Attention : support for WAPT 1.8.2 ended on June the 30th 2022.

There are known vulnerabilities in WAPT dependencies in WAPT 1.8.2 branch. Please upgrade to the latest supported version. CVE listing (non exhaustive) :
  • * python engine : python 2.7 (CVE-2020-10735, CVE-2015-20107, CVE-2022-0391, CVE-2021-23336, CVE-2021-3177, CVE-2020-27619, CVE-2020-26116, CVE-2019-20907, CVE-2020-8492, etc.)
  • * cryptography : openssl : CVE-2022-2068, CVE-2022-1292, CVE-2022-0778, CVE-2021-4160, CVE-2021-3712, CVE-2021-23841, CVE-2021-23840, CVE-2021-23839, CVE-2020-1971, CVE-2020-1968, CVE-2019-1551
  • * python dependencies : cryptography (CVE-2020-36242, CVE-2020-25659), eventlet (CVE-2021-21419), jinja2 (CVE-2020-28493), psutil (CVE-2019-18874), waitress (CVE-2022-31015), lxml (CVE-2021-4381, CVE-2021-28957, CVE-2020-27783, CVE-2018-19787), ujson (CVE-2022-31117, CVE-2022-31116, CVE-2021-45958), python-ldap (CVE-2021-46823)

Using special Command Lines with WAPT

wapt-get register

The wapt-get register <description> command reports the computer hardware and software inventory to the WAPT inventory server.

Hint

You can pass a description as an argument to the register, that description will be displayed in the WAPT console in the column description.

You may benefit from WAPT to improve your IT management by affecting a username or a computer serial as descriptions for your hosts.

The command wapt-get register "John Doe PC returns nothing;

wapt-get download

The wapt-get download <package name> command downloads the WAPT package to the local cache located at C:\Program Files\wapt\cache.

The command wapt-get download tis-7zip returns:

Downloading packages tis-7zip (=16.4-8)

Downloaded packages:
  C:\Program Files (x86)\wapt\cache\tis-7zip_16.4-8_all_all.wapt

wapt-get download-upgrade

The wapt-get download-upgrade command downloads packages to be upgraded to the local WAPT cache C:\Program Files (x86)\wapt\cache.

The command wapt-get download-upgrade returns:

=== downloaded packages ===
C:\Program Files (x86)\wapt\cache\tis-firebird_2.5.5.26952-1_all.wapt

wapt-get show

The wapt-get show <package name> command displays informations stored in the Packages index file.

If several versions of a package are available on the repository, every version of the package will be displayed.

The command wapt-get show tis-firebird returns:

Display package control data for tis-firebird

package           : tis-firebird
version           : 2.5.5.26952-1
architecture      : all
section           : base
priority          : optional
maintainer        : Hubert TOUVET
description       : Firebird database SQL superserver with admin tools (Firebird Project)
filename          : tis-firebird_2.5.5.26952-1_all.wapt
size              : 7012970
repo_url          : https://srvwapt.mydomain.lan/wapt
md5sum            : 6f6d70630674f5d58a5259b1e6752221
repo              : global

wapt-get list

The wapt-get list command lists WAPT packages that are installed on the computer.

The command wapt-get list returns:

package

version

install status

install_date

description

tis-7zip

16.4-8

OK

2016-12-01T17:43

7-zip compression and archiving software for x86 and x64

tis-brackets

1.8-1

OK

2016-12-01T17:44

Brackets is a lightweight

tis-ccleaner

5.23.5808-0

OK

2016-12-01T18:55

the right choice utility to quickly clean up, repair and optimize Windows

tis-rsat-win7x64

2

OK

2016-12-02T10:46

package for MS RSAT Remote server admin windows6.1-kb958830-x64 pour Win7 SP1

tis-rsat-x64

1

OK

2016-12-02T10:51

package for MS RSAT Remote server admin windows6.1-kb958830-x64 pour Win7 SP1

tis-dotnetfx4.6

4.6.2-1

OK

2016-12-09T16:05

dot net FX 4.6.2 Framework CLient. Replaces 4/4.5/4.5.1/4.5.2/4.6/4.6.1

wapt-get upgradedb

The wapt-get upgradedb command upgrades the local WAPT database schema if necessary.

The command wapt-get upgradedb returns:

WARNING upgrade db aborted: current structure version 20161109 is newer or equal to requested structure version 20161109
No database upgrade required, current 20161109, required 20161109

wapt-get setup-tasks - wapt-get enable-tasks - wapt-get disable-tasks

The wapt-get setup-tasks command adds update and upgrade scheduled tasks to local host.

Hint

This function is useful when it is desirable not to use the WAPT service, otherwise waptservice will take care of it.

To make it work, the following arguments must be configured in wapt-get.ini:

  • waptupdate_task_maxruntime;

  • waptupgrade_task_maxruntime;

  • waptupdate_task_period;

  • waptupgrade_task_period;

Then:

  • the wapt-get enable-tasks command will enable scheduled tasks;

  • the wapt-get disable-tasks command will disable scheduled tasks;

wapt-get add-upgrade-shutdown - wapt-get remove-upgrade-shutdown

  • the wapt-get add-upgrade-shutdown command adds a waptexit local security policy object, enabling the execution of waptexit at system shutdown;

  • the wapt-get remove-upgrade-shutdown command removes the waptexit local security policy object, disabling the execution of waptexit during system shutdown;

wapt-get inventory

The wapt-get inventory command displays all local inventory information in JSON format.

The command wapt-get inventory returns:

{
  "wapt": {
    "setuphelpers-version": "1.3.8",
    "waptserver": {
      "dnsdomain": "mydomain.lan",
      "proxies": {
        "http": null,
        "https": null
      },
      "server_url": "https://srvwapt.mydomain.lan"
},
...

wapt-get update-status

The command wapt-get update-status resends local status to the WAPT inventory server.

Note

If a hardware component has changed on the computer, update-status would not report that information back to the WAPT inventory server.

To do so, the command to be used is inventory.

The command wapt-get update-status returns:

Inventory correctly sent to server https://srvwapt.mydomain.lan.

wapt-get setlocalpassword

The wapt-get setlocalpassword command allows to define a local password for WAPT package installations.

The command wapt-get setlocalpassword returns:

Local password:
Confirm password:
Local auth password set successfully

wapt-get reset-uuid

The wapt-get reset-uuid command retrieves the host UUID from BIOS and resends it to the WAPT inventory server.

The command wapt-get reset-uuid returns:

New UUID: B0F23D44-86CB-CEFE-A8D6-FB8E3343FE7F

wapt-get generate-uuid

The wapt-get generate-uuid command creates a new host UUID and resends it to the WAPT inventory server.

Hint

Some batches of computers have their BIOS with identical UUID. It is a BIOS manufacturer setting problem because no two UUID should be the same.

The command generate-uuid exist to solve that problem.

The command wapt-get generate-uuid returns:

New UUID: 6640f174-de90-4b00-86f7-d7834ceb45bc

wapt-get get-server-certificate

The wapt-get get-server-certificate command downloads the SSL certificate from the WAPT Server to use HTTPS to communicate with the WAPT Server.

The downloaded certificate is stored in C:\Program Files(x86)\waptssl\server.

The command wapt-get get-server-certificate returns:

Server certificate written to C:\Program Files (x86)\wapt\ssl\server\srvwapt.mydomain.lan.crt

wapt-get enable-check-certificate

The wapt-get enable-check-certificate command downloads the SSL certificate from the WAPT Server and enables secured communication with the server.

The command wapt-get enable-check-certificate returns:

Server certificate written to C:\Program Files (x86)\wapt\ssl\server\srvwapt.mydomain.lan.crt
wapt config file updated

wapt-get session-setup

The wapt-get session-setup command launches user level customizations of installed WAPT packages.

Hint

The session-setup instruction sets are defined in WAPT package’s setup.py file.

Every instruction set is stored in a SQLite local database.

The command session-setup is launched at every startup, the user environment customization script is executed only once per user per package version.

Note

The argument ALL will launch session-setup for all installed WAPT packages.

The command wapt-get session-setup ALL returns:

Configuring tis-7zip ... No session-setup. Done
Configuring tis-ccleaner ... Already installed. Done
Configuring tis-vlc ... No session-setup. Done
Configuring mdl-tightvnc ... No session-setup. Done
Configuring tis-brackets ... No session-setup. Done
Configuring mdl-firefox-esr ... No session-setup. Done
Configuring tis-rsat-x64 ... No session-setup. Done
Configuring tis-dotnetfx4.6 ... No session-setup. Done
Configuring tis-rsat-win7x64 ... No session-setup. Done
Configuring tis-mumble ... No session-setup. Done
Configuring tis-paint.net ... No session-setup. Done
Configuring wsagauvrit.domain.lan ... No session-setup. Done