Update Dockerfile
Browse files- Dockerfile +40 -10
Dockerfile
CHANGED
|
@@ -14,6 +14,14 @@ ENV NODE_ENV=production \
|
|
| 14 |
NODE_OPTIONS="--dns-result-order=ipv4first --no-warnings" \
|
| 15 |
LANG=C.UTF-8
|
| 16 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 17 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 18 |
# INSTALAR DEPENDΓNCIAS DO SISTEMA + FERRAMENTAS DE PENTESTING
|
| 19 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
|
@@ -42,7 +50,17 @@ RUN apk add --no-cache \
|
|
| 42 |
zlib-dev \
|
| 43 |
bash \
|
| 44 |
go \
|
| 45 |
-
libpcap-dev
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 46 |
|
| 47 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 48 |
# INSTALAR FERRAMENTAS ADICIONAIS DO GITHUB
|
|
@@ -55,8 +73,8 @@ RUN mkdir -p /opt && \
|
|
| 55 |
chmod +x /opt/sqlmap/sqlmap.py && \
|
| 56 |
ln -s /opt/sqlmap/sqlmap.py /usr/local/bin/sqlmap
|
| 57 |
|
| 58 |
-
# 2. NUCLEI (com Go)
|
| 59 |
-
RUN go install -v github.com/projectdiscovery/nuclei/
|
| 60 |
ln -s /root/go/bin/nuclei /usr/local/bin/nuclei || true
|
| 61 |
|
| 62 |
# 3. MASSCAN (CompilaΓ§Γ£o real)
|
|
@@ -67,6 +85,13 @@ RUN cd /tmp && \
|
|
| 67 |
cp bin/masscan /usr/local/bin/masscan && \
|
| 68 |
cd /tmp && rm -rf masscan
|
| 69 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 70 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 71 |
# CONFIGURAΓΓO DO DIRETΓRIO DE TRABALHO
|
| 72 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
|
@@ -79,8 +104,10 @@ RUN mkdir -p /app/auth_info_baileys /app/temp /app/database/data /app/database/d
|
|
| 79 |
# Copiar package.json primeiro para otimizar o cache de camadas do Docker
|
| 80 |
COPY package*.json ./
|
| 81 |
|
| 82 |
-
# InstalaΓ§Γ£o das dependΓͺncias Node.js
|
| 83 |
-
RUN npm
|
|
|
|
|
|
|
| 84 |
|
| 85 |
# Copiar o restante do cΓ³digo da aplicaΓ§Γ£o
|
| 86 |
COPY . .
|
|
@@ -111,17 +138,20 @@ RUN chown -R app:app /app && \
|
|
| 111 |
chmod -R 777 /app/auth_info_baileys /app/temp /app/database /app/logs /tmp/pentest_results
|
| 112 |
|
| 113 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 114 |
-
# VERIFICAΓΓO FINAL
|
| 115 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 116 |
|
| 117 |
RUN echo "π Verificando ferramentas..." && \
|
| 118 |
node -v && npm -v && \
|
|
|
|
|
|
|
| 119 |
nmap --version | head -1 && \
|
| 120 |
sqlmap --version | head -1 && \
|
| 121 |
echo "β
Dockerfile construΓdo com sucesso."
|
| 122 |
|
| 123 |
# Limpar cache para reduzir tamanho da imagem
|
| 124 |
-
RUN npm cache clean --force &&
|
|
|
|
| 125 |
|
| 126 |
# Mudar para usuΓ‘rio nΓ£o-root
|
| 127 |
USER app
|
|
@@ -129,9 +159,9 @@ USER app
|
|
| 129 |
# Porta do Railway/HuggingFace
|
| 130 |
EXPOSE 7860
|
| 131 |
|
| 132 |
-
# Healthcheck
|
| 133 |
-
HEALTHCHECK --interval=
|
| 134 |
CMD curl -f http://localhost:7860/health || exit 1
|
| 135 |
|
| 136 |
-
# Comando de inicializaΓ§Γ£o
|
| 137 |
CMD ["node", "index.js"]
|
|
|
|
| 14 |
NODE_OPTIONS="--dns-result-order=ipv4first --no-warnings" \
|
| 15 |
LANG=C.UTF-8
|
| 16 |
|
| 17 |
+
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 18 |
+
# CONFIGURAΓΓO DE DNS PΓBLICO ANTES DE QUALQUER INSTALAΓΓO
|
| 19 |
+
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 20 |
+
# Configura DNS pΓΊblico para resolver problemas no Hugging Face
|
| 21 |
+
RUN echo "nameserver 8.8.8.8" > /etc/resolv.conf && \
|
| 22 |
+
echo "nameserver 1.1.1.1" >> /etc/resolv.conf && \
|
| 23 |
+
echo "nameserver 208.67.222.222" >> /etc/resolv.conf
|
| 24 |
+
|
| 25 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 26 |
# INSTALAR DEPENDΓNCIAS DO SISTEMA + FERRAMENTAS DE PENTESTING
|
| 27 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
|
|
|
| 50 |
zlib-dev \
|
| 51 |
bash \
|
| 52 |
go \
|
| 53 |
+
libpcap-dev \
|
| 54 |
+
bind-tools \
|
| 55 |
+
busybox-extras
|
| 56 |
+
|
| 57 |
+
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 58 |
+
# VERIFICAΓΓO DE CONECTIVIDADE DE REDE
|
| 59 |
+
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 60 |
+
RUN echo "π Testando conectividade de rede e DNS..." && \
|
| 61 |
+
nslookup google.com && \
|
| 62 |
+
nslookup web.whatsapp.com && \
|
| 63 |
+
curl -s --connect-timeout 10 https://httpbin.org/get >/dev/null && echo "β
Rede OK"
|
| 64 |
|
| 65 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 66 |
# INSTALAR FERRAMENTAS ADICIONAIS DO GITHUB
|
|
|
|
| 73 |
chmod +x /opt/sqlmap/sqlmap.py && \
|
| 74 |
ln -s /opt/sqlmap/sqlmap.py /usr/local/bin/sqlmap
|
| 75 |
|
| 76 |
+
# 2. NUCLEI (com Go) - versΓ£o especΓfica para evitar bugs
|
| 77 |
+
RUN go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest && \
|
| 78 |
ln -s /root/go/bin/nuclei /usr/local/bin/nuclei || true
|
| 79 |
|
| 80 |
# 3. MASSCAN (CompilaΓ§Γ£o real)
|
|
|
|
| 85 |
cp bin/masscan /usr/local/bin/masscan && \
|
| 86 |
cd /tmp && rm -rf masscan
|
| 87 |
|
| 88 |
+
# 4. Ferramentas Python de pentesting
|
| 89 |
+
RUN pip3 install --no-cache-dir \
|
| 90 |
+
requests \
|
| 91 |
+
beautifulsoup4 \
|
| 92 |
+
scapy \
|
| 93 |
+
paramiko
|
| 94 |
+
|
| 95 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 96 |
# CONFIGURAΓΓO DO DIRETΓRIO DE TRABALHO
|
| 97 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
|
|
|
| 104 |
# Copiar package.json primeiro para otimizar o cache de camadas do Docker
|
| 105 |
COPY package*.json ./
|
| 106 |
|
| 107 |
+
# InstalaΓ§Γ£o das dependΓͺncias Node.js com fallback para resoluΓ§Γ£o de DNS
|
| 108 |
+
RUN npm config set fetch-retry-mintimeout 20000 && \
|
| 109 |
+
npm config set fetch-retry-maxtimeout 120000 && \
|
| 110 |
+
npm install --omit=dev --no-audit --progress=false --fetch-retries=5
|
| 111 |
|
| 112 |
# Copiar o restante do cΓ³digo da aplicaΓ§Γ£o
|
| 113 |
COPY . .
|
|
|
|
| 138 |
chmod -R 777 /app/auth_info_baileys /app/temp /app/database /app/logs /tmp/pentest_results
|
| 139 |
|
| 140 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 141 |
+
# VERIFICAΓΓO FINAL E LIMPEZA
|
| 142 |
# βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
| 143 |
|
| 144 |
RUN echo "π Verificando ferramentas..." && \
|
| 145 |
node -v && npm -v && \
|
| 146 |
+
python3 --version && \
|
| 147 |
+
ffmpeg -version | head -1 && \
|
| 148 |
nmap --version | head -1 && \
|
| 149 |
sqlmap --version | head -1 && \
|
| 150 |
echo "β
Dockerfile construΓdo com sucesso."
|
| 151 |
|
| 152 |
# Limpar cache para reduzir tamanho da imagem
|
| 153 |
+
RUN npm cache clean --force && \
|
| 154 |
+
rm -rf /root/.npm /root/.cache /tmp/* /var/cache/apk/*
|
| 155 |
|
| 156 |
# Mudar para usuΓ‘rio nΓ£o-root
|
| 157 |
USER app
|
|
|
|
| 159 |
# Porta do Railway/HuggingFace
|
| 160 |
EXPOSE 7860
|
| 161 |
|
| 162 |
+
# Healthcheck otimizado para Hugging Face
|
| 163 |
+
HEALTHCHECK --interval=45s --timeout=15s --start-period=90s --retries=3 \
|
| 164 |
CMD curl -f http://localhost:7860/health || exit 1
|
| 165 |
|
| 166 |
+
# Comando de inicializaΓ§Γ£o com verificaΓ§Γ£o de DNS
|
| 167 |
CMD ["node", "index.js"]
|