зеркало из https://github.com/mozilla/MozDef.git
119 строки
4.1 KiB
Docker
119 строки
4.1 KiB
Docker
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
# Copyright (c) 2014 Mozilla Corporation
|
|
#
|
|
# Contributors:
|
|
# Yohann Lepage yohann@lepage.info
|
|
# Anthony Verez averez@mozilla.com
|
|
|
|
FROM debian:testing
|
|
|
|
MAINTAINER Jeff Bryner <jbryner@mozilla.com>
|
|
|
|
ENV DEBIAN_FRONTEND noninteractive
|
|
|
|
# Locales
|
|
RUN (apt-get clean \
|
|
&& apt-key update \
|
|
&& apt-get -q -y update --fix-missing \
|
|
&& apt-get -q -y update \
|
|
&& apt-get install -q -y apt-utils \
|
|
&& apt-get install -q -y locales)
|
|
|
|
ADD conf/locale.gen /etc/locale.gen
|
|
RUN (locale-gen \
|
|
&& locale-gen en_US.UTF-8 \
|
|
&& dpkg-reconfigure locales)
|
|
|
|
ENV LANGUAGE en_US.UTF-8
|
|
ENV LANG en_US.UTF-8
|
|
ENV LC_ALL en_US.UTF-8
|
|
ENV LC_CTYPE en_US.UTF-8
|
|
|
|
RUN apt-get install -q -y openjdk-7-jre
|
|
|
|
# rabbit mq
|
|
RUN apt-get install -q -y rabbitmq-server
|
|
RUN rabbitmq-plugins enable rabbitmq_management
|
|
# mongodb
|
|
RUN apt-get install -q -y mongodb
|
|
# nodejs
|
|
RUN apt-get install -q -y nodejs npm git
|
|
# nginx
|
|
RUN (apt-get install -q -y nginx-full \
|
|
&& rm /etc/nginx/nginx.conf)
|
|
ADD conf/nginx.conf /etc/nginx/
|
|
|
|
|
|
#Mozdef
|
|
RUN (apt-get install -q -y python2.7-dev python-pip curl supervisor wget libmysqlclient-dev\
|
|
&& pip install -U pip \
|
|
&& curl -L https://github.com/jeffbryner/MozDef/archive/master.tar.gz |tar -C /opt -xz \
|
|
&& /bin/ln -s /opt/MozDef-master /opt/MozDef \
|
|
&& cd /opt/MozDef && /usr/bin/pip install --verbose --use-mirrors --timeout 30 -r requirements.txt \
|
|
&& /usr/bin/pip install --verbose --use-mirrors --timeout 30 uwsgi gevent celery \
|
|
&& mkdir /var/log/mozdef \
|
|
&& mkdir -p /run/uwsgi/apps/ \
|
|
&& touch /run/uwsgi/apps/loginput.socket && chmod 666 /run/uwsgi/apps/loginput.socket \
|
|
&& touch /run/uwsgi/apps/rest.socket && chmod 666 /run/uwsgi/apps/rest.socket \
|
|
&& mkdir -p /home/mozdef/envs/mozdef/bot/ && cd /home/mozdef/envs/mozdef/bot/ \
|
|
&& wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz && gzip -d GeoLiteCity.dat.gz)
|
|
ADD conf/supervisor.conf /etc/supervisor/conf.d/supervisor.conf
|
|
ADD conf/settings.js /opt/MozDef/meteor/app/lib/settings.js
|
|
ADD conf/config.py /opt/MozDef/alerts/lib/config.py
|
|
ADD conf/sampleData2MozDef.conf /opt/MozDef/examples/demo/sampleData2MozDef.conf
|
|
ADD conf/mozdef.localloginenabled.css /opt/MozDef/meteor/public/css/mozdef.css
|
|
|
|
# elasticsearch
|
|
RUN (curl -L https://download.elasticsearch.org/elasticsearch/elasticsearch/elasticsearch-1.3.2.tar.gz | tar -C /opt -xz \
|
|
&& /bin/ln -s /opt/elasticsearch-1.3.2 /opt/elasticsearch \
|
|
&& /opt/elasticsearch/bin/plugin --install elasticsearch/marvel/latest \
|
|
&& rm /opt/elasticsearch/config/elasticsearch.yml)
|
|
# ADD conf/elasticsearch/elasticsearch.yml /opt/elasticsearch/config/ # BUG https://github.com/dotcloud/docker/issues/2446
|
|
ADD conf/elasticsearch.yml /opt/elasticsearch-1.3.2/config/
|
|
|
|
|
|
# Kibana
|
|
RUN (curl -L https://download.elasticsearch.org/kibana/kibana/kibana-3.1.0.tar.gz |tar -C /opt -xz \
|
|
&& /bin/ln -s /opt/kibana-3.1.0 /opt/kibana)
|
|
#can't add from the local relative dir, so add from github
|
|
ADD https://raw.githubusercontent.com/jeffbryner/MozDef/master/examples/kibana/dashboards/alert.js /opt/kibana/app/dashboards/alert.js
|
|
ADD https://raw.githubusercontent.com/jeffbryner/MozDef/master/examples/kibana/dashboards/event.js /opt/kibana/app/dashboards/event.js
|
|
|
|
# Meteor
|
|
RUN (curl -L https://install.meteor.com/ | /bin/sh \
|
|
&& npm install -g meteorite \
|
|
&& ln -s /usr/bin/nodejs /usr/bin/node \
|
|
&& cd /opt/MozDef/meteor )
|
|
|
|
|
|
# VOLUMES
|
|
# Elasticsearch
|
|
VOLUME ['/var/lib/elasticsearch','/var/log/elasticsearch']
|
|
# Mongodb
|
|
VOLUME ['/var/lib/mongodb','/var/log/mongodb']
|
|
# Nginx
|
|
VOLUME ['/var/log/nginx','/var/log/mozdef']
|
|
# Quick share resource
|
|
VOLUME ['/tmp/share','/tmp/share']
|
|
|
|
# PORTS
|
|
# METEOR
|
|
EXPOSE 3000
|
|
# Elasticsearch
|
|
EXPOSE 9200
|
|
# Kibana
|
|
EXPOSE 9090
|
|
# LOGINPUT
|
|
EXPOSE 8080
|
|
# REST
|
|
EXPOSE 8081
|
|
|
|
# CLEAN
|
|
RUN apt-get clean && rm -rf /var/cache/apt/archives/* /var/lib/apt/lists/*
|
|
|
|
# Launch rabbit and sleep 10s for it to start
|
|
CMD /etc/init.d/rabbitmq-server start && sleep 10 && /usr/bin/supervisord
|
|
|