mirror of
https://github.com/j3ssie/osmedeus.git
synced 2026-08-29 11:19:42 +02:00
j3ssie
459d5939fb
- Implement cloud provider infrastructure (DigitalOcean, AWS, GCP, Linode, Azure) with Pulumi integration for distributed scanning - Add nmap and tmux utility functions for port scanning results processing and long-running background session management - Introduce webhook-triggered run execution with unique UUID and authentication key support for external integrations
64 lines
2.0 KiB
Docker
64 lines
2.0 KiB
Docker
# Osmedeus Production Dockerfile
|
|
# Multi-stage build: compile from source, then create minimal runtime image
|
|
|
|
# ── Stage 1: build from source ──────────────────────────────────────────────
|
|
FROM golang:1.26-bookworm AS builder
|
|
|
|
ARG BUILD_TIME
|
|
ARG COMMIT_HASH
|
|
|
|
WORKDIR /src
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download
|
|
|
|
COPY . .
|
|
RUN CGO_ENABLED=0 go build \
|
|
-ldflags "-X main.BuildTime=${BUILD_TIME} -X main.CommitHash=${COMMIT_HASH}" \
|
|
-o /osmedeus ./cmd/osmedeus
|
|
|
|
# ── Stage 2: runtime ────────────────────────────────────────────────────────
|
|
FROM debian:bookworm-slim
|
|
|
|
# Install essential tools (retry on transient network failures for large packages like chromium)
|
|
RUN apt-get update && \
|
|
for i in 1 2 3; do \
|
|
apt-get install -y --no-install-recommends \
|
|
build-essential \
|
|
git \
|
|
curl \
|
|
wget \
|
|
ca-certificates \
|
|
python3 \
|
|
python3-pip \
|
|
chromium \
|
|
&& break || { echo "Attempt $i failed, retrying..."; apt-get update; }; \
|
|
done && \
|
|
rm -rf /var/lib/apt/lists/* && \
|
|
ln -sf /usr/bin/python3 /usr/bin/python
|
|
|
|
# Create base directories
|
|
RUN mkdir -p /root/osmedeus-base /root/workspaces-osmedeus
|
|
|
|
WORKDIR /root
|
|
|
|
# Copy binary from builder
|
|
COPY --from=builder /osmedeus /usr/local/bin/osmedeus
|
|
|
|
# Initialize osmedeus base folder with preset workflows
|
|
RUN osmedeus install base --preset
|
|
|
|
# This is for sast test
|
|
RUN osmedeus install binary --name trivy --name semgrep --name kingfisher --name bearer
|
|
|
|
# Set up PATH for external binaries
|
|
ENV PATH="/root/osmedeus-base/external-binaries:${PATH}"
|
|
|
|
# Expose default server port
|
|
EXPOSE 8002
|
|
|
|
# Default entrypoint - exposes osmedeus CLI only
|
|
ENTRYPOINT ["osmedeus"]
|
|
|
|
# Default command shows help (user can override with run/server/etc.)
|
|
CMD ["--help"]
|