Suggestion: Option to Disable Anonymous Telemetry and Checking Update

[Masaya-A]

I noticed that Passenger (in so-playbook), Grafana and InfluxDB send anonymous telemetry and try checking their update.
I wanted to stop them and made some changes to config files for my rigs showing below.
These configs should be selectable during installation of Security Onion.

Passenger (in so-playbook)

/passenger-nginx-config-template.erb in a so-playbook container.
Add "passenger_disable_security_update_check on" and "passenger_disable_anonymous_telemetry on" in an http directive.
Following commands are just example:

sudo mkdir /opt/so/conf/playbook
sudo docker cp so-playbook:/passenger-nginx-config-template.erb /opt/so/conf/playbook/passenger-nginx-config-template.erb
sudo sed -i /opt/so/conf/playbook/passenger-nginx-config-template.erb -e "/server {/i \    passenger_disable_security_update_check on;\n    passenger_disable_anonymous_telemetry on;\n"
sudo sed -i /opt/so/saltstack/default/salt/playbook/init.sls -e "/- binds/a \      - \/opt\/so\/conf\/playbook\/passenger-nginx-config-template.erb:\/passenger-nginx-config-template.erb:ro"
sudo so-playbook-restart

Reference: https://www.phusionpassenger.com/docs/references/config_reference/nginx/#passenger_disable_anonymous_telemetry

Grafana

/opt/so/saltstack/default/salt/grafana/defaults.yaml
Add following lines:

    analytics:
      reporting_enabled: false
      check_for_updates: false

Reference: https://grafana.com/docs/grafana/latest/administration/configuration/#analytics

InfluxDB

/opt/so/saltstack/default/salt/influxdb/etc/influxdb.conf
Uncomment the line and change to true:
reporting-disabled = true
Reference: https://docs.influxdata.com/influxdb/v2.0/reference/config-options/#reporting-disabled

EDIT:
In addition, if telemetry is enabled and rigs are under proxy environment, HTTPS_PROXY environment variable is needed for those containers.

EDIT2:
Changed the way to disable telemetry of Passenger.

[Masaya-A]

Sorry, it seems Passenger config won't work.

[tanjiro@kimetsu ~]$ sudo docker exec -it so-playbook /bin/bash
root@playbook:/usr/src/redmine# passenger --version
Phusion Passenger 6.0.7
root@playbook:/usr/src/redmine# echo $PASSENGER_DISABLE_SECURITY_UPDATE_CHECK
true
root@playbook:/usr/src/redmine# echo $DISABLE_ANONYMOUS_TELEMETRY
true
root@playbook:/usr/src/redmine#

Maybe we need to add the variable into passenger-nginx-config-template.erb.
https://www.phusionpassenger.com/docs/references/config_reference/nginx/#passenger_disable_anonymous_telemetry

[Masaya-A]

I have edited the first post for Passenger.