Cast is a command line utility that abstracts away SaltStack for compatible configurations.
It is the sucessor to the SIFT CLI but made in such a way that it is no longer specific to SIFT.
The goal is to deliver a simple command line utility to install custom distributions that are build with saltstack.
Visit the releases page to download the appropriate file for your architecture. There are .deb files for installation with dpkg -i, there are just vanilla binaries that you can download and put into /usr/local/bin if you'd like to as well.
cast install <owner/repo|alias>cast install teamdfir/sift-saltstackCast comes with two built in aliases for existing support distributions, additional aliases will not be added, it's a short term solution until the older install methods have fallen off.
Note: there are only two aliases currently supported, sift and remnux which are resolved to teamdfir/sift-saltstack and remnux/salt-states respectively.
Simply put a cast distro is one published by the cast binary. The underlying technology used for installing the distro is Saltstack.
To create a Cast distribution you need a .cast.yml file and need your repository to be a valid SaltStack configuration that would work with a state.apply command.
There are only two (2) version 1 cast distros out there and they are SIFT and REMnux and what makes them a v1 is the way the release files are generated and signed and how the saltstack files are organized in the repository.
A version 2 cast distro is one like cast-example-distro where the salt states start in the root of the project and the release is generated by the cast release. The reason for moving the states to the root is for git submodule usage for distros that extend another distro.
Cast is configured via the .cast.yml file in the root of the cast distro project. This configuration is required and contains important information like what GitHub Repository should releases be published to, what the manifest file contents should be.
Part of the configuration is the manifest definition that ultimately gets uploaded as a release asset. The manifest dictates things like base, modes, and supported operating systems.
name- the name of the distrobase- (optional) this is the name of the base directory where the saltstack files exist in the project rootmodes- this is a way to define modes that the user can specify along with the default mode, if none is specifiedsupported_os- this is a way to define what operating systems are supported
If your distro is called alpha then your name should be alpha, all base saltstack states should be based out of the root of the project, however if all the states have to be in a subdirectory, then the base_dir must be set to the name of that subdirectory.
Aliases are only for SIFT and REMnux and not intended for long term use. The aliases serve a more specific purpose for supporing backwards compatibility for older versions of SIFT and REMnux that were not released as a cast distro originally.
Developing a distro for cast is very simple, this documentation will walk you through cast initialization.
To make embedding a distro easier in another distro both for the community and for SANS builds purposes, the salt states have now been moved to the root of the project. This allows for a repo to be submoduled into another repo and the manifest.yml dictates to the installer how things should be extracted and installed.
Requirements
- Tag must be created outside the tool and pushed to the remote
- Cosign private key and public key must be present in the repo
Creating a release has never been more simply. However, one thing is required, that you tag and push the tag to GitHub prior to running the command.
git tag v1.0.0 && git push origin --tagsThen you simply run the release command from your local branch.
cast release