prep for rebuilding ciscoasa, elasticpot, honeypy

This commit is contained in:
t3chn0m4g3 2021-09-20 16:08:16 +00:00
parent ed224215a4
commit 32e1e8a8ea
6 changed files with 25 additions and 23 deletions

View file

@ -1,4 +1,4 @@
FROM alpine:3.13 FROM alpine:3.14
# #
# Include dist # Include dist
ADD dist/ /root/dist/ ADD dist/ /root/dist/

View file

@ -13,7 +13,7 @@ services:
ports: ports:
- "5000:5000/udp" - "5000:5000/udp"
- "8443:8443" - "8443:8443"
image: "ghcr.io/telekom-security/ciscoasa:2006" image: "dtagdevsec/ciscoasa:2006"
read_only: true read_only: true
volumes: volumes:
- /data/ciscoasa/log:/var/log/ciscoasa - /data/ciscoasa/log:/var/log/ciscoasa

View file

@ -1,4 +1,4 @@
FROM alpine:3.13 FROM alpine:3.14
# #
# Include dist # Include dist
ADD dist/ /root/dist/ ADD dist/ /root/dist/

View file

@ -14,7 +14,7 @@ services:
- elasticpot_local - elasticpot_local
ports: ports:
- "9200:9200" - "9200:9200"
image: "ghcr.io/telekom-security/elasticpot:2006" image: "dtagdevsec/elasticpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/elasticpot/log:/opt/elasticpot/log - /data/elasticpot/log:/opt/elasticpot/log

View file

@ -1,20 +1,20 @@
FROM alpine:3.11 FROM debian:buster-slim
# #
# Include dist # Include dist
ADD dist/ /root/dist/ ADD dist/ /root/dist/
# #
# Install packages # Install packages
RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \ RUN apt-get update -y && \
apk -U --no-cache add \ apt-get install -y \
build-base \ build-essential \
git \ git \
libcap \ libcap2-bin \
python2 \ python2 \
python2-dev \ python2-dev \
py2-pip && \ python-pip && \
# #
# Install virtualenv # Install virtualenv
pip install --no-cache-dir virtualenv && \ pip install --no-cache-dir virtualenv==20.4.7 && \
# #
# Clone honeypy from git # Clone honeypy from git
git clone https://github.com/foospidy/HoneyPy /opt/honeypy && \ git clone https://github.com/foospidy/HoneyPy /opt/honeypy && \
@ -36,20 +36,22 @@ RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
/opt/honeypy/env/bin/pip install -r /opt/honeypy/requirements.txt && \ /opt/honeypy/env/bin/pip install -r /opt/honeypy/requirements.txt && \
# #
# Setup user, groups and configs # Setup user, groups and configs
addgroup -g 2000 honeypy && \ addgroup --gid 2000 honeypy && \
adduser -S -H -s /bin/ash -u 2000 -D -g 2000 honeypy && \ adduser --system --no-create-home --shell /bin/bash --uid 2000 --disabled-password --disabled-login --gid 2000 honeypy && \
chown -R honeypy:honeypy /opt/honeypy && \ chown -R honeypy:honeypy /opt/honeypy && \
setcap cap_net_bind_service=+ep /opt/honeypy/env/bin/python && \ setcap cap_net_bind_service=+ep /opt/honeypy/env/bin/python && \
# #
# Clean up # Clean up
apk del --purge build-base \ apt-get purge -y \
build-essential \
git \ git \
python2-dev \ python2-dev \
py2-pip && \ python-pip && \
rm -rf /root/* && \ apt-get autoremove --purge -y && \
rm -rf /var/cache/apk/* apt-get clean && \
rm -rf /root/* /var/lib/apt/lists/* /tmp/* /var/tmp/*
# #
# Set workdir and start mailoney # Set workdir and start honeypy
USER honeypy:honeypy USER honeypy:honeypy
WORKDIR /opt/honeypy WORKDIR /opt/honeypy
CMD ["/opt/honeypy/env/bin/python2", "/opt/honeypy/Honey.py", "-d"] CMD ["/opt/honeypy/env/bin/python2", "/opt/honeypy/Honey.py", "-d"]

View file

@ -20,7 +20,7 @@ services:
- "2324:2324" - "2324:2324"
- "4096:4096" - "4096:4096"
- "9200:9200" - "9200:9200"
image: "ghcr.io/telekom-security/honeypy:2006" image: "dtagdevsec/honeypy:2006"
read_only: true read_only: true
volumes: volumes:
- /data/honeypy/log:/opt/honeypy/log - /data/honeypy/log:/opt/honeypy/log