mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-10-14 12:29:15 +00:00
85d23150b8
Numerous changes completed to successfully have multiple Conpot Honeypots in operation - Fix Dockerfile Build Failures by adding py-gevent and py-snmp to APK where required - Build new dedicated images for Conpot via Default, Kamstrup and Guardian Templates - Reconfigure IP Tables Rules - Update all YML files with new configuration to download new Conpot images instead of T-Pot Default Conpot Image - Configure Environment Variables in Docker Files for Image Builds - Fix missing IPTable rule/configuration for 5060/udp for Dionaea - Successfully test via NMAP that ports 102, 161/udp, 502, 623/udp, 10001, 47808/udp, and 50100 are open and functioning correctly KNOWN ISSUE: Conpot data is not available on dashboard/visualisations due to changes required for Logstash configuration.
59 lines
1.7 KiB
Docker
59 lines
1.7 KiB
Docker
FROM alpine
|
|
MAINTAINER MO
|
|
|
|
# Include dist
|
|
ADD dist/ /root/dist/
|
|
|
|
# Define Environment Variables
|
|
ENV CONPOT_TEMPLATE="default" CONPOT_LOG="/var/log/conpot/conpot_default.log" CONPOT_CONFIG="/etc/conpot/conpot_default.cfg"
|
|
|
|
# Setup apt
|
|
RUN apk -U add bash \
|
|
build-base \
|
|
file \
|
|
git \
|
|
libev \
|
|
libtool \
|
|
libxslt \
|
|
libxslt-dev \
|
|
mariadb-dev \
|
|
mariadb-client-libs \
|
|
pkgconfig \
|
|
python \
|
|
python-dev \
|
|
py-gevent \
|
|
py-snmp \
|
|
py-cffi && \
|
|
|
|
# Setup ConPot
|
|
git clone https://github.com/mushorg/conpot /opt/conpot_default/ && \
|
|
cd /opt/conpot_default/ && \
|
|
git checkout d97a68a054e4fe42ff90293188a5702ce8ab09a3 && \
|
|
cp /root/dist/requirements.txt /opt/conpot_default/ && \
|
|
python setup.py install && \
|
|
cd / && \
|
|
rm -rf /opt/conpot_default /tmp/* /var/tmp/* && \
|
|
|
|
# Setup user, groups and configs
|
|
addgroup -g 2000 conpot_default && \
|
|
adduser -S -s /bin/bash -u 2000 -D -g 2000 conpot_default && \
|
|
mkdir -p /etc/conpot /var/log/conpot && \
|
|
mv /root/dist/conpot.cfg /etc/conpot/conpot_default.cfg && \
|
|
mv /root/dist/default/template.xml /usr/lib/python2.7/site-packages/Conpot-0.5.1-py2.7.egg/conpot/templates/default/ && \
|
|
|
|
# Clean up
|
|
apk del build-base \
|
|
file \
|
|
git \
|
|
libev \
|
|
libtool \
|
|
libxslt-dev \
|
|
mariadb-dev \
|
|
pkgconfig \
|
|
python-dev \
|
|
py-cffi && \
|
|
rm -rf /root/* && \
|
|
rm -rf /var/cache/apk/*
|
|
|
|
# Run supervisor upon container start
|
|
CMD /usr/bin/conpot --template $CONPOT_TEMPLATE --logfile $CONPOT_LOG --config $CONPOT_CONFIG
|