ventz/docker-cif

CIFv3 Ubuntu 16.04 Docker Container (Bearded Avenger)

Latest Version: 3.0.0b4

CIFv3 Ubuntu 16.04 Docker Container (Bearded Avenger)

https://github.com/csirtgadgets/bearded-avenger-deploymentkit/wiki

https://github.com/csirtgadgets/bearded-avenger-deploymentkit/releases

How to run CIFv3 Docker Container?

C=$(docker run --name cifv3 -it -d \
-p 443:443 \
-p 5000:5000 \
ventz/docker-cif)

Get an interactive shell onto the container:

docker exec -it $C /bin/bash

Test Setup

Once you have a shell, become the cif user:

# su cif

and do a sanity check to verify that everything works:

$ cif -p

You can do this as "root" too, but it's not recommended.

For a full suite of tests, you can also run:

/root/test.sh

Docker Volumes/Overrides

Configuration Data:
/etc/cif

Log Files:
/var/log/cif

SQLite DB:
/var/lib/cif

Docker Maintainer:

Ventz Petkov (@ventz) Dylan Jacob (@dylanjacob)

COPYRIGHT AND LICENSE

Copyright (C) 2017-2018 the CSIRT Gadgets Foundation

See: LICENSE

docker-cif's Issues

Container does not bootstrap configurations

Hi all,

Upon bringing up a container using docker-compose, there are no configurations available to the CIF instance (i.e., ./etc/cif is missing cif-router.yml and csirtg-smrt.yml) nor is there an empty database.

Unless you have something before then, or if this is actually an error, I'll try to come up with some code to bootstrap configs if there are none available at start time.

docker-compose.yml:

version: '2'
services:
  cif:
    image: ventz/cif:latest
    volumes:
      - ./etc/cif:/etc/cif
      - ./var/lib/cif:/var/lib/cif
      - ./var/log/cif:/var/log/cif
    ports:
      - "443:443"
      - "5000:5000"

problem: doesn't work with 3.0.0b5

https://github.com/csirtgadgets/bearded-avenger-deploymentkit/releases/tag/3.0.0b5

let me know if that works for you...

MILESTONE: 3.0.0 rc

This issue is meant to be a "master" issue to discuss the remaining items to be resolved in order to bring us up to speed with bearded avenger release candidate.

I believe, at this point we are able to achieve a successful Ansible build (or will be able to once csirtgadgets.cif 0.0.9 is available from Ansible Galaxy), however, there are some glaring issues that make the resulting container unusable.

The main issue seems to revolve around the .cif.yml file and the token contained within. When running any command, such as a query or ping, an error is thrown saying "Unauthorized".

Lets start here and see where we end up, shall we?