aboutsummaryrefslogtreecommitdiff
path: root/Dockerfile
diff options
context:
space:
mode:
authorRob Austein <sra@hactrn.net>2019-09-03 19:06:01 +0000
committerRob Austein <sra@hactrn.net>2019-09-03 19:14:09 +0000
commit75f091a80059ca6c8dc8b2c93ebf16f6effb892d (patch)
treec89c6f14152a32238760530aeee0b188706b2a12 /Dockerfile
First public version
Diffstat (limited to 'Dockerfile')
-rw-r--r--Dockerfile44
1 files changed, 44 insertions, 0 deletions
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..7b6aed8
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,44 @@
+# Given that this is security software, you might want to consider
+# generating your own debian:stretch base image using debbootstrap
+# rather than trusting Dockerhub
+
+FROM debian:stretch
+
+# Prerequisites. Current version of python-django is a bit too recent
+# for the rpki-ca GUI, but rpki-rp only uses the ORM, which hasn't
+# broken backwards compatability (yet?).
+
+RUN apt-get --yes update && apt-get --yes install --no-install-recommends \
+ apache2 \
+ bsdmainutils \
+ ca-certificates \
+ cron \
+ postgresql \
+ postgresql-client \
+ python \
+ python-django \
+ python-lxml \
+ python-psycopg2 \
+ python-pycurl \
+ python-tornado \
+ rrdtool \
+ rsyslog \
+ rsync \
+ ssl-cert \
+ sudo \
+ xinetd
+
+# Install rpki-rp package downloaded by makefile, but defer
+# configuration until the container comes up.
+
+COPY startup.sh rpki-rp_*.deb /root/
+RUN dpkg --unpack /root/rpki-rp_*.deb && rm -f /root/rpki-rp_*.deb
+
+# Container startup, execs cron on top of itself when done
+
+CMD [ "/root/startup.sh" ]
+
+# Expose web and rpki-rtr ports. The HTTPS port is probably not very
+# useful unless you stuff a valid certificate into the image.
+
+EXPOSE 80 443 323