MISP Docker (XME edition)
 
 
 
 
Go to file
Chris Halls 5e390d610a Install latest cybox and stix versions
The versions pinned by the Dockerfile were too old and failed the
diagnostics test.

We switch to using the latest Github revision. This mirrors the
main MISP repository installation script behaviour (INSTALL/INSTALL.sh)
2020-01-10 15:10:10 +01:00
proxy Adapt the proxy part to fit with the new naming et simplified db part 2018-10-17 19:20:26 +02:00
web Install latest cybox and stix versions 2020-01-10 15:10:10 +01:00
.gitignore use .env file instead of hardcoded environment variables in the yml file 2019-07-28 09:40:54 +03:00
.travis.yml added nginx build check and travis CI build status icon 2019-05-02 11:57:38 +10:00
README.md chg: [doc] .env update 2019-08-21 17:39:53 +02:00
docker-compose-nginx.yml MYSQL Host from Env 2019-09-03 09:31:44 -04:00
docker-compose.yml MYSQL Host from Env 2019-09-03 09:29:47 -04:00
template.env MYSQL Host from Env 2019-09-03 09:29:47 -04:00

README.md

MISP Docker

The files in this repository are used to create a Docker container running a MISP ("Malware Information Sharing Platform") instance.

I rewrote the Docker file to split the components in multiple containers (which is more in the philosophy of Docker). Therefore there is no longer a Dockerfile in the root directory.

The MISP container needs at least a MySQL container to store the data. By default it listen to port 80. I highly recommend to serve it behind a NGinx or Apache reverse proxy.

The build is based on Ubuntu and will install all the required components. The following configuration steps are performed automatically:

  • Reconfiguration of the base URL in config.php
  • Generation of a new salt in config.php
  • Generation of a self-signed certificate
  • Optimization of the PHP environment (php.ini) to match the MISP recommended values
  • Creation of the MySQL database
  • Generation of the admin PGP key

Config

  • add your ".crt" and ".key" files to the ./proxy/ssl folder If not implementing SSL (not recommended) then simply comment out the appropriate lines in the "./proxy/default.conf" file.
  • Update "server_name" in default.conf file (will implement ENVIRONMENT VARIABLE in the future)

Optional NGINX config

Included is an optional Docker Compose file 'docker-compose-nginx.yml' to spin up a reverse proxy to sit in front of MISP.

Building your image

Fetch files

$ git clone https://github.com/MISP/misp-docker
$ cd misp-docker
# Copy template.env to .env (on the root directory) and edit the environment variables at .env file
$ cp template.env .env
$ vi .env

Build the containers

$ docker-compose build
or
$ docker-compose -f docker-compose-nginx.yml build

Run containers

$ docker-compose up
or
$ docker-compose -f docker-compose-nginx.yml up