Migrate the generate_ova.sh script to Python for local OVA compilation

[c-bordon]

Description

We need to investigate migrating the generate_ova.sh script code to Python to use all the modules created during Level 1 of the DevOps Review.

Tasks

• Investigate the changes needed to migrate the bash script to Python.
• Generate the necessary migration plan.

Related

• OVA - Deployment #182

[Enaraque]

Update report 07/05/2025

I’ve been reviewing what needs to be developed, as a large part of the script is focused on setting up wazuh-install.sh, which will not be used in main. Based on what actually needs to be implemented, I created this issue related to the use of the box for the local build.

[Enaraque]

Update report 08/05/2025

I have been researching how to implement the logic in the simplest and cleanest way possible. For now, the plan is to have the script bring up a machine with the custom Vagrantfile. In this Vagrantfile, the virtual machines repo will be included using rsync, and Hatch will be installed on the machine. Once Hatch is installed, the run command from the Hatch ova-post-configurer environment will be used to begin the installation of everything related to the OVA (except the pre-configurer, as it is responsible for generating the box, which we don't need).

For now, I am running some tests to see if this idea can be implemented and if there are no issues during its development.

[Enaraque]

Update report 09/05/2025

The creation and configuration of the OVA has been completed. What's left is exporting the OVA and testing that everything works correctly.

[Enaraque]

Update report 12/05/2025

I have finished the development concerning the export of the OVA. I still need to do the necessary tests to know if there is anything to be added to the local construction process.

[Enaraque]

Update report 13/05/2025

Testing has been carried out to ensure everything is working as expected. An issue was detected with the generation of the server certificates, and a corresponding issue has been opened (#291)

Once the problem with the server certificates was fixed, it was found that the indexer was not starting correctly. It is currently being investigated whether the issue is related to the OVA generation or the Wazuh indexer package itself.