mirror of
https://github.com/wazuh/wazuh-docker.git
synced 2025-10-23 04:51:57 +00:00
47 lines
1.9 KiB
Docker
47 lines
1.9 KiB
Docker
# Wazuh App Copyright (C) 2019 Wazuh Inc. (License GPLv2)
|
|
|
|
ARG LOGSTASH_VERSION=7.4.2
|
|
FROM docker.elastic.co/logstash/logstash:${LOGSTASH_VERSION}
|
|
|
|
COPY --chown=logstash:logstash config/entrypoint.sh /entrypoint.sh
|
|
|
|
RUN chmod 755 /entrypoint.sh
|
|
|
|
RUN rm -f /usr/share/logstash/pipeline/logstash.conf
|
|
|
|
ENV PIPELINE_FROM_FILE="false"
|
|
COPY config/01-wazuh.conf /usr/share/logstash/pipeline/01-wazuh.conf
|
|
|
|
# This CA is created for testing. Please set your own CA pem signed certificate.
|
|
# command: $ docker build <logstash_directory> --build-arg SECURITY_CA_PEM_LOCATION=<CA_PEM_LOCATION> --build-arg SECURITY_CA_PEM_ARG=<CA_PEM_NAME>
|
|
# ENV variables are necessary: SECURITY_CA_PEM
|
|
# Sample:
|
|
# ARG SECURITY_CA_PEM_LOCATION="config/server.TEST-CA-signed.pem"
|
|
# ARG SECURITY_CA_PEM_ARG="server.TEST-CA-signed.pem"
|
|
ARG SECURITY_CA_PEM_LOCATION=""
|
|
ARG SECURITY_CA_PEM_ARG=""
|
|
|
|
# CA for secure communication with Elastic
|
|
ADD $SECURITY_CA_PEM_LOCATION /usr/share/logstash/config
|
|
|
|
# Set permissions for CA
|
|
USER root
|
|
RUN if [[ "x$SECURITY_CA_PEM_LOCATION" == x ]] ; then echo Nothing to do ; else chown logstash: /usr/share/logstash/config/$SECURITY_CA_PEM_ARG ; fi
|
|
RUN if [[ "x$SECURITY_CA_PEM_LOCATION" == x ]] ; then echo Nothing to do ; else chmod 400 /usr/share/logstash/config/$SECURITY_CA_PEM_ARG ; fi
|
|
|
|
# Add entrypoint scripts
|
|
RUN mkdir /entrypoint-scripts
|
|
RUN chmod -R 774 /entrypoint-scripts
|
|
RUN chown -R logstash:logstash /entrypoint-scripts
|
|
|
|
COPY --chown=logstash:logstash ./config/05-decrypt_credentials.sh /entrypoint-scripts/05-decrypt_credentials.sh
|
|
COPY --chown=logstash:logstash ./config/10-entrypoint.sh /entrypoint-scripts/10-entrypoint.sh
|
|
COPY --chown=logstash:logstash ./config/10-entrypoint_configuration.sh ./config/10-entrypoint_configuration.sh
|
|
RUN chmod +x /entrypoint-scripts/05-decrypt_credentials.sh && \
|
|
chmod +x /entrypoint-scripts/10-entrypoint.sh && \
|
|
chmod +x ./config/10-entrypoint_configuration.sh
|
|
|
|
USER logstash
|
|
|
|
ENTRYPOINT /entrypoint.sh
|