Jeffrey Martin
f1db8caa79
Latest rubygems release for 3.1.0 vendors bundler 2.1.0 creating compatibilty issues. Lock for now until all relates issues can be addressed.
70 lines
2.3 KiB
Docker
70 lines
2.3 KiB
Docker
FROM ruby:2.6.5-alpine3.10 AS builder
|
|
LABEL maintainer="Rapid7"
|
|
|
|
ARG BUNDLER_ARGS="--jobs=8 --without development test coverage"
|
|
ENV APP_HOME=/usr/src/metasploit-framework
|
|
ENV BUNDLE_IGNORE_MESSAGES="true"
|
|
WORKDIR $APP_HOME
|
|
|
|
COPY Gemfile* metasploit-framework.gemspec Rakefile $APP_HOME/
|
|
COPY lib/metasploit/framework/version.rb $APP_HOME/lib/metasploit/framework/version.rb
|
|
COPY lib/metasploit/framework/rails_version_constraint.rb $APP_HOME/lib/metasploit/framework/rails_version_constraint.rb
|
|
COPY lib/msf/util/helper.rb $APP_HOME/lib/msf/util/helper.rb
|
|
|
|
RUN apk add --no-cache \
|
|
autoconf \
|
|
bison \
|
|
build-base \
|
|
ruby-dev \
|
|
openssl-dev \
|
|
readline-dev \
|
|
sqlite-dev \
|
|
postgresql-dev \
|
|
libpcap-dev \
|
|
libxml2-dev \
|
|
libxslt-dev \
|
|
yaml-dev \
|
|
zlib-dev \
|
|
ncurses-dev \
|
|
git \
|
|
&& echo "gem: --no-document" > /etc/gemrc \
|
|
&& gem update --system 3.0.6 \
|
|
&& bundle install --clean --no-cache --system $BUNDLER_ARGS \
|
|
# temp fix for https://github.com/bundler/bundler/issues/6680
|
|
&& rm -rf /usr/local/bundle/cache \
|
|
# needed so non root users can read content of the bundle
|
|
&& chmod -R a+r /usr/local/bundle
|
|
|
|
|
|
FROM ruby:2.6.5-alpine3.10
|
|
LABEL maintainer="Rapid7"
|
|
|
|
ENV APP_HOME=/usr/src/metasploit-framework
|
|
ENV NMAP_PRIVILEGED=""
|
|
ENV METASPLOIT_GROUP=metasploit
|
|
|
|
# used for the copy command
|
|
RUN addgroup -S $METASPLOIT_GROUP
|
|
|
|
RUN apk add --no-cache bash sqlite-libs nmap nmap-scripts nmap-nselibs postgresql-libs python python3 ncurses libcap su-exec
|
|
|
|
RUN /usr/sbin/setcap cap_net_raw,cap_net_bind_service=+eip $(which ruby)
|
|
RUN /usr/sbin/setcap cap_net_raw,cap_net_bind_service=+eip $(which nmap)
|
|
|
|
COPY --from=builder /usr/local/bundle /usr/local/bundle
|
|
RUN chown -R root:metasploit /usr/local/bundle
|
|
COPY . $APP_HOME/
|
|
RUN chown -R root:metasploit $APP_HOME/
|
|
RUN chmod 664 $APP_HOME/Gemfile.lock
|
|
RUN cp -f $APP_HOME/docker/database.yml $APP_HOME/config/database.yml
|
|
|
|
WORKDIR $APP_HOME
|
|
|
|
# we need this entrypoint to dynamically create a user
|
|
# matching the hosts UID and GID so we can mount something
|
|
# from the users home directory. If the IDs don't match
|
|
# it results in access denied errors.
|
|
ENTRYPOINT ["docker/entrypoint.sh"]
|
|
|
|
CMD ["./msfconsole", "-r", "docker/msfconsole.rc", "-y", "$APP_HOME/config/database.yml"]
|