deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-15 14:57:23 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

.

Browse Source
This commit is contained in:
Tudor Dobrila 2020-02-18 23:09:50 -08:00
parent bf5a4ff234
commit 62c91eca75
1 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md
View File

@ -37,12 +37,12 @@ Before you get started, please see [the main Microsoft Defender ATP for Linux pa
- Ansible needs to be installed at least on one computer (we will call it master) - Ansible needs to be installed at least on one computer (we will call it master)
- Passwordless SSH must be configured for root user between the master and all clients - Passwordless SSH must be configured for root user between the master and all clients
- Below software must be installed on all clients - The following software must be installed on all clients:
- python-apt - python-apt
- curl - curl
- unzip - unzip
- All host must be listed in the following format in `/etc/ansible/hosts` file - All host must be listed in the following format in `/etc/ansible/hosts` file:
```bash ```bash
[servers] [servers]
@ -79,7 +79,7 @@ Download the onboarding package from Microsoft Defender Security Center:
Create subtask / role files which contribute to an actual task. Create the below files under the `/etc/ansible/roles` directory. Create subtask / role files which contribute to an actual task. Create the below files under the `/etc/ansible/roles` directory.
- Copy onboarding package to all client machines - Copy onboarding package to all client machines:
```bash ```bash
$ cat /etc/ansible/roles/copy_onboarding_pkg.yml $ cat /etc/ansible/roles/copy_onboarding_pkg.yml
@ -92,7 +92,7 @@ Create subtask / role files which contribute to an actual task. Create the below
mode: '0644' mode: '0644'
``` ```
- Create a `setup.sh` script which operates on the onboarding file - Create a `setup.sh` script which operates on the onboarding file:
```bash ```bash
$ cat /root/setup.sh $ cat /root/setup.sh
@ -109,7 +109,7 @@ Create subtask / role files which contribute to an actual task. Create the below
sudo mv microsoft.gpg /etc/apt/trusted.gpg.d/ sudo mv microsoft.gpg /etc/apt/trusted.gpg.d/
``` ```
- Create the onboarding file - Create the onboarding file:
```bash ```bash
$ cat setup_blob.yml $ cat setup_blob.yml
@ -140,7 +140,7 @@ Create subtask / role files which contribute to an actual task. Create the below
> [!NOTE] > [!NOTE]
> In case of Oracle EL and CentOS 8, use *[distro]* as “rhel”. > In case of Oracle EL and CentOS 8, use *[distro]* as “rhel”.
- For apt-based distributions use the following YAML file - For apt-based distributions use the following YAML file:
```bash ```bash
$ cat add_apt_repo.yml $ cat add_apt_repo.yml
@ -157,7 +157,7 @@ Create subtask / role files which contribute to an actual task. Create the below
id: BC528686B50D79E339D3721CEB3E94ADBE1229C id: BC528686B50D79E339D3721CEB3E94ADBE1229C
``` ```
- For yum-based distributions use the following YAML file - For yum-based distributions use the following YAML file:
```bash ```bash
$ cat add_yum_repo.yml $ cat add_yum_repo.yml
@ -173,7 +173,7 @@ Create subtask / role files which contribute to an actual task. Create the below
- Create the actual install / uninstall YAML files under `/etc/ansible/playbooks` - Create the actual install / uninstall YAML files under `/etc/ansible/playbooks`
- For apt-based distributions use the following YAML file - For apt-based distributions use the following YAML file:
```bash ```bash
$ cat install_mdatp.yml $ cat install_mdatp.yml
@ -197,7 +197,7 @@ Create subtask / role files which contribute to an actual task. Create the below
state: absent state: absent
``` ```
- For yum-based distributions use the following YAML file - For yum-based distributions use the following YAML file:
```bash ```bash
$ cat install_mdatp_yum.yml $ cat install_mdatp_yum.yml
@ -229,12 +229,12 @@ Now run the tasks files under `/etc/ansible/playbooks/`
`# ansible-playbook /etc/ansible/playbooks/install_mdatp.yml -i /etc/ansible/hosts` `# ansible-playbook /etc/ansible/playbooks/install_mdatp.yml -i /etc/ansible/hosts`
- Validation / Configuration - Validation / configuration
`# ansible -m shell -a 'mdatp --connectivity-test' all`<br/> `# ansible -m shell -a 'mdatp --connectivity-test' all`<br/>
`# ansible -m shell -a 'mdatp --health' all` `# ansible -m shell -a 'mdatp --health' all`
- Un-Installation - Uninstallation
`# ansible-playbook /etc/ansible/playbooks/uninstall_mdatp.yml -i /etc/ansible/hosts` `# ansible-playbook /etc/ansible/playbooks/uninstall_mdatp.yml -i /etc/ansible/hosts`