andrewmichaelsmith/manuka

Docker based honeypot (Dionaea & Kippo)

manuka - docker honeypot setup script

A script to run a dionaea docker image and kippo docker image.

Next iteration of the honeypot setup script it sticks all the dependencies in the Docker images which should make it more compatible across operating systems.

pre-requisites

# docker 1.3+ and docker-compose installed
sudo apt-get update && sudo apt-get install -y python-pip
sudo pip install docker-compose

setup

# ! This will move SSH from port 22 to 65534
#
# Make sure Docker and docker-compose are installed
#
curl -q https://raw.githubusercontent.com/andrewmichaelsmith/manuka/master/run.sh > run.sh
chmod +x run.sh
./run.sh

effects

• Moves SSH server from port 22 to 65534
• Installs dionaea, micheloosterhof/kippo
• All logs and binaries saved to $PWD/var
• Sets up dionaea and kippo as system services that run on startup
• Uses docker

manuka's Issues

Port the rest of honeypot-setup-script

We shouldn't be downloading a git repo that has a bash file that just does stuff with can do with our Dockerfile. Should port the rest of it to Dockerfile.

Script fails when creating containers

Hi there. I have been trying to get Dionaea running in one form or another for 2 days and it's been a stupid process with errors a-plenty and I'm about ready to basically kill myself. I tried your first script and it never worked creating the services because the files were missing #!/bin/sh at the start.

So now I'm trying this. And I'm getting this:

ERROR: for ubuntu_dionaea_1  Cannot create container for service dionaea: create var/dionaea: "var/dionaea" includes invalid characters for a local volume name, only "[a-zA-Z0-9][a-zA-Z0-9_.-]" are allowed. If you intented to pass a host directory, use abCreating ubuntu_kippo_1 ... error

ERROR: for ubuntu_kippo_1  Cannot create container for service kippo: create var/kippo: "var/kippo" includes invalid characters for a local volume name, only "[a-zA-Z0-9][a-zA-Z0-9_.-]" are allowed. If you intented to pass a host directory, use absolute path

ERROR: for dionaea  Cannot create container for service dionaea: create var/dionaea: "var/dionaea" includes invalid characters for a local volume name, only "[a-zA-Z0-9][a-zA-Z0-9_.-]" are allowed. If you intented to pass a host directory, use absolute path

ERROR: for kippo  Cannot create container for service kippo: create var/kippo: "var/kippo" includes invalid characters for a local volume name, only "[a-zA-Z0-9][a-zA-Z0-9_.-]" are allowed. If you intented to pass a host directory, use absolute path
ERROR: Encountered errors while bringing up the project.

Any ideas? This is with an unmodified version of your script.

Write some tests

kippo takes a while to restart after re-launch/upgrade

Reproduce:

./run.sh
./run.sh
docker logs manuka_kippo_1

Issue:

Another twistd server is running, PID 18

This could either be a previously started instance of your application or a
different application entirely. To start a new one, either run it in some other
directory, or use the --pidfile and --logfile parameters to avoid clashes.

..
..

Removing stale pidfile /vol/kippo/kippo.pid