misp-docker/server/Dockerfile

110 lines
3.8 KiB
Docker
Raw Normal View History

2019-11-25 22:58:18 +01:00
FROM debian:buster-slim
ENV DEBIAN_FRONTEND noninteractive
2019-11-28 15:33:55 +01:00
ARG MISP_TAG=2.4.118
2019-11-25 22:58:18 +01:00
2019-11-26 01:23:59 +01:00
# OS Packages
2019-11-25 22:58:18 +01:00
RUN apt-get update; apt-get install -y --no-install-recommends \
sudo \
apache2 \
supervisor \
git make \
cron \
2019-11-25 22:58:18 +01:00
gcc \
zip unzip \
openssl \
2019-11-26 18:06:19 +01:00
gpg-agent gpg \
2019-11-25 22:58:18 +01:00
python3 \
python3-setuptools \
python3-dev \
python3-pip \
ssdeep \
php \
php-xml \
php-mbstring \
php-mysql \
php-pear \
php-dev \
php-redis \
php-gd \
libfuzzy-dev \
mariadb-client \
&& apt-get autoremove -y && apt-get clean -y && rm -rf /var/lib/apt/lists/*
# MISP code
# Download MISP using git in the /var/www/ directory.
2019-11-26 01:23:59 +01:00
RUN git clone --branch v${MISP_TAG} --recursive --depth 1 https://github.com/MISP/MISP.git /var/www/MISP
2019-11-25 22:58:18 +01:00
# Python Modules
# install Mitre's STIX and its dependencies by running the following commands:
# install mixbox to accomodate the new STIX dependencies:
WORKDIR /var/www/MISP/app/files/scripts
2019-11-26 15:24:37 +01:00
RUN git clone --depth 1 https://github.com/CybOXProject/mixbox.git; \
2019-11-25 22:58:18 +01:00
cd mixbox; python3 setup.py install
# install python-maec
2019-11-26 15:24:37 +01:00
RUN git clone --depth 1 https://github.com/MAECProject/python-maec.git; \
2019-11-25 22:58:18 +01:00
cd python-maec; python3 setup.py install
# install python-cybox
2019-11-26 15:24:37 +01:00
RUN git clone --depth 1 https://github.com/CybOXProject/python-cybox.git; \
2019-11-25 22:58:18 +01:00
cd python-cybox; python3 setup.py install
# install python stix
2019-11-26 15:24:37 +01:00
RUN git clone --depth 1 https://github.com/STIXProject/python-stix.git; \
2019-11-25 22:58:18 +01:00
cd python-stix; python3 setup.py install
# install STIX2.0 library to support STIX 2.0 export:
WORKDIR /var/www/MISP/cti-python-stix2
RUN python3 setup.py install
# install PyMISP
WORKDIR /var/www/MISP/PyMISP
RUN python3 setup.py install
RUN pip3 install --no-cache-dir plyara pyzmq redis maec python-magic lief https://github.com/lief-project/packages/raw/lief-master-latest/pylief-0.9.0.dev.zip git+https://github.com/kbandla/pydeep.git
# CakePHP
2019-11-28 15:33:55 +01:00
# Once done, install CakeResque, first get latest composer
2019-11-25 22:58:18 +01:00
COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
WORKDIR /var/www/MISP/app
RUN composer install \
2019-11-25 22:58:18 +01:00
# Enable CakeResque with php-redis
;phpenmod redis \
# Enable CakeResque with php-gnupgp
;phpenmod gnupg \
#installing ssdeep_php - pecl is dumb, we need to ensure the libs are in the specific place
;cp /usr/lib/x86_64-linux-gnu/libfuzzy.* /usr/lib; pecl install ssdeep; phpenmod ssdeep \
# To use the scheduler worker for scheduled tasks, do the following:
;cp -fa /var/www/MISP/INSTALL/setup/config.php /var/www/MISP/app/Plugin/CakeResque/Config/config.php
# Configure Apache
# add HTTP MISP Config
RUN rm /etc/apache2/sites-enabled/*;
COPY files/etc/apache2/sites-enabled/misp.conf /etc/apache2/sites-enabled/
COPY files/etc/apache2/sites-enabled/misp-ssl.conf /etc/apache2/sites-enabled/
COPY files/etc/apache2/ports.conf /etc/apache2/ports.conf
RUN set -eu \
;chmod 640 /etc/apache2/ports.conf \
;chown root.root /etc/apache2/ports.conf \
;chmod 640 /etc/apache2/sites-available/* \
;chown root.root /etc/apache2/sites-available/* \
# Configure Apache
;a2dismod status \
;a2enmod ssl \
;a2enmod rewrite \
;a2enmod headers
# Make a copy of the file store, so we can sync from it
RUN cp -R /var/www/MISP/app/files /var/www/MISP/app/files.dist
# Entrypoints
COPY files/etc/supervisor/supervisor.conf /etc/supervisor/conf.d/supervisord.conf
COPY files/entrypoint_apache.sh /
COPY files/entrypoint_cron.sh /
COPY files/entrypoint_workers.sh /
COPY files/entrypoint.sh /
ENTRYPOINT [ "/entrypoint.sh" ]
# Change Workdirectory
2019-11-26 01:23:59 +01:00
WORKDIR /var/www/MISP