mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-04-28 19:28:50 +00:00
69 lines
2.3 KiB
Docker
69 lines
2.3 KiB
Docker
FROM alpine:3.14
|
|
#
|
|
# Include dist
|
|
ADD dist/ /root/dist/
|
|
#
|
|
# Get and install dependencies & packages
|
|
RUN apk -U add \
|
|
bash \
|
|
build-base \
|
|
git \
|
|
gmp-dev \
|
|
libcap \
|
|
libffi-dev \
|
|
mpc1-dev \
|
|
mpfr-dev \
|
|
openssl \
|
|
openssl-dev \
|
|
py3-pip \
|
|
python3 \
|
|
python3-dev && \
|
|
#
|
|
# Setup user
|
|
addgroup -g 2000 cowrie && \
|
|
adduser -S -s /bin/ash -u 2000 -D -g 2000 cowrie && \
|
|
#
|
|
# Install cowrie
|
|
mkdir -p /home/cowrie && \
|
|
cd /home/cowrie && \
|
|
git clone --depth=1 https://github.com/micheloosterhof/cowrie -b v2.3.0 && \
|
|
cd cowrie && \
|
|
# git checkout 6b1e82915478292f1e77ed776866771772b48f2e && \
|
|
mkdir -p log && \
|
|
sed -i '/packaging.*/d' requirements.txt && \
|
|
pip3 install --upgrade pip && \
|
|
pip3 install -r requirements.txt && \
|
|
#
|
|
# Setup configs
|
|
export PYTHON_DIR=$(python3 --version | tr '[A-Z]' '[a-z]' | tr -d ' ' | cut -d '.' -f 1,2 ) && \
|
|
setcap cap_net_bind_service=+ep /usr/bin/$PYTHON_DIR && \
|
|
cp /root/dist/cowrie.cfg /home/cowrie/cowrie/cowrie.cfg && \
|
|
chown cowrie:cowrie -R /home/cowrie/* /usr/lib/$PYTHON_DIR/site-packages/twisted/plugins && \
|
|
#
|
|
# Start Cowrie once to prevent dropin.cache errors upon container start caused by read-only filesystem
|
|
su - cowrie -c "export PYTHONPATH=/home/cowrie/cowrie:/home/cowrie/cowrie/src && \
|
|
cd /home/cowrie/cowrie && \
|
|
/usr/bin/twistd --uid=2000 --gid=2000 -y cowrie.tac --pidfile cowrie.pid cowrie &" && \
|
|
sleep 10 && \
|
|
#
|
|
# Clean up
|
|
apk del --purge build-base \
|
|
git \
|
|
gmp-dev \
|
|
libcap \
|
|
libffi-dev \
|
|
mpc1-dev \
|
|
mpfr-dev \
|
|
openssl-dev \
|
|
python3-dev \
|
|
py3-mysqlclient && \
|
|
rm -rf /root/* /tmp/* && \
|
|
rm -rf /var/cache/apk/* && \
|
|
rm -rf /home/cowrie/cowrie/cowrie.pid && \
|
|
unset PYTHON_DIR
|
|
#
|
|
# Start cowrie
|
|
ENV PYTHONPATH /home/cowrie/cowrie:/home/cowrie/cowrie/src
|
|
WORKDIR /home/cowrie/cowrie
|
|
USER cowrie:cowrie
|
|
CMD ["/usr/bin/twistd", "--nodaemon", "-y", "cowrie.tac", "--pidfile", "/tmp/cowrie/cowrie.pid", "cowrie"]
|