Malin/krawl.es
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
30732cd189228292d40502f8420abf157d97ea1e
krawl.es/Dockerfile

33 lines
800 B
Docker
Raw Normal View History

chore: update Dockerfile and requirements for Python 3.13, enhance error handling in config and tracker modules
2026-03-01 21:52:27 +01:00
FROM python:3.13-slim
First commit
2025-12-14 19:08:01 +01:00
LABEL org.opencontainers.image.source=https://github.com/BlessedRebuS/Krawl
WORKDIR /app
Add logs directory bind mount with entrypoint permission fix - Add ./logs:/app/logs volume mount to docker-compose.yaml for log access - Create entrypoint.sh script that fixes directory ownership at startup - Install gosu in Dockerfile for secure privilege dropping - Use ENTRYPOINT to run permission fix as root, then drop to krawl user This ensures bind-mounted directories have correct permissions even when Docker creates them as root on the host.
2026-01-02 13:52:51 -06:00
# Install gosu for dropping privileges
chore: update Dockerfile and requirements for Python 3.13, enhance error handling in config and tracker modules
2026-03-01 21:52:27 +01:00
RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends gosu && \
Add logs directory bind mount with entrypoint permission fix - Add ./logs:/app/logs volume mount to docker-compose.yaml for log access - Create entrypoint.sh script that fixes directory ownership at startup - Install gosu in Dockerfile for secure privilege dropping - Use ENTRYPOINT to run permission fix as root, then drop to krawl user This ensures bind-mounted directories have correct permissions even when Docker creates them as root on the host.
2026-01-02 13:52:51 -06:00
rm -rf /var/lib/apt/lists/*
Migrate configuration from environment variables to YAML file - Add YAML-based configuration loaded from config.yaml (CONFIG_LOCATION env var) - Add PyYAML dependency and install requirements in Dockerfile - Replace Config.from_env() with get_config() singleton pattern - Remove server_header from config (now randomized from wordlists only) - Update docker-compose.yaml to mount config.yaml read-only - Update Helm chart: restructure values.yaml, generate config.yaml in ConfigMap - Update Kubernetes manifests: ConfigMap now contains config.yaml, deployments mount it - Remove Helm secret.yaml (dashboard path now auto-generated in config.yaml)
2026-01-02 13:39:54 -06:00
COPY requirements.txt /app/
chore: update Dockerfile and requirements for Python 3.13, enhance error handling in config and tracker modules
2026-03-01 21:52:27 +01:00
RUN pip install --no-cache-dir --upgrade pip && \
pip install --no-cache-dir -r requirements.txt
Migrate configuration from environment variables to YAML file - Add YAML-based configuration loaded from config.yaml (CONFIG_LOCATION env var) - Add PyYAML dependency and install requirements in Dockerfile - Replace Config.from_env() with get_config() singleton pattern - Remove server_header from config (now randomized from wordlists only) - Update docker-compose.yaml to mount config.yaml read-only - Update Helm chart: restructure values.yaml, generate config.yaml in ConfigMap - Update Kubernetes manifests: ConfigMap now contains config.yaml, deployments mount it - Remove Helm secret.yaml (dashboard path now auto-generated in config.yaml)
2026-01-02 13:39:54 -06:00
First commit
2025-12-14 19:08:01 +01:00
COPY src/ /app/src/
COPY wordlists.json /app/
Add logs directory bind mount with entrypoint permission fix - Add ./logs:/app/logs volume mount to docker-compose.yaml for log access - Create entrypoint.sh script that fixes directory ownership at startup - Install gosu in Dockerfile for secure privilege dropping - Use ENTRYPOINT to run permission fix as root, then drop to krawl user This ensures bind-mounted directories have correct permissions even when Docker creates them as root on the host.
2026-01-02 13:52:51 -06:00
COPY entrypoint.sh /app/
feat: split honeypot and dashboard into separate services on dedicated ports - Honeypot listens on port 5010 - Dashboard listens on port 5123 at URL / - Add app_dashboard.py as standalone FastAPI app - Add start.sh to launch both uvicorn processes - Fix dashboard_path computation to return "" at root (avoid double-slash URLs) - Update Dockerfile, docker-compose.yaml, config.yaml, config.py Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-19 20:16:35 +01:00
COPY start.sh /app/
fixed categorization visualization, fixed date in the dashboard, fixed attack regex detection
2026-01-08 19:20:22 +01:00
COPY config.yaml /app/
First commit
2025-12-14 19:08:01 +01:00
RUN useradd -m -u 1000 krawl && \
Add background task to export suspicious IPs to text file - Implement export-malicious-ips task that queries distinct IPs flagged as is_suspicious from database and writes to exports/malicious_ips.txt - Add exports volume mount to docker-compose.yaml for host persistence - Update entrypoint.sh to fix ownership of exports directory for krawl user - Update Dockerfile to create /app/exports directory during build Other tasks can be added by creating them in the tasks dir using the same setup as this task. All tasks *MUST* include a TASK_CONFIG dict and a main method in the file to work correctly.
2026-01-05 11:54:02 -06:00
mkdir -p /app/logs /app/data /app/exports && \
Add logs directory bind mount with entrypoint permission fix - Add ./logs:/app/logs volume mount to docker-compose.yaml for log access - Create entrypoint.sh script that fixes directory ownership at startup - Install gosu in Dockerfile for secure privilege dropping - Use ENTRYPOINT to run permission fix as root, then drop to krawl user This ensures bind-mounted directories have correct permissions even when Docker creates them as root on the host.
2026-01-02 13:52:51 -06:00
chown -R krawl:krawl /app && \
feat: split honeypot and dashboard into separate services on dedicated ports - Honeypot listens on port 5010 - Dashboard listens on port 5123 at URL / - Add app_dashboard.py as standalone FastAPI app - Add start.sh to launch both uvicorn processes - Fix dashboard_path computation to return "" at root (avoid double-slash URLs) - Update Dockerfile, docker-compose.yaml, config.yaml, config.py Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-19 20:16:35 +01:00
chmod +x /app/entrypoint.sh /app/start.sh
First commit
2025-12-14 19:08:01 +01:00
feat: split honeypot and dashboard into separate services on dedicated ports - Honeypot listens on port 5010 - Dashboard listens on port 5123 at URL / - Add app_dashboard.py as standalone FastAPI app - Add start.sh to launch both uvicorn processes - Fix dashboard_path computation to return "" at root (avoid double-slash URLs) - Update Dockerfile, docker-compose.yaml, config.yaml, config.py Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-19 20:16:35 +01:00
EXPOSE 5010
EXPOSE 5123
First commit
2025-12-14 19:08:01 +01:00
ENV PYTHONUNBUFFERED=1
Add logs directory bind mount with entrypoint permission fix - Add ./logs:/app/logs volume mount to docker-compose.yaml for log access - Create entrypoint.sh script that fixes directory ownership at startup - Install gosu in Dockerfile for secure privilege dropping - Use ENTRYPOINT to run permission fix as root, then drop to krawl user This ensures bind-mounted directories have correct permissions even when Docker creates them as root on the host.
2026-01-02 13:52:51 -06:00
ENTRYPOINT ["/app/entrypoint.sh"]
feat: split honeypot and dashboard into separate services on dedicated ports - Honeypot listens on port 5010 - Dashboard listens on port 5123 at URL / - Add app_dashboard.py as standalone FastAPI app - Add start.sh to launch both uvicorn processes - Fix dashboard_path computation to return "" at root (avoid double-slash URLs) - Update Dockerfile, docker-compose.yaml, config.yaml, config.py Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-19 20:16:35 +01:00
CMD ["/app/start.sh"]
Reference in New Issue Copy Permalink