-
Notifications
You must be signed in to change notification settings - Fork 234
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
11 changed files
with
322 additions
and
224 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,120 @@ | ||
| import Common.{betaVersion, snapshotVersion, stableVersion, versionUsage} | ||
| import com.typesafe.sbt.packager.docker.DockerPlugin.autoImport._ | ||
| import com.typesafe.sbt.packager.docker.{Cmd, ExecCmd} | ||
| import com.typesafe.sbt.packager.linux.LinuxPlugin.autoImport.defaultLinuxInstallLocation | ||
| import sbt.Keys._ | ||
| import sbt._ | ||
|
|
||
| object DockerSettings { | ||
| val default = Seq( | ||
| Docker / version := { | ||
| version.value match { | ||
| case stableVersion(_, _) => version.value | ||
| case betaVersion(v1, v2, v3) => v1 + "-0." + v3 + "RC" + v2 | ||
| case snapshotVersion(stableVersion(v1, v2)) => v1 + "-" + v2 + "-SNAPSHOT" | ||
| case snapshotVersion(betaVersion(v1, v2, v3)) => v1 + "-0." + v3 + "RC" + v2 + "-SNAPSHOT" | ||
| case _ => versionUsage(version.value) | ||
| } | ||
| }, | ||
| Docker / defaultLinuxInstallLocation := "/opt/cortex", | ||
| dockerRepository := Some("thehiveproject"), | ||
| dockerUpdateLatest := !version.value.toUpperCase.contains("RC") && !version.value.contains("SNAPSHOT"), | ||
| dockerExposedPorts := Seq(9001), | ||
| Docker / mappings ++= Seq( | ||
| file("package/docker/entrypoint") -> "/opt/cortex/entrypoint", | ||
| file("package/logback.xml") -> "/etc/cortex/logback.xml", | ||
| file("package/empty") -> "/var/log/cortex/application.log" | ||
| ), | ||
| Docker / mappings ~= (_.filterNot { | ||
| case (_, filepath) => filepath == "/opt/cortex/conf/application.conf" | ||
| }), | ||
| dockerCommands := Seq( | ||
| Cmd("FROM", "openjdk:8"), | ||
| Cmd("LABEL", "MAINTAINER=\"TheHive Project <[email protected]>\"", "repository=\"https://github.com/TheHive-Project/TheHive\""), | ||
| Cmd("WORKDIR", "/opt/cortex"), | ||
| // format: off | ||
| Cmd("RUN", | ||
| "wget", "-q", "-O", "-", "https://download.docker.com/linux/static/stable/x86_64/docker-18.09.0.tgz", "|", | ||
| "tar", "-xzC", "/usr/local/bin/", "--strip-components", "1", "&&", | ||
| "addgroup", "--system", "dockremap", "&&", | ||
| "adduser", "--system", "--ingroup", "dockremap", "dockremap", "&&", | ||
| "addgroup", "--system", "docker", "&&", | ||
| "echo", "dockremap:165536:65536", ">>", "/etc/subuid", "&&", | ||
| "echo", "dockremap:165536:65536", ">>", "/etc/subgid", "&&", | ||
| "apt", "update", "&&", | ||
| "apt", "upgrade", "-y", "&&", | ||
| "apt", "install", "-y", "iptables", "lxc", "&&", | ||
| "apt", "autoclean", "-y", "-q", "&&", | ||
| "apt", "autoremove", "-y", "-q", "&&", | ||
| "rm", "-rf", "/var/lib/apt/lists/*", "&&", | ||
| "(", "type", "groupadd", "1>/dev/null", "2>&1", "&&", | ||
| "groupadd", "-g", "1001", "cortex", "||", | ||
| "addgroup", "-g", "1001", "-S", "cortex", | ||
| ")", "&&", | ||
| "(", "type", "useradd", "1>/dev/null", "2>&1", "&&", | ||
| "useradd", "--system", "--uid", "1001", "--gid", "1001", "cortex", "||", | ||
| "adduser", "-S", "-u", "1001", "-G", "cortex", "cortex", | ||
| ")"), | ||
| //format: on | ||
| Cmd("ADD", "--chown=root:root", "opt", "/opt"), | ||
| Cmd("ADD", "--chown=cortex:cortex", "var", "/var"), | ||
| Cmd("ADD", "--chown=cortex:cortex", "etc", "/etc"), | ||
| Cmd("VOLUME", "/var/lib/docker"), | ||
| ExecCmd("RUN", "chmod", "+x", "/opt/cortex/bin/cortex", "/opt/cortex/entrypoint"), | ||
| Cmd("EXPOSE", "9001"), | ||
| ExecCmd("ENTRYPOINT", "/opt/cortex/entrypoint"), | ||
| ExecCmd("CMD") | ||
| ) | ||
| ) | ||
|
|
||
| val withDeps = default ++ Seq( | ||
| dockerCommands ++= Seq( | ||
| Cmd( | ||
| "RUN", | ||
| """ | ||
| | apt update && | ||
| | apt upgrade -y && | ||
| | apt install -y -q --no-install-recommends --no-install-suggests | ||
| | wkhtmltopdf libfuzzy-dev libimage-exiftool-perl | ||
| | libboost-regex-dev | ||
| | libboost-program-options-dev | ||
| | libboost-system-dev libboost-filesystem-dev libssl-dev | ||
| | build-essential cmake python3-dev python2-dev | ||
| | git python3 python3-pip libffi-dev libjpeg62-turbo-dev libtiff5-dev | ||
| | libopenjp2-7-dev zlib1g-dev libfreetype6-dev liblcms2-dev libwebp-dev | ||
| | tcl8.6-dev tk8.6-dev python3-tk libharfbuzz-dev libfribidi-dev | ||
| | libxcb1-dev python2.7 && | ||
| | rm -rf /var/lib/apt/lists/* && | ||
| | curl https://bootstrap.pypa.io/pip/2.7/get-pip.py --output /tmp/get-pip.py && | ||
| | python2.7 /tmp/get-pip.py && | ||
| | pip2 install -U setuptools && | ||
| | pip3 install -U setuptools && | ||
| | ln -sf python3 /usr/bin/python && | ||
| | hash -r && | ||
| | git clone https://github.com/JusticeRage/Manalyze.git /tmp/Manalyze && | ||
| | cd /tmp/Manalyze && | ||
| | cmake . && | ||
| | make -j5 && | ||
| | cd /tmp/Manalyze/bin/yara_rules && | ||
| | pip3 install requests && | ||
| | python3 update_clamav_signatures.py && | ||
| | cd /tmp/Manalyze && | ||
| | make install && | ||
| | cd / && | ||
| | rm -rf /tmp/Manalyze && | ||
| | curl -SL https://github.com/fireeye/flare-floss/releases/download/v1.7.0/floss-v1.7.0-linux.zip | ||
| | --output /tmp/floss.zip && | ||
| | unzip /tmp/floss.zip -d /usr/bin && | ||
| | rm /tmp/floss.zip && | ||
| | git clone https://github.com/TheHive-Project/Cortex-Analyzers.git /tmp/analyzers && | ||
| | cat $(find /tmp/analyzers -name requirements.txt) | sort -u | while read I ; | ||
| | do | ||
| | pip2 install $I || true && | ||
| | pip3 install $I || true ; | ||
| | done && | ||
| | rm -rf /tmp/analyzers | ||
| """.stripMargin.split("\\s").filter(_.nonEmpty): _* | ||
| ) | ||
| ) | ||
| ) | ||
| } |
Oops, something went wrong.