anti
9f93a8502c
pip install cowrie omits the data/ directory (fake filesystem, passwd, etc.) required at import time. Clone and install from source instead. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
37 lines
1.2 KiB
Docker
37 lines
1.2 KiB
Docker
ARG BASE_IMAGE=debian:bookworm-slim
|
|
FROM ${BASE_IMAGE}
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
python3 python3-pip python3-venv \
|
|
libssl-dev libffi-dev \
|
|
git authbind \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN useradd -m -s /bin/bash cowrie
|
|
|
|
WORKDIR /home/cowrie
|
|
# pip install strips data/honeyfs — clone source so the fake filesystem is included
|
|
RUN git clone --depth 1 https://github.com/cowrie/cowrie.git /tmp/cowrie-src \
|
|
&& python3 -m venv cowrie-env \
|
|
&& cowrie-env/bin/pip install --no-cache-dir /tmp/cowrie-src jinja2 \
|
|
&& rm -rf /tmp/cowrie-src
|
|
|
|
# Authbind to bind port 22 as non-root
|
|
RUN touch /etc/authbind/byport/22 /etc/authbind/byport/2222 \
|
|
&& chmod 500 /etc/authbind/byport/22 /etc/authbind/byport/2222 \
|
|
&& chown cowrie /etc/authbind/byport/22 /etc/authbind/byport/2222
|
|
|
|
RUN mkdir -p /home/cowrie/cowrie-env/etc \
|
|
/home/cowrie/cowrie-env/var/log/cowrie \
|
|
/home/cowrie/cowrie-env/var/run \
|
|
&& chown -R cowrie /home/cowrie/cowrie-env/etc \
|
|
/home/cowrie/cowrie-env/var
|
|
|
|
COPY cowrie.cfg.j2 /home/cowrie/cowrie.cfg.j2
|
|
COPY entrypoint.sh /entrypoint.sh
|
|
RUN chmod +x /entrypoint.sh
|
|
|
|
USER cowrie
|
|
EXPOSE 22 2222
|
|
ENTRYPOINT ["/entrypoint.sh"]
|