mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-05-03 13:48:54 +00:00

updating .env, env.example and compose files regarding sentrypeer ENVs make glutton image aware of payloads feature bump glutton to latest master, alpine 3.19, multi-stage build bump ipphoney to alpine 3.19 bump mailoney to alpine 3.19, adjust for py3 revert medpot to previous master, use multi stage build and alpine 3.19 bump cyberchef to latest master bump ngninx to alpine 3.19 bump p0f to alpine 3.19, use multi stage build bump redishoneypot to alpine 3.19, use multi stage build bump sentrypeer to latest master, fix bug for open ports in compose files, now all tcp/5060, udp/5060 traffic will be seen bump spiderfoot to latest master bump spiderfoot to alpine 3.19 bump suricata to 7.0.2, fix performance issue with capture-filter-bpf by reducing the rules update clean.sh to include glutton payloads folder
37 lines
942 B
Docker
37 lines
942 B
Docker
# In case of problems Alpine 3.13 needs to be used:
|
|
# https://wiki.alpinelinux.org/wiki/Release_Notes_for_Alpine_3.14.0#faccessat2
|
|
FROM alpine:3.19
|
|
#
|
|
# Add source
|
|
COPY . /opt/p0f
|
|
#
|
|
# Install packages
|
|
RUN apk -U --no-cache add \
|
|
bash \
|
|
build-base \
|
|
jansson \
|
|
jansson-dev \
|
|
libcap \
|
|
libpcap \
|
|
libpcap-dev && \
|
|
#
|
|
# Setup user, groups and configs
|
|
addgroup -g 2000 p0f && \
|
|
adduser -S -s /bin/bash -u 2000 -D -g 2000 p0f && \
|
|
#
|
|
# Download and compile p0f
|
|
cd /opt/p0f && \
|
|
./build.sh && \
|
|
setcap cap_sys_chroot,cap_setgid,cap_net_raw=+ep /opt/p0f/p0f && \
|
|
#
|
|
# Clean up
|
|
apk del --purge build-base \
|
|
jansson-dev \
|
|
libpcap-dev && \
|
|
rm -rf /root/* && \
|
|
rm -rf /var/cache/apk/*
|
|
#
|
|
# Start p0f
|
|
WORKDIR /opt/p0f
|
|
USER p0f:p0f
|
|
CMD exec /opt/p0f/p0f -u p0f -j -o /var/log/p0f/p0f.json -i $(/sbin/ip address show | /usr/bin/awk '/inet.*brd/{ print $NF; exit }') > /dev/null
|