MISP Docker (XME edition)
 
 
 
 
Go to file
Chris Halls 048e8ba141 Install default PHP packages
These are the default php packages on Bionic, so we can drop the
7.3 suffix from the installed package names.

We also reduce the work apt has to do by merging the apt install
lines together into one.
2020-01-10 11:50:22 +01:00
proxy Adapt the proxy part to fit with the new naming et simplified db part 2018-10-17 19:20:26 +02:00
web Install default PHP packages 2020-01-10 11:50:22 +01:00
.gitignore use .env file instead of hardcoded environment variables in the yml file 2019-07-28 09:40:54 +03:00
.travis.yml added nginx build check and travis CI build status icon 2019-05-02 11:57:38 +10:00
README.md chg: [doc] .env update 2019-08-21 17:39:53 +02:00
docker-compose-nginx.yml MYSQL Host from Env 2019-09-03 09:31:44 -04:00
docker-compose.yml MYSQL Host from Env 2019-09-03 09:29:47 -04:00
template.env MYSQL Host from Env 2019-09-03 09:29:47 -04:00

README.md

MISP Docker

The files in this repository are used to create a Docker container running a MISP ("Malware Information Sharing Platform") instance.

I rewrote the Docker file to split the components in multiple containers (which is more in the philosophy of Docker). Therefore there is no longer a Dockerfile in the root directory.

The MISP container needs at least a MySQL container to store the data. By default it listen to port 80. I highly recommend to serve it behind a NGinx or Apache reverse proxy.

The build is based on Ubuntu and will install all the required components. The following configuration steps are performed automatically:

  • Reconfiguration of the base URL in config.php
  • Generation of a new salt in config.php
  • Generation of a self-signed certificate
  • Optimization of the PHP environment (php.ini) to match the MISP recommended values
  • Creation of the MySQL database
  • Generation of the admin PGP key

Config

  • add your ".crt" and ".key" files to the ./proxy/ssl folder If not implementing SSL (not recommended) then simply comment out the appropriate lines in the "./proxy/default.conf" file.
  • Update "server_name" in default.conf file (will implement ENVIRONMENT VARIABLE in the future)

Optional NGINX config

Included is an optional Docker Compose file 'docker-compose-nginx.yml' to spin up a reverse proxy to sit in front of MISP.

Building your image

Fetch files

$ git clone https://github.com/MISP/misp-docker
$ cd misp-docker
# Copy template.env to .env (on the root directory) and edit the environment variables at .env file
$ cp template.env .env
$ vi .env

Build the containers

$ docker-compose build
or
$ docker-compose -f docker-compose-nginx.yml build

Run containers

$ docker-compose up
or
$ docker-compose -f docker-compose-nginx.yml up