# Checklist for submitter If some of the following don't apply, delete the relevant line. <!-- Note that API documentation changes are now addressed by the product design team. --> - [ ] Changes file added for user-visible changes in `changes/` or `orbit/changes/`. See [Changes files](https://fleetdm.com/docs/contributing/committing-changes#changes-files) for more information. - [ ] Documented any permissions changes (docs/Using Fleet/manage-access.md) - [ ] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements) - [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for new osquery data ingestion features. - [ ] Added/updated tests - [ ] Manual QA for all new/changed functionality - For Orbit and Fleet Desktop changes: - [ ] Manual QA must be performed in the three main OSs, macOS, Windows and Linux. - [ ] Auto-update manual QA, from released version of component to new version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2 KiB
Scripts
Available in Fleet Premium
In Fleet you can execute a custom script to remediate an issue on your macOS, Windows, and Linux hosts.
Shell scripts are supported on macOS and Linux. All scripts will run in the host's (root) default shell (/bin/sh). Other interpreters are not supported yet.
PowerShell scripts are supported on Windows. Other types of scripts are not supported yet.
Script execution is disabled by default. Continue reading to learn how to enable scripts.
Enable scripts
If you use Fleet's macOS MDM features, scripts are automatically enabled for macOS hosts that have MDM turned on. You're set!
If you don't use MDM features, to enable scripts, we'll deploy a fleetd agent with scripts enabled:
-
Generate a new fleetd agent for macOS, Windows, or Linux using the
fleetctl packagecommand with the--enable-scriptsflag. -
Deploy fleetd to your hosts. If your hosts already have fleetd installed, you can deploy the new fleetd on-top of the old installation.
Learn more about generating a fleetd agent and deploying it here.
Execute a script
You can execute a script in the Fleet UI, with Fleet API, or with the fleetctl command-line interface (CLI).
Fleet UI:
-
In Fleet, head to the Controls > Scripts tab and upload your script.
-
Head to the Hosts page and select the host you want to run the script on.
-
On your target host's host details page, select the Scripts tab and select Actions to run the script.
Currently, you can only run scripts on macOS and Windows hosts in the Fleet UI. To run a script on a Linux host, use the Fleet API or fleetctl CLI.
Fleet API: API documentation is here
fleetctl CLI:
fleetctl run-script --script-path=/path/to/script --host=hostname