misp-docker/README.md

65 lines
2.2 KiB
Markdown
Raw Normal View History

2020-01-29 16:26:54 +01:00
# CoolAcid's MISP Docker images
2020-01-29 15:30:26 +01:00
[![Build Status](https://travis-ci.org/coolacid/docker-misp.svg?branch=master)](https://travis-ci.org/coolacid/docker-misp)
2019-11-25 22:51:08 +01:00
A (nearly) production ready Dockered MISP
2019-11-25 23:02:49 +01:00
2020-01-29 16:26:54 +01:00
This is based on some of the work from the DSCO docker build, nearly all of the details have been rewritten.
2019-11-26 01:23:59 +01:00
2020-01-28 23:42:10 +01:00
- Components are split out where possible, currently this is only the MISP modules
2020-01-29 16:26:54 +01:00
- Over writable configuration files
2020-01-28 23:42:10 +01:00
- Allows volumes for file store
- Cron job runs updates, pushes, and pulls - Logs go to docker logs
- Docker-Compose uses off the shelf images for Redis and MySQL
- Images directly from docker hub, no build required
- Slimmed down images by using build stages and slim parent image, removes unnecessary files from images
2020-01-29 16:26:54 +01:00
# Docker Tags
2020-01-28 23:42:10 +01:00
2020-01-29 16:26:54 +01:00
[Docker hub](https://hub.docker.com/r/coolacid/docker-misp) builds the images automatically based on git tags. I try and tag using the following details
***v[MISP Version][Our build version]***
- MISP version is the MISP tag we're building
- Our build version is the iteration for our changes with the same MISP version
# Getting Started
## Development/Test
- Pull the repository
2019-11-25 23:02:49 +01:00
- Copy the "default" configs removing "default" and edit the files in `server-configs`
2020-01-29 16:26:54 +01:00
-- Note: A dry run without this step will try and make a sane DEV build for docker-compose
2020-01-28 23:42:10 +01:00
- Run `generate.sh` in `./ssl` to generate some fake certs
2019-11-25 23:02:49 +01:00
- `docker-compose up --build`
2020-01-29 16:26:54 +01:00
- Login with
-- User: admin@admin.test
-- Password: admin
## Production
- Use docker-compose, or some other config management tool
- Directory volume mount SSL Certs /etc/apache2/ssl/
-- DH Parameters: dhparams.pem
-- Certificate File: cert.pem
-- Certificate Key File: key.pem
-- Certificate Chain File: chain.pem
- Directory volume mount and create configs: /var/www/MISP/app/Config/
- Additional directory volume mounts:
-- /var/www/MISP/app/files
-- /var/www/MISP/.gnupg
-- /var/www/MISP/.smime
# Image file sizes
- Core server(Saved: 2.5GB)
-- Original Image: 3.17GB
-- First attempt: 2.24GB
-- Remove chown: 1.56GB
-- PreBuild python modules, and only pull submodules we need: 800MB
-- PreBuild PHP modules: 664MB
- Modules (Saved: 640MB)
-- Original: 1.36GB
-- Pre-build modules: 750MB