Build Automated Machine Images for MISP

Requirements

• VirtualBox
• Packer

Usage

In the file scripts/bootstrap.sh, set the value of MISP_BASEURL according to the IP address you will associate to your VM (for example: http://172.16.100.100).

Launch the generation with the VirtualBox builder:

$ packer build -only=virtualbox-iso misp.json

A VirtualBox image will be generated and stored in the folder output-virtualbox-iso. Default credentials are displayed (Web interface, SSH and MariaDB) at the end of the process. You can directly import the image in VirtualBox.

If you want to build an image for VMWare you will need to install it and to use the VMWare builder with the command:

$ packer build -only=vmware-iso misp.json

You can also launch all builders in parallel.

Modules activated by default in the VM

• MISP galaxy
• MISP modules
• MISP taxonomies

Automatic export to GitHub

$ GITHUB_AUTH_TOKEN=<your-github-auth-token>
$ TAG=$(curl https://api.github.com/repos/MISP/MISP/releases/latest | jq  -r '.tag_name')
$ ./upload.sh github_api_token=$GITHUB_AUTH_TOKEN owner=MISP repo=MISP tag=$TAG filename=./output-virtualbox-iso/MISP_demo.ova

You can add these lines in the post-processors section of the file misp.json if you want to automate the process.