Skip to content

hawksj/customisable-opencanary-installer

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 

Repository files navigation

OpenCanary Installation and Configuration Wrapper

OpenCanary is a configurable open-source honeypot solution provided by Thinkst. This wrapper script was originally created by simonxciv and modified by hawksj to expedite deployment of multiple devices in an enterprise environment. This script helps install and configure your OpenCanary appliance running Raspberry OS, including:

  • Setting a static IP address if internet connection fails
  • Setting the device's hostname
  • Updating the OS
  • Configuring unattended upgrades for OS and application patches (removed to avoid bugs caused by bad patches, please uncomment to enable)
  • Installing dependencies (including screen)
  • Installing and configuring the canary
  • Creating a systemd unit file to launch OpenCanary as a service

Pre-requisites

  • Raspberry OS. This script may work in other Ubuntu or Debian operating systems, but some paths are specific to Raspberry OS and may not function correctly on a different OS.
  • Internet connection

Installation Instructions

For more detailed installation instructions for Simon's OpenCanary installer that forms the basis for this project, see his website.

  1. Copy or download the 'opencanary-installer.sh' to your home directory
  2. Modify the permissions of the file to allow execution using sudo chmod +x opencanary-installer.sh
  3. Run the installer using sudo ./opencanary-installer.sh
  4. If a static IP is configured within the installation script, the device will reboot and the script will need to be run again. See step 3.
  5. After the script automatically triggers a reboot, your device should be operating as a Canary

Troubleshooting

  1. Confirm the Canary service is running by entering systemctl status opencanary. You should see a returned value that includes Active: active (running)
  2. Check OpenCanary screen is running with sudo screen -r
  3. Ensure your configuration file at ~/opencanary.conf is valid
  4. Look for error messages at /var/tmp/opencanary.log

Limitations

Not all modules can currently be configured using this script, however I have tried to include the most common ones. Additional modules will currently need to be configured directly in the OpenCanary configuration file (found in home direction or under /root/.opencanary.conf

About

No description, website, or topics provided.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages