Skip to content
A (nearly) production ready Dockered MISP
PHP Shell Dockerfile
Branch: master
Clone or download
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
modules Remove env call, and copy to server build hook Jan 30, 2020
server-configs Initial Nov 25, 2019
server
.env Correct version in .env Jan 30, 2020
.gitignore Make SSL certs in INIT mode if any part doesn't exist Jan 29, 2020
.travis.yml Add travisci build test Jan 29, 2020
LICENSE Create LICENSE Jan 29, 2020
README.md Update readme for dev/test process Jan 29, 2020
docker-compose.yml .env files don't pass to ARGs, so make it! Jan 30, 2020

README.md

CoolAcid's MISP Docker images

Build Status

A (nearly) production ready Dockered MISP

This is based on some of the work from the DSCO docker build, nearly all of the details have been rewritten.

  • Components are split out where possible, currently this is only the MISP modules
  • Over writable configuration files
  • Allows volumes for file store
  • Cron job runs updates, pushes, and pulls - Logs go to docker logs
  • Docker-Compose uses off the shelf images for Redis and MySQL
  • Images directly from docker hub, no build required
  • Slimmed down images by using build stages and slim parent image, removes unnecessary files from images

Docker Tags

Docker hub builds the images automatically based on git tags. I try and tag using the following details

v[MISP Version][Our build version]

  • MISP version is the MISP tag we're building
  • Our build version is the iteration for our changes with the same MISP version

Getting Started

Development/Test

  • Grab the docker-compose.yml file and the server-configs directory
  • [Optional] Copy the "default" configs removing "default" and edit the files in server-configs
    • Note: A dry run without this step will try and make sane DEV configs
  • docker-compose up
  • Login to https://localhost
    • User: admin@admin.test
    • Password: admin
  • Profit

Production

  • Use docker-compose, or some other config management tool
  • Directory volume mount SSL Certs /etc/apache2/ssl/
    • DH Parameters: dhparams.pem
    • Certificate File: cert.pem
    • Certificate Key File: key.pem
    • Certificate Chain File: chain.pem
  • Directory volume mount and create configs: /var/www/MISP/app/Config/
  • Additional directory volume mounts:
    • /var/www/MISP/app/files
    • /var/www/MISP/.gnupg
    • /var/www/MISP/.smime

Image file sizes

  • Core server(Saved: 2.5GB)

    • Original Image: 3.17GB
    • First attempt: 2.24GB
    • Remove chown: 1.56GB
    • PreBuild python modules, and only pull submodules we need: 800MB
    • PreBuild PHP modules: 664MB
  • Modules (Saved: 640MB)

    • Original: 1.36GB
    • Pre-build modules: 750MB
You can’t perform that action at this time.