zeus 3 years ago
parent
commit
b6ef3ff0ce
  1. 75
      install/usr/share/swarmlab.io/sec/swarmlab-sec

75
install/usr/share/swarmlab.io/sec/swarmlab-sec

@ -40,7 +40,8 @@ IMAGE_local="microservice-volatilitywindows"
HYBRID_NETWORK="microservice-volatilitywindows"
# dont edit
#IMAGE_origin="hub.swarmlab.io:5480/hybrid-numpy:latest"
IMAGE_origin="hub.swarmlab.io:5480/hybrid-volatility"
#IMAGE_origin="hub.swarmlab.io:5480/hybrid-volatility"
IMAGE_origin="alpine:3.11"
bootstrap="sec_bootstrap"
hostnames="auto_update_hosts"
hostnames_get="get_hosts"
@ -141,14 +142,38 @@ if [ -d "$Wdir/project" ]; then
cat << EOF > $Wdir/Dockerfile
FROM $IMAGE_origin AS builder
#
ARG DEF_USERNAME=root
USER \${DEF_USERNAME}
WORKDIR /tmp/build/
# Fetch the symbols from the Volatility 3 framework
RUN apk add --no-cache --virtual .build \
bash \
coreutils \
findutils \
net-tools \
tcpdump \
nmap \
bind-tools \
gawk \
git \
curl \
gcc \
git \
musl-dev \
python3-dev \
unzip
RUN git clone --recursive https://github.com/VirusTotal/yara-python && \
cd yara-python && \
python3 setup.py build
RUN curl -fL https://downloads.volatilityfoundation.org/volatility3/symbols/windows.zip -o windows.zip && \
unzip windows.zip
RUN apk --purge del \
.build
FROM $IMAGE_origin
ARG DEF_USERNAME=root
@ -164,7 +189,6 @@ USER \${DEF_USERNAME}
WORKDIR \${DEF_INSTALL_PREFIX}/lib
# Install system dependencies
RUN apk add --no-cache \
python3 && \
apk add --no-cache --virtual .build \
@ -175,7 +199,6 @@ COPY --from=builder --chown="\${DEF_USERNAME}:\${DEF_USERNAME}" /tmp/build/yara-
RUN find . -type d -exec chmod 755 {} \; && \
find . -type f -exec chmod 644 {} \;
# Install the Volatility 3 framework
RUN git clone https://github.com/volatilityfoundation/volatility3.git && \
cd volatility3 && \
python3 setup.py install && \
@ -183,15 +206,11 @@ RUN git clone https://github.com/volatilityfoundation/volatility3.git && \
WORKDIR \${DEF_INSTALL_PREFIX}/lib/yara-python
# Install the Python bindings for YARA
RUN python3 setup.py install
WORKDIR \${DEF_INSTALL_PREFIX}/lib/volatility3/volatility/symbols/
#COPY --from=builder --chown="\${DEF_USERNAME}:\${DEF_USERNAME}" /tmp/build/linux linux
#COPY --from=builder --chown="\${DEF_USERNAME}:\${DEF_USERNAME}" /tmp/build/mac mac
COPY --from=builder --chown="\${DEF_USERNAME}:\${DEF_USERNAME}" /tmp/build/windows windows
RUN find . -type d -exec chmod 755 {} \; && \
find . -type f -exec chmod 644 {} \;
@ -212,7 +231,8 @@ RUN apk update && apk add --no-cache \
gcc \
git \
musl-dev \
unzip
unzip
USER root
@ -243,7 +263,7 @@ RUN apk update && apk add --no-cache \
&& chmod -R 600 \${SSHDIR}/* \
&& chown -R \${USER1}:\${USER1} \${SSHDIR}
WORKDIR /home/docker/project
WORKDIR /
COPY .vimrc /home/docker
EXPOSE 3787
USER docker
@ -303,12 +323,34 @@ ARG DEF_USERNAME=root
USER \${DEF_USERNAME}
WORKDIR /tmp/build/
# Fetch the symbols from the Volatility 3 framework
RUN apk add --no-cache --virtual .build \
bash \
coreutils \
findutils \
net-tools \
tcpdump \
nmap \
bind-tools \
gawk \
git \
curl \
gcc \
git \
musl-dev \
python3-dev \
unzip
RUN git clone --recursive https://github.com/VirusTotal/yara-python && \
cd yara-python && \
python3 setup.py build
RUN curl -fL https://downloads.volatilityfoundation.org/volatility3/symbols/windows.zip -o windows.zip && \
unzip windows.zip
FROM $IMAGE_origin
RUN apk --purge del \
.build
FROM $IMAGE_origin
ARG DEF_USERNAME=root
ARG DEF_INSTALL_PREFIX=/usr
@ -323,7 +365,6 @@ USER \${DEF_USERNAME}
WORKDIR \${DEF_INSTALL_PREFIX}/lib
# Install system dependencies
RUN apk add --no-cache \
python3 && \
apk add --no-cache --virtual .build \
@ -334,7 +375,6 @@ COPY --from=builder --chown="\${DEF_USERNAME}:\${DEF_USERNAME}" /tmp/build/yara-
RUN find . -type d -exec chmod 755 {} \; && \
find . -type f -exec chmod 644 {} \;
# Install the Volatility 3 framework
RUN git clone https://github.com/volatilityfoundation/volatility3.git && \
cd volatility3 && \
python3 setup.py install && \
@ -342,15 +382,11 @@ RUN git clone https://github.com/volatilityfoundation/volatility3.git && \
WORKDIR \${DEF_INSTALL_PREFIX}/lib/yara-python
# Install the Python bindings for YARA
RUN python3 setup.py install
WORKDIR \${DEF_INSTALL_PREFIX}/lib/volatility3/volatility/symbols/
#COPY --from=builder --chown="\${DEF_USERNAME}:\${DEF_USERNAME}" /tmp/build/linux linux
#COPY --from=builder --chown="\${DEF_USERNAME}:\${DEF_USERNAME}" /tmp/build/mac mac
COPY --from=builder --chown="\${DEF_USERNAME}:\${DEF_USERNAME}" /tmp/build/windows windows
RUN find . -type d -exec chmod 755 {} \; && \
find . -type f -exec chmod 644 {} \;
@ -371,7 +407,8 @@ RUN apk update && apk add --no-cache \
gcc \
git \
musl-dev \
unzip
unzip
USER root
COPY $bootstrap /usr/bin
COPY $hostnames_get /usr/bin

Loading…
Cancel
Save