Dockerfile.dev

FROM malice/alpine

LABEL maintainer "https://github.com/blacktop"

LABEL malice.plugin.repository = "https://github.com/malice-plugins/yara.git"
LABEL malice.plugin.category="av"
LABEL malice.plugin.mime="*"
LABEL malice.plugin.docker.engine="*"

ENV YARA 3.7.0

# Install Yara
COPY . /go/src/github.com/maliceio/malice-yara
RUN apk --update add --no-cache openssl file bison jansson ca-certificates
RUN apk --update add --no-cache -t .build-deps \
                                   openssl-dev \
                                   jansson-dev \
                                   build-base \
                                    mercurial \
                                    musl-dev \
                                   libc-dev \
                                   file-dev \
                                   automake \
                                   autoconf \
                                   libtool \
                                   flex \
                                    bash \
                                    wget \
                                    git \
                                    gcc \
                                    go \
                                   git \
                                   gcc \
  && echo "===> Install Yara from source..." \
  && cd /tmp \
  && git clone --recursive --branch v${YARA} https://github.com/VirusTotal/yara.git \
  && cd /tmp/yara \
  && ./bootstrap.sh \
  && sync \
  && ./configure --with-crypto \
                 --enable-magic \
                 --enable-cuckoo \
                 --enable-dotnet \
  && make \
  && make install \
  && echo "===> Building scan Go binary..." \
  && cd /go/src/github.com/maliceio/malice-yara \
  && export GOPATH=/go \
  && YARA_SRC="/tmp/yara" \
  && export CGO_CFLAGS="-I${YARA_SRC}/libyara/include" \
  && export CGO_LDFLAGS="-L${YARA_SRC}/libyara/.libs -lyara" \
  && export PKG_CONFIG_PATH="/usr/local/lib/pkgconfig" \
  && go version \
  && go get -d \
  && CGO_ENABLED=1 go build -ldflags "-X main.Version=$(cat VERSION) -X main.BuildTime=$(date -u +%Y%m%d)" -o /bin/scan
  # && rm -rf /go /usr/local/go /usr/lib/go /tmp/* \
  # && apk del --purge .build-deps

# Install malice plugin
# COPY . /go/src/github.com/maliceio/malice-yara
# RUN apk --update add --no-cache -t .build-deps \
#                                     openssl-dev \
#                                     jansson-dev \
#                                     build-base \
#                                     mercurial \
#                                     musl-dev \
#                                     openssl \
#                                     bash \
#                                     wget \
#                                     git \
#                                     gcc \
#                                     go \
#   && echo "===> Building scan Go binary..." \
#   && cd /go/src/github.com/maliceio/malice-yara \
#   && export GOPATH=/go \
#   && export CGO_CFLAGS="-I/usr/local/include" \
#   && export CGO_LDFLAGS="-L/usr/local/lib -lyara" \
#   && go version \
#   && go get \
#   && go build -ldflags "-X main.Version=$(cat VERSION) -X main.BuildTime=$(date -u +%Y%m%d)" -o /bin/scan \
#   && rm -rf /go /usr/local/go /usr/lib/go /tmp/* \
#   && apk del --purge .build-deps

COPY rules /rules

VOLUME ["/malware"]
VOLUME ["/rules"]

WORKDIR /malware

ENTRYPOINT ["su-exec","malice","/sbin/tini","--","scan"]
CMD ["--help"]