Commit Graph

137 Commits

Author SHA1 Message Date
Thomas Gerbet
afb57ff041 elasticsearch: 7.17.10 -> 7.17.16
Fixes CVE-2023-31417, CVE-2023-31418, CVE-2023-31419, CVE-2023-46673 and CVE-2023-46674.

Security announces:
https://www.elastic.co/guide/en/security/7.17/release-notes-header-7.17.0.html#release-notes-7.17.16

Release notes:
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.16.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.15.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.14.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.13.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.12.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.11.html
2024-01-14 12:21:45 +01:00
Fabian Affolter
4984613adb
Merge pull request #251812 from LeSuisse/licenses-elv2
lib/licenses: add Elastic License 2.0, drop Elastic License
2023-10-02 22:11:16 +02:00
nicoo
fab52fca51 treewide: sha512 → hash 2023-09-22 18:37:42 +02:00
Thomas Gerbet
e39d579918 lib/licenses: add Elastic License 2.0, drop Elastic License
This license was introduced in the Elastic search repository by this
commit: a92a647b9f

It appears that all the the packages in nixpkgs using the Elastic License are using the v2.0.
2023-08-27 18:29:26 +02:00
Jan Malakhovski
b358ebd870 treewide: replace setSourceRoot = "sourceRoot=$PWD" and similar with sourceRoot = "." 2023-08-12 08:29:55 +00:00
Thomas Gerbet
f29911cd75 elk7: 7.17.9 -> 7.17.10
Fixes CVE-2023-31413, CVE-2023-26486 and CVE-2023-26487.

https://discuss.elastic.co/t/elastic-stack-8-7-0-7-17-10-security-updates/332327

The non official analysis-lemmagen plugin has not yet been released for ES 7.17.10.
It is marked as broken in the meantime.
2023-05-20 00:33:51 +02:00
Thomas Gerbet
b41c49ee2d elk7: 7.17.4 -> 7.17.9
Fixes CVE-2022-38779.

Advisory:
https://discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782

Changelogs:
https://www.elastic.co/guide/en/welcome-to-elastic/7.17/new.html
2023-04-26 23:42:46 +02:00
山下
8050381a43 elasticsearch: bump version, adjust sha256, drop esversion 6.8.21 support 2023-04-17 08:23:42 +09:00
Thiago Kenji Okada
e58bfe9ba8
Merge pull request #224551 from yamashitax/elasticsearch-kuromoji
elasticsearchPlugins: add analysis-kuromoji plugin
2023-04-14 21:23:46 +01:00
ajs124
09a6672bbf elasticsearch6*: remove 2023-04-04 10:32:23 +02:00
山下
58af20bd05 elasticsearchPlugins: add analysis-kuromoji plugin 2023-04-04 08:51:41 +09:00
Artturin
c55b931644 treewide: fix lints and remove a unneeded cmake input 2022-12-09 01:16:08 +02:00
Dmitry Ivankov
18271606a2 elasticsearch6: add libcrypt dependency to fix build
glibc's libcrypt is deprecated and since
ff30c899d8
is built by default without libcrypt, that's probably the point when `elasticsearch6`
started failing with
```
auto-patchelf: 3 dependencies could not be satisfied
error: auto-patchelf could not satisfy dependency libcrypt.so.1 wanted by /nix/store/nd0gn95yfnnmnnw8zk2jnafc9gj2qy91-elasticsearch-6.8.21/modules/x-pack-ml/platform/linux-x86_64/lib/liblog4cxx.so.10
error: auto-patchelf could not satisfy dependency libcrypt.so.1 wanted by /nix/store/nd0gn95yfnnmnnw8zk2jnafc9gj2qy91-elasticsearch-6.8.21/modules/x-pack-ml/platform/linux-x86_64/lib/libaprutil-1.so.0
error: auto-patchelf could not satisfy dependency libcrypt.so.1 wanted by /nix/store/nd0gn95yfnnmnnw8zk2jnafc9gj2qy91-elasticsearch-6.8.21/modules/x-pack-ml/platform/linux-x86_64/lib/libapr-1.so.0
```

Let's add libxcrypt dependency, also note that `elasticsearch6-oss` doesn't
seem to need it.

Should resolve https://github.com/NixOS/nixpkgs/issues/203467

Extra note is elk6 may get removed from nixpkgs soon in favor of elk7
https://github.com/NixOS/nixpkgs/pull/194420
2022-11-28 21:59:18 +01:00
Robert Scott
3d6c926c4f treewide/servers,shells,tools: add sourceType for more packages 2022-07-02 13:38:00 +01:00
PedroHLC ☭
e827840ae5
elasticsearch-plugins: 7.16.1 -> 7.17.4 2022-06-04 12:10:07 -03:00
PedroHLC ☭
8b4c4bf34f elk7: 7.16.1 -> 7.17.4 2022-06-03 11:11:06 -04:00
Vladimír Čunát
5e845236f2
Merge branch 'staging-next' into staging 2022-04-10 17:11:36 +02:00
OPNA2608
d2f268745a treewide: autoPatchelfHook only on Linux 2022-03-23 21:37:39 +01:00
Abraham Chan
729988f5c6 elasticsearch7: add darwin-aarch64 2022-03-16 23:57:25 +11:00
Kim Lindberger
ebaa226853
elk7: 7.11.1 -> 7.16.1, 6.8.3 -> 6.8.21 + add filebeat module and tests (#150879)
* elk7: 7.11.1 -> 7.16.1

* nixosTests.elk: Improve reliability and compatibility with ELK 7.x

- Use comparisons in jq instead of grepping
- Match for `.hits.total.value` if version >= 7, otherwise it always
  passes
- Make curl fail if requests fails

* nixos/filebeat: Add initial module and test

Filebeat is an open source file harvester, mostly used to fetch logs
files and feed them into logstash.

This module can be used instead of journalbeat if used with
`filebeat7` and configured with the `journald` input.

* python3Packages.parsedmarc.tests: Fix breakage

- Don't use the deprecated elasticsearch7-oss package
- Improve jq query robustness and add tracing

* rl-2205: Note the addition of the filebeat service

* elk6: 6.8.3 -> 6.8.21

The latest version includes a fix for CVE-2021-44228.

* nixos/journalbeat: Add a loose dependency on elasticsearch

Avoid unnecssary back-off when elasticsearch is running on the same
host.
2021-12-17 00:20:52 +09:00
Robert Hensing
58c4cebf6f elasticsearch/plugin: Fix rebase error 2021-11-03 12:34:47 +01:00
Andrew Childs
1faa5d5915 elasticsearch/plugins: build with "modules" from elasticsearch
Fixes dependency error while building search-guard:

    Exception in thread "main" java.lang.IllegalArgumentException: Missing plugin [lang-painless], dependency of [search-guard-7]
2021-11-03 11:39:08 +01:00
Andrew Childs
8fba8ef596 elasticsearch7: remove manual elf patching
The options as specified were not a coherent set. There were three
things to consider: autoPatchelfHook, the regular rpath
fixup (controlled by dontPatchELF) and the elf interpreter rewrite in
the postFixup hook.

The autoPatchelfHook will set the interpreter, so the explicit
invocation of patchelf to do so in postFixup should not be required.

The autoPatchelfHook will rewrite rpaths entirely, so disabling the
rpath minimizing via dontPatchELF should have no effect.
2021-11-03 11:37:07 +01:00
Andrew Childs
6c2478f462 elasticsearch7: 7.5.1 -> 7.11.1; drop enableUnfree 2021-11-03 11:32:16 +01:00
Andrew Childs
499807e106 elasticsearch/plugins: 7.5.1 -> 7.11.1 2021-11-03 11:30:12 +01:00
happysalada
3b7fa8744c elasticsearch7: wrap elasticcearch-keystore 2021-09-02 10:57:02 +09:00
happysalada
f9321de0f3 elk7: 7.5.1 -> 7.10.2
Update pkgs/development/tools/misc/kibana/7.x.nix

Co-authored-by: Mihai Fufezan <36706276+fufexan@users.noreply.github.com>

Update pkgs/servers/search/elasticsearch/7.x.nix

Co-authored-by: Mihai Fufezan <36706276+fufexan@users.noreply.github.com>

Update pkgs/servers/search/elasticsearch/7.x.nix

Co-authored-by: Mihai Fufezan <36706276+fufexan@users.noreply.github.com>

Update pkgs/development/tools/misc/kibana/7.x.nix

Co-authored-by: Mihai Fufezan <36706276+fufexan@users.noreply.github.com>
2021-08-31 09:06:13 +09:00
happysalada
d702fbfe32 elasticsearch: nixpkgs-fmt 2021-08-31 09:06:13 +09:00
Felix Buehler
a56d117bdb servers: replace name with pname&version 2021-07-26 20:15:46 +02:00
Jan Tojnar
6d1958ad2d
Merge branch 'staging-next' into staging 2021-03-04 22:16:45 +01:00
René Løwe Jacobsen
704a0ab8c3 elasticsearch: Fix broken unfree version
The current unfree versions are broken because makeWrapper is not a part
of nativeBuildInputs. The bug was introduced in #112276.
2021-03-02 11:58:45 +01:00
Ben Siraphob
127733211e
treewide: unzip buildInputs to nativeBuildInputs (#112302) 2021-02-20 16:01:53 -05:00
Ben Siraphob
e03c068af5 treewide: makeWrapper buildInputs to nativeBuildInputs 2021-02-19 20:09:16 +07:00
Ben Siraphob
872973d7d1 pkgs/servers: stdenv.lib -> lib 2021-01-15 14:24:03 +07:00
Profpatsch
4a7f99d55d treewide: with stdenv.lib; in meta -> with lib;
Part of: https://github.com/NixOS/nixpkgs/issues/108938

meta = with stdenv.lib;

is a widely used pattern. We want to slowly remove
the `stdenv.lib` indirection and encourage people
to use `lib` directly. Thus let’s start with the meta
field.

This used a rewriting script to mostly automatically
replace all occurances of this pattern, and add the
`lib` argument to the package header if it doesn’t
exist yet.

The script in its current form is available at
https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix
2021-01-11 10:38:22 +01:00
Graham Christensen
bc49a0815a
utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
Jon Roberts
2dd2b2fdcb
elasticsearchPlugins.analysis-phonetic: add 2019-09-04 15:19:29 -05:00
Michael Reilly
84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
Nick Braga
c1e376e4f9 elasticsearchPlugins: add analysis-icu plugin 2020-02-25 10:05:34 -05:00
vasile luta
0e122f5c8e elasticsearch-plugins: 7.3.1 -> 7.5.1 2020-01-06 15:43:25 +02:00
vasile luta
206e66bbbb elasticsearch7: 7.3.1 -> 7.5.1 2020-01-06 15:21:19 +02:00
ash lea
f92cc632ae elasticsearchPlugins.search-guard: fix homepage link 2019-11-10 00:30:12 -08:00
ash lea
a23730cf9a elasticsearchPlugins: style fixups 2019-11-10 00:26:56 -08:00
ash lea
2e3d3cff7e elasticsearchPlugins: match elasticsearch version 2019-11-10 00:10:51 -08:00
ash lea
98875b5b4e elasticsearchPlugins: add ingest-attachment 2019-11-09 20:53:00 -08:00
volth
7b8fb5c06c treewide: remove redundant quotes 2019-09-08 23:38:31 +00:00
adisbladis
723148f92e
elastic7: 7.0.1 -> 7.3.1 2019-09-07 12:48:42 +01:00
adisbladis
3ab433df34
elastic6: 6.7.2 -> 6.8.3 2019-09-07 12:43:40 +01:00
Jan Tojnar
f9237f3152
Merge branch 'master' into staging-next 2019-09-06 16:55:11 +02:00
adisbladis
a870cad373
elasticsearch5: Remove package
It's EOL
2019-09-06 14:22:15 +01:00