valitydev/docker-misp
14
0
Fork 0
mirror of https://github.com/valitydev/docker-misp.git synced 2024-11-06 08:45:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
A (nearly) production ready Dockered MISP
44 Commits 3 Branches 25 Tags 186 KiB
Shell 56.2%
Dockerfile 30.2%
PHP 13.6%
425b712e94
Go to file
Jason Kendall 425b712e94 DockerHub build hooks
2020-01-30 10:05:56 -05:00
modules DockerHub build hooks 2020-01-30 10:05:56 -05:00
server DockerHub build hooks 2020-01-30 10:05:56 -05:00
server-configs Initial 2019-11-25 16:58:18 -05:00
.env Correct version in .env 2020-01-30 09:35:40 -05:00
.gitignore Make SSL certs in INIT mode if any part doesn't exist 2020-01-29 14:47:26 -05:00
.travis.yml Add travisci build test 2020-01-29 09:26:44 -05:00
docker-compose.yml .env files don't pass to ARGs, so make it! 2020-01-30 09:45:34 -05:00
LICENSE Create LICENSE 2020-01-29 10:29:24 -05:00
README.md Update readme for dev/test process 2020-01-29 15:25:47 -05:00

README.md

CoolAcid's MISP Docker images

Build Status

A (nearly) production ready Dockered MISP

This is based on some of the work from the DSCO docker build, nearly all of the details have been rewritten.

  • Components are split out where possible, currently this is only the MISP modules
  • Over writable configuration files
  • Allows volumes for file store
  • Cron job runs updates, pushes, and pulls - Logs go to docker logs
  • Docker-Compose uses off the shelf images for Redis and MySQL
  • Images directly from docker hub, no build required
  • Slimmed down images by using build stages and slim parent image, removes unnecessary files from images

Docker Tags

Docker hub builds the images automatically based on git tags. I try and tag using the following details

v[MISP Version][Our build version]

  • MISP version is the MISP tag we're building
  • Our build version is the iteration for our changes with the same MISP version

Getting Started

Development/Test

  • Grab the docker-compose.yml file and the server-configs directory
  • [Optional] Copy the "default" configs removing "default" and edit the files in server-configs
    • Note: A dry run without this step will try and make sane DEV configs
  • docker-compose up
  • Login to https://localhost
    • User: admin@admin.test
    • Password: admin
  • Profit

Production

  • Use docker-compose, or some other config management tool
  • Directory volume mount SSL Certs /etc/apache2/ssl/
    • DH Parameters: dhparams.pem
    • Certificate File: cert.pem
    • Certificate Key File: key.pem
    • Certificate Chain File: chain.pem
  • Directory volume mount and create configs: /var/www/MISP/app/Config/
  • Additional directory volume mounts:
    • /var/www/MISP/app/files
    • /var/www/MISP/.gnupg
    • /var/www/MISP/.smime

Image file sizes

  • Core server(Saved: 2.5GB)

    • Original Image: 3.17GB
    • First attempt: 2.24GB
    • Remove chown: 1.56GB
    • PreBuild python modules, and only pull submodules we need: 800MB
    • PreBuild PHP modules: 664MB

  • Modules (Saved: 640MB)

    • Original: 1.36GB
    • Pre-build modules: 750MB