Overview
Welcome to the Opus installation and configuration guide.
Info
For ESXi, VirtualBox or VMware Workstation you will need to download the Opus ISO.
Provision a machine with at least 2 cores, 4GB of ram and an 8GB disk.
Mount the iso and boot the machine.
Releases
Version 2.2.1
Fixes
- Relay and gateway will set the nobody account to never expire.
- The admin tables will now show the correct number of rows.
- Task tables will now correctly sort large numbers of rows.
Version 2.2.0
Features
- Agent support. Run Opus tasks on remote Docker servers (including Windows).
- Added a reporting page for an overview of the Opus state.
Enhancements
- Better error messages when adding a Hashicorp Vault that is uninitialised or sealed.
- Consistency pass on user interface.
- Tasks now time out after 15 minutes by default. This is configurable with the
opus.run.timeout
label.
Fixes
- Performance improvements for large numbers of historical tasks.
Breaking
- The password strength meter now only appears for a password input if you provide
meter=true
.
Known Issues
- You will need to manually refresh in Chrome to see the updated user interface
Version 2.1.2
Fixes
- API gateway now no longer uses invalid latin1 characters
- API gateway now correctly returns 407 when not authenticated
- Space remaining now reports the unit correctly
Version 2.1.1
Enhancements
- You can now specify multiple hosts for active directory (comma separated).
- The input table has a toggle for what was selected once submitted.
- Enable Linux page poison to secure old page data
Fixes
- Virtual machine will now correctly shutdown when triggered from VMware tools.
- Virtual machine will automatically sync time with host on resume.
- Self-signed certificate will not regenerate on reboot unless the IP or DNS settings have changed.
- Users can now no longer submit an input after a task has failed.
- Opus will not time out if a task upload takes longer than 10 seconds.
- The JWT used by Opus will be regenerated after each reboot.
- Fixed the input table reloading unnecessarily causing flickering.
- Fixed large task upload in Chrome
Breaking
- Loopback alias 172.16.123.1 has been removed.
- Servername override in AD configuration removed. Insecure LDAPS certificates are no longer allowed.
Security
- Remove axios dependency (fixes CVE-2019-10742)
Version 2.1.0
Updated
- Update Linux Kernel to 4.19.37
- Update containerd to 1.2.6
- Update openssh-server to 7.9
- Update vault to 1.1.2
- Compile with Go 1.12.4
Enhancements
- Add a range of syslog events in the CEF format.
- Add a config page to upload licences and generate techouts.
Features
- Add a CSV report of all tasks that have been run to the task history page.
- Add 'Admin Login Groups' to the Configure Active Directory dialog.
Breaking
- Remote support removed now beta has concluded.