Dockerfile

# SPDX-License-Identifier: GPL-3.0-or-later
# Use a base image to build (and download) the tools on
FROM python:slim-buster as build

LABEL maintainer="support@go-forward.net" \
      vendor="Go Forward" \
      org.label-schema.name="analyze_hosts" \
      org.label-schema.description="A tool around several security tools to simplify scanning of hosts for network vulnerabilities" \
      org.label-schema.url="https://github.com/PeterMosmans/security-scripts" \
      org.label-schema.vcs-url="https://github.com/PeterMosmans/security-scripts" \
    org.label-schema.maintainer="support@go-forward.net"

WORKDIR /

# Create virtual environment
RUN python3 -m venv /opt/venv
ENV PATH="/opt/venv/bin:$PATH"

# Install necessary binaries including dependencies
# hadolint ignore=DL3008
RUN apt-get update && apt-get install -y --no-install-recommends \
    curl \
    gcc \
    git \
    libc6-dev \
    unzip \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

# Install packages as specified in the requirements.txt file
COPY requirements.txt .
RUN pip3 install -r requirements.txt  --no-cache-dir

# Clone nikto.pl
RUN git clone --depth=1 https://github.com/sullo/nikto /tmp/nikto && \
    rm -rf /tmp/nikto/program/.git && \
    mv /tmp/nikto/program /usr/lib/nikto

# Clone testssl.sh
RUN git clone --depth=1 https://github.com/drwetter/testssl.sh /tmp/testssl && \
    mkdir /usr/lib/testssl && \
    mv /tmp/testssl/bin/openssl.Linux.x86_64 /usr/lib/testssl/openssl && \
    chmod ugo+x /usr/lib/testssl/openssl && \
    mv /tmp/testssl/etc/ /usr/lib/testssl/etc/ && \
    mv /tmp/testssl/testssl.sh /usr/lib/testssl/testssl.sh && \
    chmod ugo+x /usr/lib/testssl/testssl.sh

FROM python:slim-buster as release
COPY --from=build /opt/venv /opt/venv
COPY --from=build /usr/lib/nikto/ /usr/lib/nikto/
COPY --from=build /usr/lib/testssl/ /usr/lib/testssl/
COPY analyze_hosts.py /usr/local/bin/analyze_hosts.py
COPY results_to_html.py /usr/local/bin/results_to_html.py
COPY templates/results.html /usr/share/templates/results.html
COPY fours.sh /usr/local/bin/fours.sh
RUN ln -s /usr/lib/nikto/nikto.pl /usr/local/bin/nikto.pl && \
    ln -s /usr/lib/nikto/nikto.pl /usr/local/bin/nikto && \
    ln -s /usr/local/bin/analyze_hosts.py /usr/local/bin/analyze_hosts && \
    ln -s /usr/local/bin/results_to_html.py /usr/local/bin/results_to_html && \
    ln -s /usr/lib/testssl/testssl.sh /usr/local/bin/testssl.sh

# Install necessary binaries
# hadolint ignore=DL3008
RUN apt-get update && \
    apt-get install -y --no-install-recommends \
    bsdmainutils \
    curl \
    dnsutils \
    git \
    libnet-ssleay-perl \
    make \
    nmap \
    procps \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

# Esnsure that Python output is not buffered
ENV PATH="/opt/venv/bin:$PATH" \
    LC_ALL=C.UTF-8 \
    PYTHONUNBUFFERED=1

# hadolint ignore=DL3002
USER root
WORKDIR /workdir
ENTRYPOINT ["/usr/local/bin/analyze_hosts"]
CMD ["--help"]