mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-05-01 04:38:51 +00:00
clean up
This commit is contained in:
parent
d93d0662ee
commit
20711cb633
2 changed files with 0 additions and 53 deletions
|
@ -1,33 +0,0 @@
|
||||||
FROM alpine
|
|
||||||
|
|
||||||
# Include dist
|
|
||||||
ADD dist/ /root/dist/
|
|
||||||
|
|
||||||
# Install packages
|
|
||||||
RUN apk -U --no-cache add \
|
|
||||||
ca-certificates \
|
|
||||||
curl \
|
|
||||||
file \
|
|
||||||
libcap \
|
|
||||||
wget && \
|
|
||||||
apk -U add --repository http://dl-cdn.alpinelinux.org/alpine/edge/community \
|
|
||||||
suricata && \
|
|
||||||
|
|
||||||
# Setup user, groups and configs
|
|
||||||
addgroup -g 2000 suri && \
|
|
||||||
adduser -S -H -u 2000 -D -g 2000 suri && \
|
|
||||||
cp /root/dist/suricata.yaml /etc/suricata/suricata.yaml && \
|
|
||||||
cp /root/dist/*.bpf /etc/suricata/ && \
|
|
||||||
|
|
||||||
# Download the latest EmergingThreats ruleset, replace rulebase and enable all rules
|
|
||||||
cp /root/dist/update.sh /usr/bin/ && \
|
|
||||||
chmod 755 /usr/bin/update.sh && \
|
|
||||||
update.sh OPEN && \
|
|
||||||
|
|
||||||
# Clean up
|
|
||||||
rm -rf /root/* && \
|
|
||||||
rm -rf /var/cache/apk/*
|
|
||||||
|
|
||||||
# Start suricata
|
|
||||||
STOPSIGNAL SIGINT
|
|
||||||
CMD SURICATA_CAPTURE_FILTER=$(update.sh $OINKCODE) && exec suricata -v -F $SURICATA_CAPTURE_FILTER -i $(/sbin/ip address | grep '^2: ' | awk '{ print $2 }' | tr -d [:punct:])
|
|
|
@ -1,20 +0,0 @@
|
||||||
version: '2.3'
|
|
||||||
|
|
||||||
services:
|
|
||||||
|
|
||||||
# Suricata service
|
|
||||||
suricata:
|
|
||||||
build: .
|
|
||||||
container_name: suricata
|
|
||||||
restart: always
|
|
||||||
environment:
|
|
||||||
# For ET Pro ruleset replace "OPEN" with your OINKCODE
|
|
||||||
- OINKCODE=OPEN
|
|
||||||
network_mode: "host"
|
|
||||||
cap_add:
|
|
||||||
- NET_ADMIN
|
|
||||||
- SYS_NICE
|
|
||||||
- NET_RAW
|
|
||||||
image: "dtagdevsec/suricata:1903"
|
|
||||||
volumes:
|
|
||||||
- /data/suricata/log:/var/log/suricata
|
|
Loading…
Reference in a new issue