Hello list,
We are currently developing custom bots that are very specific to one of our clients' environment. For the sake of clean code management, we intend to keep the custom bots in a separate repository and generate separate pip/rpm packages. So far I think the only obstacle in doing so is that the bots are not registered in the BOTS file, therefore they will not be recognized by intelmqctl. We could append the bots' description in the BOTS file manually, but we'd rather have an automatic way of doing this, when installing the custom bot rpm package. Has anyone already dealt with the same use-case? Any tips?
Thanks and best regards, Antoine
On 11 Oct 2018, at 11:37, Antoine Neuenschwander antoine.neuenschwander@switch.ch wrote:
Hello list,
We are currently developing custom bots that are very specific to one of our clients' environment. For the sake of clean code management, we intend to keep the custom bots in a separate repository and generate separate pip/rpm packages. So far I think the only obstacle in doing so is that the bots are not registered in the BOTS file, therefore they will not be recognized by intelmqctl. We could append the bots' description in the BOTS file manually, but we'd rather have an automatic way of doing this, when installing the custom bot rpm package. Has anyone already dealt with the same use-case? Any tips?
we were thinking of a type of bots.d/ directory structure some time ago (1 year ago?) Would that help in this case?
Thanks and best regards, Antoine
-- SWITCH
Antoine Neuenschwander, SWITCH-CERT Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland phone +41 44 268 15 15, direct +41 44 268 15 29 antoine.neuenschwander@switch.ch, http://www.switch.ch
Working for a better digital world
Listen-Einstellungen: https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-users
-- // L. Aaron Kaplan kaplan@cert.at - T: +43 1 5056416 78 // CERT Austria - https://www.cert.at/ // Eine Initiative der nic.at GmbH - http://www.nic.at/ // Firmenbuchnummer 172568b, LG Salzburg
On 11.10.18 19:29, L. Aaron Kaplan wrote:
On 11 Oct 2018, at 11:37, Antoine Neuenschwander antoine.neuenschwander@switch.ch wrote:
Hello list,
We are currently developing custom bots that are very specific to one of our clients' environment. For the sake of clean code management, we intend to keep the custom bots in a separate repository and generate separate pip/rpm packages. So far I think the only obstacle in doing so is that the bots are not registered in the BOTS file, therefore they will not be recognized by intelmqctl. We could append the bots' description in the BOTS file manually, but we'd rather have an automatic way of doing this, when installing the custom bot rpm package. Has anyone already dealt with the same use-case? Any tips?
we were thinking of a type of bots.d/ directory structure some time ago (1 year ago?) Would that help in this case?
Yes, that would help if the bots needn't register elsewhere.
Thanks and best regards, Antoine
-- SWITCH
Antoine Neuenschwander, SWITCH-CERT Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland phone +41 44 268 15 15, direct +41 44 268 15 29 antoine.neuenschwander@switch.ch, http://www.switch.ch
Working for a better digital world
Listen-Einstellungen: https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-users
-- // L. Aaron Kaplan kaplan@cert.at - T: +43 1 5056416 78 // CERT Austria - https://www.cert.at/ // Eine Initiative der nic.at GmbH - http://www.nic.at/ // Firmenbuchnummer 172568b, LG Salzburg
Am Freitag 12 Oktober 2018 10:02:03 schrieb Antoine Neuenschwander:
we were thinking of a type of bots.d/ directory structure some time ago (1 year ago?) Would that help in this case?
Yes, that would help if the bots needn't register elsewhere.
One issue where we were discussing this is:
https://github.com/certtools/intelmq/issues/552 Enable separate packaging of bots by allowing addition and removals to the config.
However it is going to be an incompatible change to the code base if it is to be done to get a major improvement. I'd also suggest to move the test code close to each bot code, just like documentation.
Note that our improvement packaging of the intelmq-certbund-contact bot uses a workaround in the Debian packages, look at postinst and postrm at https://github.com/Intevation/intelmq-certbund-contact/tree/master/debian
(This Bot is part of a solution we had done for the CERT-Bund which uses automated email notifications a lot, see https://github.com/Intevation/intelmq-mailgen-release)
Best Regards, Bernhard