kolide-silverblue

This script rebuilds a Kolide RPM for deployment on Fedora Silverblue.

Requirements

• Go v1.21 or higher to rebuild the launcher
• podman or docker
• GNU patch

Usage

1. Talk to the @Kolide Slack bot to
2. "Enroll a Device" via the @Kolide Slack bot, selecting the RPM Linux (.rpm) installation package.
3. Download the RPM file that @Kolide sends via Slack
4. Run ./rebuild.sh <path to downloaded RPM>
5. Get coffee while the script runs

RPM installation instructions

To install the resulting RPM on Fedora SilverBlue, run:

rpm-ostree install </path/to/kolide-launcher.rpm>
sudo rpm-ostree apply-live
systemctl enable --now launcher.kolide-k2

To uninstall the custom package, run:

sudo rpm-ostree uninstall launcher-kolide-k2

How it works

This script automates the following steps:

1. Checks out https://github.com/kolide/launcher
2. Patches launcher with:

• kolide/launcher#1721
• kolide/launcher#1722

3. Extracts configuration details from the RPM you provided
4. Builds a new RPM

Caveats

Autoupdates are not enabled, as this may result in Kolide sending you an incompatible launcher in the future. Hopefully Kolide will natively support Fedora SilverBlue soon so that this hack is unnecessary in the near future.

Be sure to mention to Kolide's support team that you would like native support for immutable Linux distrubitons such as Fedora SilverBlue!