tpotce/docker/ews/Dockerfile

FROM alpine:3.15
#
# Include dist
COPY dist/ /root/dist/
#
# Install packages
RUN apk -U --no-cache add \
            build-base \
            git \
            libffi-dev \
            libssl1.1 \
            openssl-dev \
	    python3 \
            python3-dev \
            py3-cffi \
	    py3-cryptography \
            py3-ipaddress \
	    py3-lxml \
	    py3-mysqlclient \
	    py3-openssl \
            py3-requests \
	    py3-pip \
            py3-setuptools \
            py3-wheel && \
    pip3 install --upgrade pip && \
    pip3 install --no-cache-dir configparser hpfeeds3 influxdb influxdb-client xmljson && \
#
# Setup ewsposter
    git clone https://github.com/telekom-security/ewsposter /opt/ewsposter && \
    cd /opt/ewsposter && \
#    git checkout 11ab4c8a0a1b63d4bca8c52c07f2eab520d0b257 && \
    git checkout 17c08f3ae500d838c1528c9700e4430d5f6ad214 && \
    mkdir -p /opt/ewsposter/spool /opt/ewsposter/log && \
#
# Setup user and groups
    addgroup -g 2000 ews && \
    adduser -S -H -u 2000 -D -g 2000 ews && \
    chown -R ews:ews /opt/ewsposter && \
#
# Supply configs
    mv /root/dist/ews.cfg /opt/ewsposter/ && \
#    mv /root/dist/*.pem /opt/ewsposter/ && \
#
# Clean up
    apk del build-base \
            git \
            openssl-dev \
            python3-dev \
            py-setuptools && \
    rm -rf /root/* /var/cache/apk/* /opt/ewsposter/.git
#
# Run ewsposter
STOPSIGNAL SIGINT
USER ews:ews
CMD sleep 10 && exec /usr/bin/python3 -u /opt/ewsposter/ews.py -l $(shuf -i 10-60 -n 1)
bump to Alpine 3.15 2022-01-19 00:46:04 +00:00			`FROM alpine:3.15`
bump ewsposter to latest master 2019-09-21 12:09:17 +00:00			`#`
include docker repos ... skip emobility since it is a dev repo 2017-10-13 18:58:14 +00:00			`# Include dist`
image tweaking 2022-03-08 23:36:03 +00:00			`COPY dist/ /root/dist/`
bump ewsposter to latest master 2019-09-21 12:09:17 +00:00			`#`
include docker repos ... skip emobility since it is a dev repo 2017-10-13 18:58:14 +00:00			`# Install packages`
rebuild ewsposter for alpine 3.13 2021-02-16 13:15:26 +00:00			`RUN apk -U --no-cache add \`
finetuning, tweaking 2018-05-16 16:37:10 +00:00			`build-base \`
prep for 18.04 2018-03-25 18:35:32 +00:00			`git \`
fix ewsposter deps 2018-11-21 10:29:03 +00:00			`libffi-dev \`
Update Dockerfile 2019-02-06 16:11:08 +00:00			`libssl1.1 \`
prep for 18.04 2018-03-25 18:35:32 +00:00			`openssl-dev \`
bump ewsposter to latest master 2019-09-21 12:09:17 +00:00			`python3 \`
			`python3-dev \`
			`py3-cffi \`
rebuild ewsposter for alpine 3.13 2021-02-16 13:15:26 +00:00			`py3-cryptography \`
bump ewsposter to latest master 2019-09-21 12:09:17 +00:00			`py3-ipaddress \`
			`py3-lxml \`
			`py3-mysqlclient \`
heralding, honeypots reduce build time, tweaking 2022-03-12 17:59:31 +00:00			`py3-openssl \`
bump ewsposter to latest master 2019-09-21 12:09:17 +00:00			`py3-requests \`
cleanup and prepare for docker image rebuilds 2020-06-26 14:34:05 +00:00			`py3-pip \`
tweaking, reduce build times 2022-03-13 10:19:08 +00:00			`py3-setuptools \`
			`py3-wheel && \`
image tweaking 2022-03-08 23:36:03 +00:00			`pip3 install --upgrade pip && \`
heralding, honeypots reduce build time, tweaking 2022-03-12 17:59:31 +00:00			`pip3 install --no-cache-dir configparser hpfeeds3 influxdb influxdb-client xmljson && \`
bump ewsposter to latest master 2019-09-21 12:09:17 +00:00			`#`
include docker repos ... skip emobility since it is a dev repo 2017-10-13 18:58:14 +00:00			`# Setup ewsposter`
prep for ewsposter 1.11 2020-12-02 23:21:23 +00:00			`git clone https://github.com/telekom-security/ewsposter /opt/ewsposter && \`
continue pin / prep images ghcr 2020-09-04 12:37:28 +00:00			`cd /opt/ewsposter && \`
bump ewsposter to latest master 2021-11-18 13:48:02 +00:00			`# git checkout 11ab4c8a0a1b63d4bca8c52c07f2eab520d0b257 && \`
			`git checkout 17c08f3ae500d838c1528c9700e4430d5f6ad214 && \`
include docker repos ... skip emobility since it is a dev repo 2017-10-13 18:58:14 +00:00			`mkdir -p /opt/ewsposter/spool /opt/ewsposter/log && \`
bump ewsposter to latest master 2019-09-21 12:09:17 +00:00			`#`
include docker repos ... skip emobility since it is a dev repo 2017-10-13 18:58:14 +00:00			`# Setup user and groups`
			`addgroup -g 2000 ews && \`
			`adduser -S -H -u 2000 -D -g 2000 ews && \`
tweaking, hardening 2018-03-31 15:18:28 +00:00			`chown -R ews:ews /opt/ewsposter && \`
bump ewsposter to latest master 2019-09-21 12:09:17 +00:00			`#`
include docker repos ... skip emobility since it is a dev repo 2017-10-13 18:58:14 +00:00			`# Supply configs`
			`mv /root/dist/ews.cfg /opt/ewsposter/ && \`
tweaking ELK 7.6.0 is not ready for production, however it works if APM is enabled (disabled in config, so image wont build as precaution) Remove SISSDEN from ewsposter, suricata Bump suricata to 5.0.1 Alpine now support suricata incl. enabled JA3 support, move back to Alpine install 2020-02-14 15:28:06 +00:00			`# mv /root/dist/*.pem /opt/ewsposter/ && \`
bump ewsposter to latest master 2019-09-21 12:09:17 +00:00			`#`
include docker repos ... skip emobility since it is a dev repo 2017-10-13 18:58:14 +00:00			`# Clean up`
prep for 18.04 2018-03-25 18:35:32 +00:00			`apk del build-base \`
			`git \`
			`openssl-dev \`
bump ewsposter to latest master 2019-09-21 12:09:17 +00:00			`python3-dev \`
prep for 18.04 2018-03-25 18:35:32 +00:00			`py-setuptools && \`
image tweaking 2022-03-08 23:36:03 +00:00			`rm -rf /root/* /var/cache/apk/* /opt/ewsposter/.git`
bump ewsposter to latest master 2019-09-21 12:09:17 +00:00			`#`
include docker repos ... skip emobility since it is a dev repo 2017-10-13 18:58:14 +00:00			`# Run ewsposter`
tweaking 2018-09-11 12:19:26 +00:00			`STOPSIGNAL SIGINT`
tweaking, hardening 2018-03-31 15:18:28 +00:00			`USER ews:ews`
update delivery window 2020-03-09 10:43:52 +00:00			`CMD sleep 10 && exec /usr/bin/python3 -u /opt/ewsposter/ews.py -l $(shuf -i 10-60 -n 1)`