mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
include docker repos
... skip emobility since it is a dev repo
This commit is contained in:
29
docker/suricata/Dockerfile
Normal file
29
docker/suricata/Dockerfile
Normal file
@ -0,0 +1,29 @@
|
||||
FROM alpine
|
||||
MAINTAINER MO
|
||||
|
||||
# Include dist
|
||||
ADD dist/ /root/dist/
|
||||
|
||||
# Install packages
|
||||
RUN apk -U upgrade && \
|
||||
apk add bash ca-certificates file procps wget && \
|
||||
apk -U add --repository https://dl-cdn.alpinelinux.org/alpine/edge/community \
|
||||
suricata && \
|
||||
|
||||
# Setup user, groups and configs
|
||||
addgroup -g 2000 suri && \
|
||||
adduser -S -H -u 2000 -D -g 2000 suri && \
|
||||
mv /root/dist/suricata.yaml /etc/suricata/suricata.yaml && \
|
||||
mv /root/dist/capture-filter.bpf /etc/suricata/capture-filter.bpf && \
|
||||
|
||||
# Download the latest EmergingThreats ruleset, replace rulebase and enable all rules
|
||||
cp /root/dist/update.sh /usr/bin/ && \
|
||||
chmod u+x /usr/bin/update.sh && \
|
||||
update.sh && \
|
||||
|
||||
# Clean up
|
||||
rm -rf /root/* && \
|
||||
rm -rf /var/cache/apk/*
|
||||
|
||||
# Start suricata
|
||||
CMD update.sh && suricata -v -F /etc/suricata/capture-filter.bpf -i $(/sbin/ip address | grep '^2: ' | awk '{ print $2 }' | tr -d [:punct:])
|
Reference in New Issue
Block a user