Dockerfile

# dockerfile for the rootkit detector
# multi-stage build for the django app
# runs on ubuntu, need chkrootkit installed
FROM ubuntu:22.04

# no interactive prompts when installing packages
ENV DEBIAN_FRONTEND=noninteractive

# system deps
RUN apt-get update && apt-get install -y \
    python3 \
    python3-pip \
    python3-venv \
    chkrootkit \
    net-tools \
    iproute2 \
    procps \
    dnsutils \
    sudo \
    && rm -rf /var/lib/apt/lists/*

# working dir
WORKDIR /app

# copy reqs first for caching layers
COPY requirements.txt .
RUN pip3 install --no-cache-dir -r requirements.txt

# copy the rest of the code
COPY . .

# make bash scripts executable
RUN chmod +x scripts/*.sh

# env vars
ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1
ENV DJANGO_SETTINGS_MODULE=security_hub.settings

# init db and create the default admin user
RUN python3 manage.py migrate && \
    DJANGO_SUPERUSER_PASSWORD=admin123 \
    python3 manage.py createsuperuser --noinput --username admin --email admin@localhost && \
    python3 dashboard/fix_dates.py

# expose port 8000
EXPOSE 8000

# healthcheck so docker knows it's alive
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
    CMD curl -f http://localhost:8000/dashboard/login/ || exit 1

# run dev server
CMD ["python3", "manage.py", "runserver", "0.0.0.0:8000", "--noreload"]