From aed7857507ffe33853e0ba4048d8cde61204b812 Mon Sep 17 00:00:00 2001 From: Javi Polo Date: Tue, 26 Nov 2024 17:18:52 +0100 Subject: [PATCH] Disable google-cloud-ops-agent The current version of google-cloud-ops-agent is impacted by a CVE: https://access.redhat.com/security/cve/CVE-2024-41110 Signed-off-by: Javi Polo --- training/cloud/gcp/cloud-setup.sh | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/training/cloud/gcp/cloud-setup.sh b/training/cloud/gcp/cloud-setup.sh index d12d495e..a183e817 100755 --- a/training/cloud/gcp/cloud-setup.sh +++ b/training/cloud/gcp/cloud-setup.sh @@ -27,10 +27,13 @@ dnf install -y --nobest \ vim mv /etc/selinux.tmp /etc/selinux -# Install Google Ops Agent -curl -sSo /tmp/add-google-cloud-ops-agent-repo.sh https://dl.google.com/cloudagents/add-google-cloud-ops-agent-repo.sh -bash /tmp/add-google-cloud-ops-agent-repo.sh --also-install --remove-repo -rm /tmp/add-google-cloud-ops-agent-repo.sh +# The current version of google-cloud-ops-agent is impacted by a CVE: https://access.redhat.com/security/cve/CVE-2024-41110 +# It will be disable for the meantime +# +# # Install Google Ops Agent +# curl -sSo /tmp/add-google-cloud-ops-agent-repo.sh https://dl.google.com/cloudagents/add-google-cloud-ops-agent-repo.sh +# bash /tmp/add-google-cloud-ops-agent-repo.sh --also-install --remove-repo +# rm /tmp/add-google-cloud-ops-agent-repo.sh # rpm-state is needed to remove microcode_ctl mkdir /var/lib/rpm-state