mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-10-30 12:02:54 +00:00
36 lines
821 B
Docker
36 lines
821 B
Docker
FROM alpine:3.20
|
|
#
|
|
# Add source
|
|
COPY . /opt/p0f
|
|
#
|
|
# Install packages
|
|
RUN apk --no-cache -U upgrade && \
|
|
apk --no-cache -U add \
|
|
bash \
|
|
build-base \
|
|
jansson \
|
|
jansson-dev \
|
|
libcap \
|
|
libpcap \
|
|
libpcap-dev && \
|
|
#
|
|
# Setup user, groups and configs
|
|
addgroup -g 2000 p0f && \
|
|
adduser -S -s /bin/bash -u 2000 -D -g 2000 p0f && \
|
|
#
|
|
# Download and compile p0f
|
|
cd /opt/p0f && \
|
|
./build.sh && \
|
|
setcap cap_sys_chroot,cap_setgid,cap_net_raw=+ep /opt/p0f/p0f && \
|
|
#
|
|
# Clean up
|
|
apk del --purge build-base \
|
|
jansson-dev \
|
|
libpcap-dev && \
|
|
rm -rf /root/* \
|
|
/var/cache/apk/*
|
|
#
|
|
# Start p0f
|
|
WORKDIR /opt/p0f
|
|
USER p0f:p0f
|
|
CMD exec /opt/p0f/p0f -u p0f -j -o /var/log/p0f/p0f.json -i $(ip route | grep "^default" | awk '{ print $5 }') > /dev/null
|