hcornet
506716e703
Some checks failed
Deployment Verification / deploy-and-test (push) Failing after 29s
77 lines
2.4 KiB
Docker
77 lines
2.4 KiB
Docker
# IRIS Source Code
|
|
# Copyright (C) 2021 - Airbus CyberSecurity (SAS)
|
|
# ir@cyberactionlab.net
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU Lesser General Public
|
|
# License as published by the Free Software Foundation; either
|
|
# version 3 of the License, or (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
# Lesser General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Lesser General Public License
|
|
# along with this program; if not, write to the Free Software Foundation,
|
|
# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
|
|
#################
|
|
# COMPILE IMAGE #
|
|
#################
|
|
FROM python:3.9 AS compile-image
|
|
RUN apt-get update
|
|
|
|
RUN python -m venv /opt/venv
|
|
# Make sure we use the virtualenv:
|
|
ENV PATH="/opt/venv/bin:$PATH"
|
|
|
|
COPY source/dependencies /dependencies
|
|
COPY source/requirements.txt /
|
|
|
|
RUN pip3 install -r requirements.txt
|
|
|
|
###############
|
|
# BUILD IMAGE #
|
|
###############
|
|
FROM python:3.9 as iriswebapp
|
|
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
COPY --from=compile-image /opt/venv /opt/venv
|
|
|
|
# Make sure we use the virtualenv:
|
|
ENV PATH="/opt/venv/bin:$PATH"
|
|
|
|
# Define specific admin password at creation
|
|
#ENV IRIS_ADM_PASSWORD="MySuperFirstPasswordIWant"
|
|
|
|
RUN apt update
|
|
RUN apt install -y p7zip-full pgp rsync postgresql-client
|
|
|
|
RUN mkdir /iriswebapp/
|
|
RUN mkdir -p /home/iris/certificates
|
|
RUN mkdir -p /home/iris/user_templates
|
|
RUN mkdir -p /home/iris/server_data
|
|
RUN mkdir -p /home/iris/server_data/backup
|
|
RUN mkdir -p /home/iris/server_data/updates
|
|
RUN mkdir -p /home/iris/server_data/custom_assets
|
|
RUN mkdir -p /home/iris/server_data/datastore
|
|
|
|
WORKDIR /iriswebapp
|
|
|
|
COPY docker/webApp/iris-entrypoint.sh .
|
|
COPY docker/webApp/wait-for-iriswebapp.sh .
|
|
COPY ../../certificates /home/iris/certificates/
|
|
COPY ../../certificates/rootCA/irisRootCACert.pem /etc/irisRootCACert.pem
|
|
COPY ../../certificates/ldap/ /iriswebapp/certificates/ldap/
|
|
COPY ./source .
|
|
|
|
# Add execution right to binaries needed by evtx2splunk for iris_evtx module
|
|
RUN chmod +x /iriswebapp/dependencies/evtxdump_binaries/linux/x64/fd
|
|
RUN chmod +x /iriswebapp/dependencies/evtxdump_binaries/linux/x64/evtx_dump
|
|
|
|
RUN chmod +x iris-entrypoint.sh
|
|
RUN chmod +x wait-for-iriswebapp.sh
|
|
#ENTRYPOINT [ "./iris-entrypoint.sh" ] |