docker/Dockerfile-live - main - bear/zaproxy

docker/Dockerfile-live
105 строк3 KB
Simon Bennetts
Docker: add awscli
28 мар 2022, 17:14
28 мар 2022, 17:14e369efc
# This dockerfile builds a 'live' zap docker image using the latest files in the repos
FROM ubuntu:20.04
LABEL maintainer="psiinon@gmail.com"

ARG DEBIAN_FRONTEND=noninteractive
ARG WEBSWING_URL=""

RUN apt-get update && apt-get install -q -y --fix-missing \
	make \
	ant \
	automake \
	autoconf \
	gcc g++ \
	openjdk-11-jdk \
	wget \
	curl \
	xmlstarlet \
	unzip \
	git \
	openbox \
	xterm \
	net-tools \
	python3-pip \
	python-is-python3 \
	firefox \
	vim \
	xvfb \
	x11vnc && \
	apt-get clean && \
	rm -rf /var/lib/apt/lists/*  && \
	useradd -d /home/zap -m -s /bin/bash zap && \
	echo zap:zap | chpasswd && \
	mkdir /zap  && \
	chown zap /zap && \
	chgrp zap /zap && \
	mkdir /zap-src  && \
	chown zap /zap-src && \
	chgrp zap /zap-src

RUN pip3 install --upgrade awscli pip python-owasp-zap-v2.4 pyyaml urllib3 zapcli

WORKDIR /zap-src

#Change to the zap user so things get done as the right person (apart from copy)
USER zap

RUN mkdir /home/zap/.vnc

ENV JAVA_HOME /usr/lib/jvm/java-11-openjdk-amd64/
ENV PATH $JAVA_HOME/bin:/zap/:$PATH

ENV WEBSWING_VERSION 21.2.5

# Pull the ZAP repo
RUN git clone --depth 1 https://github.com/zaproxy/zaproxy.git && \
	# Build ZAP with weekly add-ons
	cd zaproxy && \
	ZAP_WEEKLY_ADDONS_NO_TEST=true ./gradlew :zap:prepareDistWeekly && \
	cp -R /zap-src/zaproxy/zap/build/distFilesWeekly/* /zap/ && \
	rm -rf /zap-src/* && \
	cd /zap/ && \
	# Setup Webswing
	if [ -z "$WEBSWING_URL" ] ; \
	then curl -s -L  "https://dev.webswing.org/files/public/webswing-examples-eval-${WEBSWING_VERSION}-distribution.zip" > webswing.zip; \
	else curl -s -L  "$WEBSWING_URL-${WEBSWING_VERSION}-distribution.zip" > webswing.zip; fi && \
	unzip webswing.zip && \
	rm webswing.zip && \
	mv webswing-* webswing && \
	# Remove Webswing bundled examples
	rm -Rf webswing/apps/

ENV ZAP_PATH /zap/zap.sh
# Default port for use with zapcli
ENV ZAP_PORT 8080
ENV IS_CONTAINERIZED true
ENV HOME /home/zap/
ENV LC_ALL=C.UTF-8
ENV LANG=C.UTF-8

COPY zap* CHANGELOG.md /zap/
COPY webswing.config /zap/webswing/
COPY webswing.properties /zap/webswing/
COPY policies /home/zap/.ZAP_D/policies/
COPY policies /root/.ZAP_D/policies/
COPY scripts /home/zap/.ZAP_D/scripts/
COPY .xinitrc /home/zap/

RUN echo "zap2docker-live" > /zap/container

#Copy doesn't respect USER directives so we need to chown and to do that we need to be root
USER root

RUN chown zap:zap /zap/* && \
	chown zap:zap /zap/webswing/webswing.config && \
	chown zap:zap /zap/webswing/webswing.properties && \
	chown zap:zap -R /home/zap/.ZAP_D/ && \
	chown zap:zap /home/zap/.xinitrc && \
	chmod a+x /home/zap/.xinitrc && \
	chmod +x /zap/zap.sh && \
	rm -rf /zap-src

WORKDIR /zap

USER zap
HEALTHCHECK --retries=5 --interval=5s CMD zap-cli status