent benefit.

Thanks

Mike

Mike Cohen  Digital Paleontologist,  Velocidex Enterprises E mi...@velocidex.com

--
You received this message because you are subscribed to the Google Groups "velociraptor-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to velociraptor-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/velociraptor-discuss/CA%2Br9BfL-cH1nBse5B8QA5se1h1n3BZXMoiNL7cpzzvpPp6FbBg%40mail.gmail.com.