Files
volatility3/docker/Makefile
T
Ilya Chukhman e52cb3f82c docker container support
Dockerfile and makefile rules to build several volatility docker images.
The images share a common builder image. A generic volatility image is
used for staging. The 3 docker images that are produced have the same
layers and only differ in entrypoint definition. The images are:

* vol -- used to run plugins with vol.py
* volshell -- used to enter a volshell
* pdbconv -- used to convert pdb files to json files

The symbols used for analysis need to be provided via a defined /symbols
volume. The image used for analysis also needs to be provided via a
user-defined volume.
2020-02-11 19:52:41 -05:00

33 lines
696 B
Makefile

DOCKER_BIN=docker
DOCKER_FLAGS+=
DOCKER_REPOSITORY?=volatility3
DOCKER_TAG?=latest
USERNAME ?= root
ALPINE_VERSION ?= 3.11
.PHONY: all pdbconv volshell vol
all: volshell vol pdbconv
pdbconv:
@$(DOCKER_BIN) build \
$(DOCKER_FLAGS) \
--rm \
--tag $(DOCKER_REPOSITORY)/$@:$(DOCKER_TAG) \
$@
volshell vol pdbconv:
@$(DOCKER_BIN) build \
$(DOCKER_FLAGS) \
--rm \
--build-arg USERNAME=$(USERNAME) \
--build-arg ALPINE_VERSION=$(ALPINE_VERSION) \
--tag $(DOCKER_REPOSITORY)/$@:$(DOCKER_TAG) \
--target $@ \
.
.PHONY: clean
clean:
docker rmi $(DOCKER_REPOSITORY)/pdbconv $(DOCKER_REPOSITORY)/volshell $(DOCKER_REPOSITORY)/vol
docker system prune