Files
vittring def5e6722c Slim down Dockerfile and apply deps upgrades
This is a combo patch for both the Dockerfile and the Poetry lockfile.
Simplify Poetry installation in Docker image.

* docker/Dockerfile:

 set `ARG PYTHON_VERSION` to 3.10
 use `${PYTHON_VERSION}-slim-bullseye` as builder from now on
 cleanup `RUN` where we install dependencies for the image
 cleanup `RUN` where we install Poetry:
 update to Poetry 1.2.1 from 1.1.14
 keep magic - we like magic - but simplify the installation

This should make installation easier on everyone by explicitly stating
cache location for pip and installing as, yes, root. Installing as user
`venom` is too complicated and this Dockerfile *should* be safe as-is
even running as root. There are still ways to harden to image that don't
require huge lines to add a user environment and it's less hacky this way.

* docker/README:

 specify `Yggdrasil` as tag
 docker trust no longer functions as expected; remove instructions
 building as newly defined tag still works, pull from the hub or build local

* poetry.lock:

  Package operations: 0 installs, 8 updates, 0 removals

  • Updating idna (3.3 -> 3.4)
  • Updating attrs (21.4.0 -> 22.1.0)
  • Updating certifi (2022.6.15 -> 2022.9.24)
  • Updating pytz (2022.1 -> 2022.4)
  • Updating urllib3 (1.26.11 -> 1.26.12)
  • Updating aiohttp (3.8.1 -> 3.8.3)
  • Updating datetime (4.5 -> 4.7)
  • Updating tqdm (4.64.0 -> 4.64.1)

Signed-off-by: vittring <scissortail@riseup.net>
2022-10-05 02:26:49 -04:00

53 lines
1.2 KiB
Docker

# Venom Dockerfile
#
# This file is part of Venom
# See LICENSE for license details.
ARG PYTHON_VERSION=3.10
FROM docker.io/python:${PYTHON_VERSION}-slim-bullseye as builder
# Contact info for critical/security issues only
# Use subject title "Venom *critical issue*: short description"
LABEL maintainer="Architect" \
email="scissortail@riseup.net"
# Install base dependencies
RUN \
apt-get update -qq && apt-get install -yqq \
git \
gcc \
curl \
build-essential \
python3-setuptools \
python3-dev \
python3-bs4 \
ca-certificates \
libffi-dev \
&& rm -rf /var/lib/apt/lists/*
# Latest Poetry https://install.python-poetry.org
# Set Poetry Version
RUN --mount=type=cache,target=/root/.cache/pip \
pip install --user "poetry==1.2.1"
WORKDIR /opt
# Clone repo & install dependencies
RUN git clone --depth=1 https://github.com/V3n0M-Scanner/V3n0M-Scanner.git ./scan
RUN cd ./scan/
COPY . /opt
# Magic
RUN /root/.local/bin/poetry install
# Use pip for the rest
RUN pip install aiohttp tqdm SocksiPy-branch httplib2 requests bs4 dnspython
WORKDIR /opt/scan/src
# Run Venom
ENTRYPOINT ["python3", "v3n0m.py"]