forked from wazuh/wazuh-docker
92 lines
3.6 KiB
Docker
92 lines
3.6 KiB
Docker
# Wazuh Docker Copyright (C) 2021 Wazuh Inc. (License GPLv2)
|
|
FROM ubuntu:focal AS builder
|
|
|
|
ARG WAZUH_VERSION=4.3.0
|
|
ARG INSTALL_DIR=/usr/share/wazuh-dashboard
|
|
|
|
# Update and install dependencies
|
|
RUN apt-get update && apt install curl libcap2-bin xz-utils -y
|
|
|
|
# Create Install dir
|
|
RUN mkdir -p $INSTALL_DIR
|
|
|
|
# Download and extract Wazuh dashboard base
|
|
RUN curl -o wazuh-dashboard-base.tar.xz https://packages.wazuh.com/stack/dashboard/base/wazuh-dashboard-base-$WAZUH_VERSION-linux-x64.tar.xz && \
|
|
tar -xf wazuh-dashboard-base.tar.xz --directory $INSTALL_DIR --strip-components=1
|
|
|
|
# Download and extract demo certificates
|
|
RUN curl -O https://packages.wazuh.com/stack/demo-certs.tar.gz && \
|
|
tar -xf demo-certs.tar.gz && rm -f demo-certs.tar.gz
|
|
|
|
# Create certs dir
|
|
RUN mkdir -p $INSTALL_DIR/config/certs
|
|
|
|
# Copy Wazuh dashboard demo certs to install config dir
|
|
RUN cp certs/demo-dashboard.pem $INSTALL_DIR/config/certs/demo-dashboard.pem && \
|
|
cp certs/demo-dashboard-key.pem $INSTALL_DIR/config/certs/demo-dashboard-key.pem && \
|
|
cp certs/root-ca.pem $INSTALL_DIR/config/certs/root-ca.pem
|
|
|
|
RUN chmod 640 $INSTALL_DIR/config/certs/*
|
|
|
|
# Create and configure Wazuh dashboard keystore
|
|
RUN $INSTALL_DIR/bin/opensearch-dashboards-keystore create --allow-root && \
|
|
echo kibanaserver | $INSTALL_DIR/bin/opensearch-dashboards-keystore add opensearch.username --stdin --allow-root && \
|
|
echo kibanaserver | $INSTALL_DIR/bin/opensearch-dashboards-keystore add opensearch.password --stdin --allow-root
|
|
|
|
# Install Wazuh App
|
|
RUN $INSTALL_DIR/bin/opensearch-dashboards-plugin install https://packages.wazuh.com/4.x/ui/dashboard/wazuh-$WAZUH_VERSION.zip --allow-root
|
|
|
|
# Copy and set permissions to config files
|
|
COPY config/opensearch_dashboards.yml $INSTALL_DIR/config/
|
|
COPY config/wazuh.yml $INSTALL_DIR/data/wazuh/config/
|
|
RUN chown 101:101 $INSTALL_DIR/config/opensearch_dashboards.yml && chmod 664 $INSTALL_DIR/config/opensearch_dashboards.yml
|
|
|
|
# Create and set permissions to data directories
|
|
RUN mkdir -p $INSTALL_DIR/data/wazuh && chown -R 101:101 $INSTALL_DIR/data/wazuh && chmod -R 775 $INSTALL_DIR/data/wazuh
|
|
RUN mkdir -p $INSTALL_DIR/data/wazuh/config && chown -R 101:101 $INSTALL_DIR/data/wazuh/config && chmod -R 775 $INSTALL_DIR/data/wazuh/config
|
|
RUN mkdir -p $INSTALL_DIR/data/wazuh/logs && chown -R 101:101 $INSTALL_DIR/data/wazuh/logs && chmod -R 775 $INSTALL_DIR/data/wazuh/logs
|
|
|
|
################################################################################
|
|
# Build stage 1 (the current Wazuh dashboard image):
|
|
#
|
|
# Copy wazuh-dashboard from stage 0
|
|
# Add entrypoint
|
|
# Add wazuh_app_config
|
|
################################################################################
|
|
FROM ubuntu:focal
|
|
|
|
# Set environment variables
|
|
ENV USER="wazuh-dashboard" \
|
|
GROUP="wazuh-dashboard" \
|
|
NAME="wazuh-dashboard" \
|
|
INSTALL_DIR="/usr/share/wazuh-dashboard"
|
|
|
|
# Create wazuh-dashboard user and group
|
|
RUN getent group $GROUP || groupadd -r -g 1000 $GROUP
|
|
RUN useradd --system \
|
|
--uid 1000 \
|
|
--no-create-home \
|
|
--home-dir $INSTALL_DIR \
|
|
--gid $GROUP \
|
|
--shell /sbin/nologin \
|
|
--comment "$USER user" \
|
|
$USER
|
|
|
|
# Copy and set permissions to scripts
|
|
COPY config/entrypoint.sh /
|
|
COPY config/wazuh_app_config.sh /
|
|
RUN chmod 700 /entrypoint.sh
|
|
RUN chmod 700 /wazuh_app_config.sh
|
|
RUN chown 1000:1000 /*.sh
|
|
|
|
# Copy Install dir from builder to current image
|
|
COPY --from=builder --chown=1000:1000 $INSTALL_DIR $INSTALL_DIR
|
|
|
|
# Set workdir and user
|
|
WORKDIR $INSTALL_DIR
|
|
USER wazuh-dashboard
|
|
|
|
# Services ports
|
|
EXPOSE 443
|
|
|
|
ENTRYPOINT [ "/entrypoint.sh" ] |