docker-compose.yml

version: "3"
services:
  # nosemgrep
  emba:
    image: embeddedanalyzer/emba:latest
    container_name: emba
    read_only: true
    # all pre-checker mount modules need privileged mode
    # nosemgrep
    privileged: true
    # /root/.config is needed for binwalk - further recovery for other tools needed
    # /root/.config is needed for cwe_checker
    # /root/.local is needed for cwe_checker
    # /external/arachni/... needed by arachni (full system emulator modules)
    tmpfs:
      - /tmp
      - /root/.config/
      - /root/.local/share/composer/
      - /root/.local/share/cwe_checker/
        # - /root/.local/share
      - /root/.cache/
      - /root/.semgrep/
      - /root/.ghidra/
      - /root/.routersploit/
      - /root/.msf4
      - /root/.john
      - /run/lock
      - /var/run
      - /var/tmp
      - /var/lock
      - /external/arachni/arachni-1.6.1.3-0.6.1.1/.system/arachni-ui-web/config/component_cache
      - /external/arachni/arachni-1.6.1.3-0.6.1.1/.system/arachni-ui-web/db
      - /external/arachni/arachni-1.6.1.3-0.6.1.1/.system/arachni-ui-web/tmp
      - /external/arachni/arachni-1.6.1.3-0.6.1.1/.system/home
      - /external/arachni/arachni-1.6.1.3-0.6.1.1/logs
    build: .
    # /dev is needed for the system emulator (L10)
    volumes:
        - ${FIRMWARE}/:/firmware:ro
        - ${LOG}/:/logs
        - ${EMBA}/:/emba:ro
        - ${EMBA}/external/linux_kernel_sources/:/external/linux_kernel_sources:ro
        - ${EMBA}/external/nvd-json-data-feeds/:/external/nvd-json-data-feeds:ro
        - /etc/localtime:/etc/localtime:ro
        - /dev:/dev
    environment:
        - USER
        - CONTAINER_NUMBER=1
    devices:
      - /dev/fuse:/dev/fuse:rwm
    cap_add:
      - SYS_ADMIN
    ulimits:
      core:
        hard: 0
        soft: 0

  emba_quest:
    image: embeddedanalyzer/emba:latest
    container_name: emba_quest
    read_only: true
    tmpfs:
      - /tmp
      - /root
      - /run/lock
      - /var/run
      - /var/tmp
      - /var/lock
    volumes:
        - ${FIRMWARE}/:/firmware:ro
        - ${LOG}/:/logs
        - ${EMBA}/:/emba:ro
        - ${EMBA}/external/linux_kernel_sources/:/external/linux_kernel_sources
        - /etc/localtime:/etc/localtime:ro
    environment:
        - USER
        - CONTAINER_NUMBER=2
    network_mode: host
    ulimits:
      core:
        hard: 0
        soft: 0
    security_opt:
      - no-new-privileges:true