e8d0c71bfb
* docker-fixes: (33 commits) fix test output set default path and fix restore Set limit to bail out on increase timeout for ES sync restore deleted files Test updates Move vulnwhisperer tests to a script standardise /tmp to /opt Update test Add docker test script Expose Logstash API port sudo chown fix Fix permissions for ES Fix build command Test travis docker update kibana objects to match template update index template Retry template installation a few times Add initial ELK6 index template ... # Conflicts: # .travis.yml # configs/test.ini # docker-compose-test.yml # docker-compose.v6.yml # resources/elk5-old_compatibility/logstash/1000_nessus_process_file.conf # resources/elk6/init_kibana.sh # resources/elk6/pipeline/1000_nessus_process_file.conf # resources/elk6/pipeline/2000_qualys_web_scans.conf # resources/elk6/pipeline/3000_openvas.conf
99 lines
2.8 KiB
YAML
99 lines
2.8 KiB
YAML
version: '2'
|
|
services:
|
|
elasticsearch:
|
|
image: docker.elastic.co/elasticsearch/elasticsearch:6.6.0
|
|
container_name: elasticsearch
|
|
environment:
|
|
- cluster.name=vulnwhisperer
|
|
- bootstrap.memory_lock=true
|
|
- "ES_JAVA_OPTS=-Xms1g -Xmx1g"
|
|
- xpack.security.enabled=false
|
|
- cluster.routing.allocation.disk.threshold_enabled=false
|
|
- path.repo=/snapshots
|
|
ulimits:
|
|
memlock:
|
|
soft: -1
|
|
hard: -1
|
|
nofile:
|
|
soft: 65536
|
|
hard: 65536
|
|
mem_limit: 8g
|
|
volumes:
|
|
- ./data/esdata1:/usr/share/elasticsearch/data
|
|
- ./data/es_snapshots:/snapshots
|
|
ports:
|
|
- 9200:9200
|
|
#restart: always
|
|
networks:
|
|
esnet:
|
|
aliases:
|
|
- elasticsearch.local
|
|
|
|
kibana:
|
|
image: docker.elastic.co/kibana/kibana:6.6.0
|
|
container_name: kibana
|
|
environment:
|
|
SERVER_NAME: kibana
|
|
ELASTICSEARCH_URL: http://elasticsearch:9200
|
|
ports:
|
|
- 5601:5601
|
|
depends_on:
|
|
- elasticsearch
|
|
networks:
|
|
esnet:
|
|
aliases:
|
|
- kibana.local
|
|
|
|
kibana-config:
|
|
image: alpine
|
|
container_name: kibana-config
|
|
volumes:
|
|
- ./resources/elk6/init_kibana.sh:/opt/init_kibana.sh
|
|
- ./resources/elk6/kibana_APIonly.json:/opt/kibana_APIonly.json
|
|
- ./resources/elk6/logstash-vulnwhisperer-template.json:/opt/index-template.json
|
|
command: sh -c "apk add --no-cache curl bash && chmod +x /opt/init_kibana.sh && chmod +r /opt/kibana_APIonly.json && cd /opt/ && /bin/bash /opt/init_kibana.sh" # /opt/kibana_APIonly.json"
|
|
networks:
|
|
esnet:
|
|
aliases:
|
|
- kibana-config.local
|
|
|
|
logstash:
|
|
image: docker.elastic.co/logstash/logstash:6.6.0
|
|
container_name: logstash
|
|
volumes:
|
|
- ./resources/elk6/pipeline/:/usr/share/logstash/pipeline
|
|
- ./data/vulnwhisperer/:/opt/VulnWhisperer/data
|
|
# - ./resources/elk6/logstash.yml:/usr/share/logstash/config/logstash.yml
|
|
environment:
|
|
- xpack.monitoring.enabled=false
|
|
depends_on:
|
|
- elasticsearch
|
|
ports:
|
|
- 9600:9600
|
|
networks:
|
|
esnet:
|
|
aliases:
|
|
- logstash.local
|
|
vulnwhisperer:
|
|
# image: hasecuritysolutions/vulnwhisperer:latest
|
|
image: vulnwhisperer-local
|
|
container_name: vulnwhisperer
|
|
entrypoint: [
|
|
"vuln_whisperer",
|
|
"-F",
|
|
"-c",
|
|
"/opt/VulnWhisperer/vulnwhisperer.ini",
|
|
"--mock",
|
|
"--mock_dir",
|
|
"/tests/data"
|
|
]
|
|
volumes:
|
|
- ./data/vulnwhisperer/:/opt/VulnWhisperer/data
|
|
# - ./resources/elk6/vulnwhisperer.ini:/opt/VulnWhisperer/vulnwhisperer.ini
|
|
- ./configs/test.ini:/opt/VulnWhisperer/vulnwhisperer.ini
|
|
- ./tests/data/:/tests/data
|
|
network_mode: host
|
|
|
|
networks:
|
|
esnet:
|