mirror of
https://github.com/Strategic-Automation/violin.git
synced 2026-08-14 12:33:37 +02:00
3b21e0a92a
* fix: bump distribution version to 3.0.1 * feat(benchmark): introduce benchmark runner engine, Docker containerization, and calibration datasets * Fix URL/path scope exclusions and update duck-store template - Modified targets.py to ensure that excluding a specific URL or path does not result in the entire host being blocked. Implemented a strict command payload check for excluded endpoints. - Updated duck-store benchmark scope template to explicitly block the /vulnerabilities endpoint (which leaks intentional challenges) while allowing access to endpoint documentation. * fix: correct scope.yaml indentation and refine guard blocking messages * fix: resolve ModuleNotFoundError when score.py is executed directly --------- Co-authored-by: Dan <dan@strategicautomation.local>
73 lines
2.0 KiB
Docker
73 lines
2.0 KiB
Docker
FROM kalilinux/kali-rolling:latest
|
|
|
|
# Install Python 3, build dependencies, and pentest tools
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
python3 \
|
|
python3-venv \
|
|
python3-pip \
|
|
git \
|
|
curl \
|
|
ca-certificates \
|
|
dnsutils \
|
|
jq \
|
|
nmap \
|
|
gobuster \
|
|
sqlmap \
|
|
nikto \
|
|
hydra \
|
|
ffuf \
|
|
whatweb \
|
|
wafw00f \
|
|
exploitdb \
|
|
nuclei \
|
|
httpx-toolkit \
|
|
dnsx \
|
|
subfinder \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& ln -sf /usr/bin/python3 /usr/bin/python
|
|
|
|
|
|
# Install uv package manager & hermes-agent CLI + violin plugin deps
|
|
RUN curl -LsSf https://astral.sh/uv/install.sh | sh
|
|
ENV PATH="/root/.local/bin:/root/.cargo/bin:${PATH}"
|
|
ENV HOME="/root"
|
|
RUN pip install --ignore-installed --break-system-packages \
|
|
hermes-agent \
|
|
duckduckgo-search \
|
|
tirith \
|
|
filelock \
|
|
bashlex \
|
|
netaddr \
|
|
yarl
|
|
|
|
|
|
|
|
# Set up working directory
|
|
WORKDIR /violin
|
|
|
|
# Copy pyproject.toml and lock files first for efficient caching
|
|
COPY pyproject.toml uv.lock /violin/
|
|
|
|
# Copy repo contents
|
|
COPY . /violin/
|
|
|
|
# Install the violin profile into Hermes per official distribution.yaml spec
|
|
RUN hermes profile install /violin --name violin -y
|
|
|
|
# Hermes sets $HOME to /root/.hermes/profiles/violin/home when running with -p violin.
|
|
# Guard script refs use $HOME/.hermes/profiles/violin/scripts/... which becomes nested.
|
|
# Create symlinks so the path resolves cleanly under all HOME configurations.
|
|
RUN mkdir -p /root/.hermes/profiles/violin/.hermes/profiles \
|
|
&& ln -sf /root/.hermes/profiles/violin /root/.hermes/profiles/violin/.hermes/profiles/violin \
|
|
&& mkdir -p /root/.hermes/profiles/violin/home/.hermes/profiles \
|
|
&& ln -sf /root/.hermes/profiles/violin /root/.hermes/profiles/violin/home/.hermes/profiles/violin
|
|
|
|
# Sync virtualenv dependencies
|
|
RUN uv sync --dev
|
|
|
|
# Ensure host engagements folder can be mounted
|
|
VOLUME ["/violin/engagements"]
|
|
|
|
# Default entrypoint
|
|
CMD ["uv", "run", "python", "-m", "benchmark.run"]
|