-
-
Notifications
You must be signed in to change notification settings - Fork 414
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
5 changed files
with
111 additions
and
58 deletions.
There are no files selected for viewing
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,89 @@ | ||
FROM debian:stretch as conpot-builder | ||
|
||
ENV DEBIAN_FRONTEND noninteractive | ||
|
||
# Add non-free packages, needed for snmp-mibs-downloader | ||
RUN sed -i -e 's/main/main non-free contrib/g' /etc/apt/sources.list | ||
|
||
# Install dependencies | ||
RUN apt-get update -y -qq && apt-get install --no-install-recommends -y -qq \ | ||
ipmitool \ | ||
supervisor \ | ||
tcpdump \ | ||
git \ | ||
python3-pip \ | ||
python3 \ | ||
python3-dev \ | ||
python3-setuptools \ | ||
build-essential \ | ||
python3-scapy \ | ||
python3-cffi \ | ||
wget &&\ | ||
apt-get clean && \ | ||
rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* | ||
|
||
# Copy the app from the host folder (probably a cloned repo) to the container | ||
RUN useradd -m conpot | ||
WORKDIR /opt/ | ||
RUN git clone https://github.com/mushorg/conpot.git | ||
RUN chown conpot:conpot -R /opt/conpot | ||
|
||
# Install Python requirements | ||
USER conpot | ||
ENV PATH=$PATH:/home/conpot/.local/bin | ||
WORKDIR /opt/conpot | ||
RUN pip3 install --user --no-cache-dir coverage | ||
RUN pip3 install --user --no-cache-dir -r requirements.txt | ||
|
||
# Run test cases | ||
RUN py.test -v | ||
|
||
# Install the Conpot application | ||
RUN python3.5 setup.py install --user --prefix= | ||
|
||
WORKDIR /home/conpot | ||
RUN tar -zcf conpot.tgz .local | ||
|
||
FROM debian:stretch | ||
|
||
ENV DEBIAN_FRONTEND noninteractive | ||
USER root | ||
RUN sed -i -e 's/main/main non-free contrib/g' /etc/apt/sources.list | ||
|
||
WORKDIR /home/conpot | ||
|
||
RUN apt-get update -y -qq && apt-get install --no-install-recommends -y -qq \ | ||
ipmitool \ | ||
ca-certificates \ | ||
tcpdump \ | ||
python3 \ | ||
python3-scapy \ | ||
python3-cffi \ | ||
wget &&\ | ||
apt-get clean && \ | ||
rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* | ||
|
||
RUN useradd -m conpot | ||
COPY --from=0 /home/conpot/conpot.tgz /home/conpot | ||
RUN tar -zxvf conpot.tgz && rm conpot.tgz | ||
RUN mkdir -p /etc/conpot /var/log/conpot /usr/share/wireshark && \ | ||
wget https://github.com/wireshark/wireshark/raw/master/manuf -o /usr/share/wireshark/manuf | ||
|
||
# Create directories | ||
RUN mkdir -p /var/log/conpot/ | ||
RUN mkdir -p /data/tftp/ | ||
RUN chown conpot:conpot /var/log/conpot | ||
RUN chown conpot:conpot -R /data | ||
|
||
# Clean | ||
RUN apt-get remove --purge -y wget ca-certificates && \ | ||
apt-get autoremove -y --purge && \ | ||
apt-get clean && \ | ||
rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* | ||
|
||
#EXPOSE 80 102 161/udp 502 21 69/udp | ||
USER conpot | ||
WORKDIR /home/conpot | ||
ENV USER=conpot | ||
|
||
CMD ["/home/conpot/.local/bin/conpot", "--template", "default", "--logfile", "/var/log/conpot/conpot.log", "-f", "--temp_dir", "/tmp" ] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
version: "3" | ||
services: | ||
conpot: | ||
build: ./ | ||
ports: | ||
- "80:8800" #SCADA UI, http | ||
- "102:10201" #S7Comm | ||
- "502:5020" #Modbus | ||
- "161:16100/udp" #SNMP | ||
- "47808:47808" #Bacnet | ||
- "623:6230" #IPMI | ||
- "21:2121" #FTP | ||
- "69:6969/udp" #TFTP | ||
volumes: | ||
- ./log:/var/log/conpot | ||
restart: always |