Add PA settings

wazuh · Nov 19, 2024 · 004daa2 · 004daa2
1 parent b2e56cc
commit 004daa2
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 1 deletion.
diff --git a/distribution/packages/src/common/wazuh-indexer-performance-analyzer.service b/distribution/packages/src/common/wazuh-indexer-performance-analyzer.service
@@ -8,7 +8,7 @@ Restart=on-failure
 User=wazuh-indexer
 Group=wazuh-indexer
 Environment=OPENSEARCH_HOME=/usr/share/wazuh-indexer
-Environment=OPENSEARCH_PATH_CONF=/etc/wazuh-indexer/
+Environment=OPENSEARCH_PATH_CONF=/etc/wazuh-indexer
 WorkingDirectory=/usr/share/wazuh-indexer
 
 [Install]

diff --git a/distribution/packages/src/deb/debian/postinst b/distribution/packages/src/deb/debian/postinst
@@ -32,6 +32,21 @@ chown -R wazuh-indexer:wazuh-indexer ${data_dir}
 chown -R wazuh-indexer:wazuh-indexer ${pid_dir}
 chown -R wazuh-indexer:wazuh-indexer ${tmp_dir}
 
+
+export OPENSEARCH_PATH_CONF=${OPENSEARCH_PATH_CONF:-${config_dir}}
+# Apply Performance Analyzer settings, as per https://github.com/opensearch-project/opensearch-build/blob/2.18.0/scripts/pkg/build_templates/current/opensearch/deb/debian/postinst#L28-L37
+if ! grep -q '## OpenSearch Performance Analyzer' "$OPENSEARCH_PATH_CONF/jvm.options"; then
+    CLK_TCK=$(/usr/bin/getconf CLK_TCK)
+    {
+        echo
+        echo "## OpenSearch Performance Analyzer"
+        echo "-Dclk.tck=$CLK_TCK"
+        echo "-Djdk.attach.allowAttachSelf=true"
+        echo "-Djava.security.policy=file://$OPENSEARCH_PATH_CONF/opensearch-performance-analyzer/opensearch_security.policy"
+        echo "--add-opens=jdk.attach/sun.tools.attach=ALL-UNNAMED"
+    } >> "$OPENSEARCH_PATH_CONF/jvm.options"
+fi
+
 # Reload systemctl daemon
 if command -v systemctl > /dev/null; then
     systemctl daemon-reload

diff --git a/distribution/packages/src/rpm/wazuh-indexer.rpm.spec b/distribution/packages/src/rpm/wazuh-indexer.rpm.spec
@@ -180,6 +180,20 @@ set -e
 chown -R %{name}:%{name} %{config_dir}
 chown -R %{name}:%{name} %{log_dir}
 
+export OPENSEARCH_PATH_CONF=${OPENSEARCH_PATH_CONF:-${config_dir}}
+# Apply Performance Analyzer settings, as per https://github.com/opensearch-project/opensearch-build/blob/2.18.0/scripts/pkg/build_templates/current/opensearch/deb/debian/postinst#L28-L37
+if ! grep -q '## OpenSearch Performance Analyzer' "$OPENSEARCH_PATH_CONF/jvm.options"; then
+    CLK_TCK=$(/usr/bin/getconf CLK_TCK)
+    {
+        echo
+        echo "## OpenSearch Performance Analyzer"
+        echo "-Dclk.tck=$CLK_TCK"
+        echo "-Djdk.attach.allowAttachSelf=true"
+        echo "-Djava.security.policy=file://$OPENSEARCH_PATH_CONF/opensearch-performance-analyzer/opensearch_security.policy"
+        echo "--add-opens=jdk.attach/sun.tools.attach=ALL-UNNAMED"
+    } >> "$OPENSEARCH_PATH_CONF/jvm.options"
+fi
+
 # Reload systemctl daemon
 if command -v systemctl > /dev/null; then
     systemctl daemon-reload