Cast

Cast is an installer tool for any Cast distro like SIFT or REMNUX.

Usage

cast install <owner/repo|alias>

Note: there are only two aliases currently supported, sift and remnux which are resolved to teamdfir/sift-saltstack and remnux/salt-states respectively.

What is a Cast Distro?

Simply put a cast distro is one published by the cast binary, however it's a bit more complicated than that.

The underlying technology used for installing the distro is Saltstack.

There are only two (2) version 1 cast distros out there and they are SIFT and REMnux and what makes them a v1 is the way the release files are generated and signed and how the saltstack files are organized in the repository.

A version 2 cast distro is one like example-distro-saltstack where the salt states start in the root of the project and the release is generated by the cast-devtools. The reason for moving the states to the root is for git submodule usage for distros that extend another distro.

Configuration

Cast is configured via the .cast.yml file in the root of the cast distro project. This configuration is required and contains important information like what GitHub Repository should releases be published to, what the manifest file contents should be.

Part of the configuration is the manifest definition that ultimately gets uploaded as a release asset. The manifest dictates things like base, modes, and supported operating systems.

• base - this is the name of the base directory that the files should be extracted into
• modes - this is a way to define modes that the user can specify along with the default mode, if none is specified
• supported_os - this is a way to define what operating systems are supported

For Developers

If your distro is called alpha then your base should be alpha, all salt states will be homed into a directory called alpha

Aliases

Cast has the concept of aliases and it's possible to add additional distros to this alias list.

However the aliases serve a more specific purpose for supporing backwards compatibility for older versions of SIFT and REMnux that were not released as a cast distro originally.

Developers

Developing a distro for cast is very simple, this documentation will walk you through cast initialization.

Saltstack

To make embedding a distro easier in another distro both for the community and for SANS builds purposes, the salt states have now been moved to the root of the project. This allows for a repo to be submoduled into another repo and the manifest.yml dictates to the installer how things should be extracted and installed.

Futhermore the devtools contains commands to help developers test their states in the correct structure format.

Release

Requirements

• Tag must be created outside of the tool and pushed to the remote
• Cosign private key and public key must be present in the repo

Creating a release has never been more simply. However one thing is required, that you tag and push the tag to GitHub prior to running the command.

git tag v1.0.0 && git push origin --tags

Then you simply run the release command from your local branch.

cast-devtools release