2022-12-10 21:09:25 +00:00
|
|
|
# vim: set ft=dockerfile:
|
2023-07-18 07:51:32 +00:00
|
|
|
ARG GOVERSION=1.20.6
|
2020-11-30 09:37:17 +00:00
|
|
|
|
|
|
|
FROM golang:${GOVERSION}-alpine AS build
|
|
|
|
|
|
|
|
WORKDIR /go/src/crowdsec
|
|
|
|
|
2023-06-27 11:43:42 +00:00
|
|
|
# We like to choose the release of re2 to use, and Alpine does not ship a static version anyway.
|
2023-06-06 13:46:25 +00:00
|
|
|
ENV RE2_VERSION=2023-03-01
|
|
|
|
|
2021-11-03 15:56:44 +00:00
|
|
|
# wizard.sh requires GNU coreutils
|
2023-06-29 14:35:19 +00:00
|
|
|
RUN apk add --no-cache git g++ gcc libc-dev make bash gettext binutils-gold coreutils pkgconfig && \
|
2023-06-06 13:46:25 +00:00
|
|
|
wget https://github.com/google/re2/archive/refs/tags/${RE2_VERSION}.tar.gz && \
|
|
|
|
tar -xzf ${RE2_VERSION}.tar.gz && \
|
|
|
|
cd re2-${RE2_VERSION} && \
|
|
|
|
make install && \
|
2023-01-04 15:43:35 +00:00
|
|
|
echo "githubciXXXXXXXXXXXXXXXXXXXXXXXX" > /etc/machine-id && \
|
2023-06-27 11:43:42 +00:00
|
|
|
go install github.com/mikefarah/yq/v4@v4.34.1
|
|
|
|
|
|
|
|
COPY . .
|
|
|
|
|
|
|
|
RUN make clean release DOCKER_BUILD=1 BUILD_STATIC=1 && \
|
2022-11-08 11:28:57 +00:00
|
|
|
cd crowdsec-v* && \
|
|
|
|
./wizard.sh --docker-mode && \
|
2023-01-04 15:43:35 +00:00
|
|
|
cd - >/dev/null && \
|
2022-11-08 11:28:57 +00:00
|
|
|
cscli hub update && \
|
|
|
|
cscli collections install crowdsecurity/linux && \
|
2023-06-27 11:43:42 +00:00
|
|
|
cscli parsers install crowdsecurity/whitelists
|
2021-03-12 10:00:08 +00:00
|
|
|
|
2023-03-27 13:38:38 +00:00
|
|
|
# In case we need to remove agents here..
|
|
|
|
# cscli machines list -o json | yq '.[].machineId' | xargs -r cscli machines delete
|
|
|
|
|
2023-01-19 10:02:23 +00:00
|
|
|
FROM alpine:latest as slim
|
2021-03-12 10:00:08 +00:00
|
|
|
|
2023-01-04 15:43:35 +00:00
|
|
|
RUN apk add --no-cache --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community tzdata bash && \
|
2022-10-11 11:32:23 +00:00
|
|
|
mkdir -p /staging/etc/crowdsec && \
|
2023-03-10 16:30:08 +00:00
|
|
|
mkdir -p /staging/etc/crowdsec/acquis.d && \
|
2022-11-08 11:28:57 +00:00
|
|
|
mkdir -p /staging/var/lib/crowdsec && \
|
2023-01-04 15:43:35 +00:00
|
|
|
mkdir -p /var/lib/crowdsec/data
|
2022-11-28 09:35:12 +00:00
|
|
|
|
2023-01-04 15:43:35 +00:00
|
|
|
COPY --from=build /go/bin/yq /usr/local/bin/yq
|
2022-02-01 11:35:57 +00:00
|
|
|
COPY --from=build /etc/crowdsec /staging/etc/crowdsec
|
2020-11-30 09:37:17 +00:00
|
|
|
COPY --from=build /usr/local/bin/crowdsec /usr/local/bin/crowdsec
|
|
|
|
COPY --from=build /usr/local/bin/cscli /usr/local/bin/cscli
|
|
|
|
COPY --from=build /go/src/crowdsec/docker/docker_start.sh /
|
2022-02-01 11:35:57 +00:00
|
|
|
COPY --from=build /go/src/crowdsec/docker/config.yaml /staging/etc/crowdsec/config.yaml
|
2023-01-04 15:43:35 +00:00
|
|
|
RUN yq -n '.url="http://0.0.0.0:8080"' | install -m 0600 /dev/stdin /staging/etc/crowdsec/local_api_credentials.yaml
|
2022-11-28 09:35:12 +00:00
|
|
|
|
2022-11-08 11:28:57 +00:00
|
|
|
ENTRYPOINT /bin/bash docker_start.sh
|
|
|
|
|
2023-01-19 10:02:23 +00:00
|
|
|
FROM slim as plugins
|
2022-11-28 09:35:12 +00:00
|
|
|
|
2022-11-08 11:28:57 +00:00
|
|
|
# Due to the wizard using cp -n, we have to copy the config files directly from the source as -n does not exist in busybox cp
|
|
|
|
# The files are here for reference, as users will need to mount a new version to be actually able to use notifications
|
2023-08-24 07:46:25 +00:00
|
|
|
COPY --from=build /go/src/crowdsec/cmd/notification-email/email.yaml /staging/etc/crowdsec/notifications/email.yaml
|
|
|
|
COPY --from=build /go/src/crowdsec/cmd/notification-http/http.yaml /staging/etc/crowdsec/notifications/http.yaml
|
|
|
|
COPY --from=build /go/src/crowdsec/cmd/notification-slack/slack.yaml /staging/etc/crowdsec/notifications/slack.yaml
|
|
|
|
COPY --from=build /go/src/crowdsec/cmd/notification-splunk/splunk.yaml /staging/etc/crowdsec/notifications/splunk.yaml
|
|
|
|
COPY --from=build /go/src/crowdsec/cmd/notification-sentinel/sentinel.yaml /staging/etc/crowdsec/notifications/sentinel.yaml
|
2021-09-09 14:05:21 +00:00
|
|
|
COPY --from=build /usr/local/lib/crowdsec/plugins /usr/local/lib/crowdsec/plugins
|
2020-11-30 09:37:17 +00:00
|
|
|
|
2023-01-19 10:02:23 +00:00
|
|
|
FROM slim as geoip
|
2022-11-08 11:28:57 +00:00
|
|
|
|
|
|
|
COPY --from=build /var/lib/crowdsec /staging/var/lib/crowdsec
|
|
|
|
|
2023-01-19 10:02:23 +00:00
|
|
|
FROM plugins as full
|
2022-11-08 11:28:57 +00:00
|
|
|
|
|
|
|
COPY --from=build /var/lib/crowdsec /staging/var/lib/crowdsec
|