From c7c8400412d91e9615c29c648c08a7ff0aeee2bf Mon Sep 17 00:00:00 2001 From: cali_nerd Date: Tue, 7 Apr 2026 09:10:48 -0700 Subject: [PATCH 1/2] Refactor BanyanOps repository installation steps Updated the installation process for BanyanOps repository to use keyrings and improved security. JIRA - https://sonicwall.atlassian.net/browse/BC-18942 --- cloudformation/netagent2/banyan-access-tier-v2-ubuntu.json | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/cloudformation/netagent2/banyan-access-tier-v2-ubuntu.json b/cloudformation/netagent2/banyan-access-tier-v2-ubuntu.json index b9cceef..07eb854 100644 --- a/cloudformation/netagent2/banyan-access-tier-v2-ubuntu.json +++ b/cloudformation/netagent2/banyan-access-tier-v2-ubuntu.json @@ -270,8 +270,10 @@ "if [[ -n \"${DD_API_KEY}\" ]]; then\n", "DD_SITE=\"datadoghq.com\" bash -c \"$(curl -L https://s3.amazonaws.com/dd-agent/scripts/install_script_agent7.sh)\"\n", "fi\n", - "curl https://www.banyanops.com/onramp/deb-repo/banyan.key | apt-key add -\n", - "apt-add-repository \"deb https://www.banyanops.com/onramp/deb-repo xenial main\"\n", + "install -m 0755 -d /etc/apt/keyrings\n", + "sudo curl -fsSL https://www.banyanops.com/onramp/deb-repo/banyan.key | sudo gpg --dearmor -o /etc/apt/keyrings/banyan.gpg\n", + "sudo chmod a+r /etc/apt/keyrings/banyan.gpg\n", + "echo \"deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/banyan.gpg] https://www.banyanops.com/onramp/deb-repo xenial main\" | sudo tee /etc/apt/sources.list.d/banyan.list > /dev/null\n", "apt install -y ", {"Ref": "BanyanPackage"}, "\n", "cd /opt/banyan-packages\n", "ACCESS_TIER_NAME=", {"Ref": "AWS::StackName"}, " ", From f7b7e75f6c30d4cc7e5f92099a38ce2ecbd2466f Mon Sep 17 00:00:00 2001 From: cali_nerd Date: Tue, 7 Apr 2026 09:26:35 -0700 Subject: [PATCH 2/2] Add apt update command to installation script --- cloudformation/netagent2/banyan-access-tier-v2-ubuntu.json | 1 + 1 file changed, 1 insertion(+) diff --git a/cloudformation/netagent2/banyan-access-tier-v2-ubuntu.json b/cloudformation/netagent2/banyan-access-tier-v2-ubuntu.json index 07eb854..348380b 100644 --- a/cloudformation/netagent2/banyan-access-tier-v2-ubuntu.json +++ b/cloudformation/netagent2/banyan-access-tier-v2-ubuntu.json @@ -274,6 +274,7 @@ "sudo curl -fsSL https://www.banyanops.com/onramp/deb-repo/banyan.key | sudo gpg --dearmor -o /etc/apt/keyrings/banyan.gpg\n", "sudo chmod a+r /etc/apt/keyrings/banyan.gpg\n", "echo \"deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/banyan.gpg] https://www.banyanops.com/onramp/deb-repo xenial main\" | sudo tee /etc/apt/sources.list.d/banyan.list > /dev/null\n", + "sudo apt update\n", "apt install -y ", {"Ref": "BanyanPackage"}, "\n", "cd /opt/banyan-packages\n", "ACCESS_TIER_NAME=", {"Ref": "AWS::StackName"}, " ",