Arch Linux User Repository

@Cyrusmg: URL changed, package version updated. Thanks.

The source file is suspicious as it's just a S3 bucket with unknown owner.

Vanta instructions point to: https://app.vanta.com/osquery/download/linux which then redirects to https://agent-downloads.vanta.com/targets/versions/2.14.0/vanta-amd64.deb and as that's a https + a vanta domain, it's more secure.

Would it be possible to change the URL from a bucket to this one?

(Also v2.14.0 is now available)

@bradwood: All done, check the most recent release.

Awesome that you have picked this up @lisu_ml -- many thanks for doing so.

I'd be grateful if you can also note my comment below about VANTA_REGION. We are an EU-hosted instance so we need this to point to app.eu.vanta.com as opposed to the (default?) US instance app.vanta.com.

Thanks again.

I'm working on the new release.

From what I understand, vanta-agent can only report what it can access from the OS itself. On Arch/Manjaro, that basically means it detects disk encryption — and not much more.

For me, the key point is that vanta-agent is installed, running, and able to report to the Vanta portal. Even if it shows “OS not supported” and only confirms that the client’s disk is encrypted, that’s still valuable. Vanta detects the agent, recognises the host, and then prompts for manual evidence for things like a screen locker or antivirus.

So, in my opinion, having vanta-agent report to the Vanta portal — even with limited support — is still better than having no reporting at all.

While this can be installed with the patch for 2.13, it did not work for me-- not because of a packaging problem, but because Vanta reports "OS not supported".

The functionality includes reviewing what package are installed and Arch has a different package format than Ubuntu. Also, it's probably checking only for the way that Ubuntu does screen locking on Gnome, not the dozens of different screen lockers that might be on Arch.

In summary, I'm not sure if it can be made to usefully work on Arch.

Sorry about missing guys, as my job changed I didn't find time to keep this package, and I never been able to make vanta to look my PC correct. I hope you guys take good luck with that, I did my best reverse engineering that to make a little usable:)

2.13 is out:

diff --git a/PKGBUILD b/PKGBUILD
index 1d22ae9..b62ecf0 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -8,7 +8,7 @@ _svcname=vanta-agent

 pkgname=vanta-agent
 # https://app.vanta.com/downloads
-pkgver=2.10.0
+pkgver=2.13.0
 pkgrel=1
 pkgdesc="Vanta agent"
 arch=('x86_64')
@@ -62,5 +62,5 @@ package() {
     fi
 }

-sha256sums=('d749eeb61526c4cd53455fbfed99418f274b272a54543f905dba613f851f3829'
-             '2d650c20f8cabb78d3c629c38d8eed3b15f0e3f9f0b96b68f67fbe5831b41307')
+sha256sums=('aced177e5d4c0d47490722ddde41aa00fe6ee8e8316da3b9309a29ae05b57ad7'
+            '2d650c20f8cabb78d3c629c38d8eed3b15f0e3f9f0b96b68f67fbe5831b41307')

Version 2.12 ?

iff --git a/PKGBUILD b/PKGBUILD
index 1d22ae9..8867907 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -8,7 +8,7 @@ _svcname=vanta-agent

 pkgname=vanta-agent
 # https://app.vanta.com/downloads
-pkgver=2.10.0
+pkgver=2.12.0
 pkgrel=1
 pkgdesc="Vanta agent"
 arch=('x86_64')
@@ -62,5 +62,5 @@ package() {
     fi
 }

-sha256sums=('d749eeb61526c4cd53455fbfed99418f274b272a54543f905dba613f851f3829'
-             '2d650c20f8cabb78d3c629c38d8eed3b15f0e3f9f0b96b68f67fbe5831b41307')
+sha256sums=('17312a1c1195bed192216c6240a322581bb569c0bd3a88de42b587203362d403'
+            '2d650c20f8cabb78d3c629c38d8eed3b15f0e3f9f0b96b68f67fbe5831b41307')

Please upgrade to 2.11.0. Also, the official install instructions now also talk about a VANTA_REGION variable -- this is important for EU-domiciled Vanta instances.

Please can you update to accommodate this also.

Many thanks