mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-01 12:32:12 +00:00

- add conditional proxy support - use xargs to parallelize image builds - some tweaking and notes
50 lines
1.7 KiB
Docker
50 lines
1.7 KiB
Docker
FROM alpine:3.19
|
|
ARG PROXY
|
|
ENV http_proxy=${PROXY}
|
|
#
|
|
# Include dist
|
|
COPY dist/ /root/dist/
|
|
#
|
|
# Install packages, use proxy if available and cache using http
|
|
RUN ash -c 'if [ -n "${http_proxy}" ]; then \
|
|
sed -i "s/https/http/g" /etc/apk/repositories; \
|
|
echo "Using HTTP Proxy at ${http_proxy}"; \
|
|
else \
|
|
echo "HTTP Proxy not configured, proceeding without proxy"; \
|
|
fi' && \
|
|
# Setup apk
|
|
apk --no-cache -U add \
|
|
git \
|
|
procps \
|
|
py3-psutil \
|
|
py3-requests \
|
|
python3 && \
|
|
#
|
|
# Install adbhoney from git
|
|
git clone https://github.com/huuck/ADBHoney /opt/adbhoney && \
|
|
cd /opt/adbhoney && \
|
|
# git checkout 2417a7a982f4fd527b3a048048df9a23178767ad && \
|
|
git checkout 42afd98611724ca3d694a48b694c957e8d953db4 && \
|
|
cp /root/dist/adbhoney.cfg /opt/adbhoney && \
|
|
cp /root/dist/cpu_check.py / && \
|
|
sed -i 's/dst_ip/dest_ip/' /opt/adbhoney/adbhoney/core.py && \
|
|
sed -i 's/dst_port/dest_port/' /opt/adbhoney/adbhoney/core.py && \
|
|
#
|
|
# Setup user, groups and configs
|
|
addgroup -g 2000 adbhoney && \
|
|
adduser -S -H -s /bin/ash -u 2000 -D -g 2000 adbhoney && \
|
|
chown -R adbhoney:adbhoney /opt/adbhoney && \
|
|
#
|
|
# Clean up
|
|
apk del --purge git && \
|
|
sed -i "s/http/https/g" /etc/apk/repositories && \
|
|
rm -rf /root/* /opt/adbhoney/.git /var/cache/apk/*
|
|
ENV http_proxy=""
|
|
#
|
|
# Set workdir and start adbhoney
|
|
STOPSIGNAL SIGINT
|
|
# Adbhoney sometimes hangs at 100% CPU usage, if detected container will become unhealthy and restarted by tpotinit
|
|
HEALTHCHECK --interval=5m --timeout=30s --retries=3 CMD python3 /cpu_check.py $(pgrep -of run.py) 99
|
|
USER adbhoney:adbhoney
|
|
WORKDIR /opt/adbhoney/
|
|
CMD ["/usr/bin/python3", "run.py"]
|