Add docker stuff

.github/workflows/docker-image.yml

@@ -0,0 +1,14 @@
+name: docker image
+
+on:
+  push:
+    branches: ["master"]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v3
+    - name: Build the Docker image
+      run: docker build ./docker --file docker/Dockerfile --tag capev2:$(date +%s)

docker-compose.yml

@@ -0,0 +1,31 @@
+services:
+  cape-db:
+    image: postgres:bookworm
+    hostname: cape-db
+    restart: always
+    environment:
+      POSTGRES_PASSWORD: postgres
+      POSTGRES_DB: cape
+      PGDATA: /var/lib/postgresql/data/pgdata
+    volumes:
+      - /docker/pg-data:/var/lib/postgresql/data
+    healthcheck:
+      test: [ "CMD-SHELL", "pg_isready", "-d", "cape" ]
+      interval: 1s
+      timeout: 60s
+      retries: 5
+      start_period: 80s
+
+  cape-server:
+    build: ./docker/
+    hostname: cape-server
+    links:
+      - cape-db
+    depends_on:
+      cape-db:
+        condition: service_healthy
+    ports:
+      - "127.0.0.1:2042:2042" # result server
+      - "127.0.0.1:8000:8000" # web ui
+    volumes:
+      - ./docker/conf:/cape/conf

docker/Dockerfile

@@ -0,0 +1,22 @@
+FROM python:3.11-bookworm
+
+RUN apt-get update ; \
+    apt-get upgrade -y ; \
+    apt-get install -y git libgraphviz-dev tcpdump
+
+COPY pcap.sh pcap.sh
+
+RUN useradd -ms /bin/bash cape
+
+COPY install.sh install.sh
+RUN bash install.sh
+
+WORKDIR /cape
+
+RUN bash conf/copy_configs.sh
+RUN chown -R cape:cape /cape
+
+COPY run.sh run.sh
+
+USER cape
+ENTRYPOINT ["bash", "run.sh"]

docker/install.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+
+git clone https://github.com/nbdy/CAPEv2 cape
+cd cape
+bash extra/libvirt_installer.sh
+bash extra/yara_installer.sh
+
+python -m venv venv
+source venv/bin/activate
+pip install -r requirements.txt
+pip install -r extra/optional_dependencies.txt
+pip install -U flare-floss

docker/pcap.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+
+groupadd pcap
+usermod -a -G pcap cape
+chgrp pcap /usr/bin/tcpdump
+setcap cap_net_raw,cap_net_admin=eip /usr/bin/tcpdump

docker/run.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+
+source venv/bin/activate
+python cuckoo.py &
+
+cd web
+python manage.py migrate
+python manage.py runserver

extra/optional_dependencies.txt

@@ -23,4 +23,4 @@ urlextract==1.5.0
 pdfminer==20191125
 pg_activity
 python-tlsh
-pyattck = "7.1.2"
+pyattck==7.1.2