TheHive-Project / Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine
https://thehive-project.org
GNU Affero General Public License v3.0
1.28k stars 218 forks source link

More settings on docker containers instantiated by Cortex #387

Closed To-om closed 2 years ago

To-om commented 2 years ago

Request Type

Feature Request

Work Environment

Cortex 3.1.1

Problem Description

The aim of this issue is to allow the administrator to configure how the docker containers are created. The available settings (in application.conf) are:

    docker.container.capAdd: (array of string) Add Linux capabilities
    docker.container.capDrop: (array of string) Drop Linux capabilities
    docker.container.cgroupParent: (string) Cgroup to run a container in
    docker.container.cpuPeriod: (integer) Limit the CPU CFS (Completely Fair Scheduler) period
    docker.container.cpuQuota: (integer) Limit the CPU CFS (Completely Fair Scheduler) quota
    docker.container.dns: (array of string) Set custom dns servers for the container
    docker.container.dnsSearch: (array of string) Search list for host-name lookup.
    docker.container.extraHosts: (array of string) Add a line to /etc/hosts (host:IP)
    docker.container.kernelMemory: (integer) Kernel memory limit
    docker.container.memoryReservation: (integer) Memory soft limit
    docker.container.memory: (integer) Memory limit
    docker.container.memorySwap: (integer) Total memory limit (memory + swap)
    docker.container.memorySwappiness: (integer) Tune a container’s memory swappiness behavior. Accepts an integer between 0 and 100
    docker.container.networkMode: (string) name of the network
    docker.container.privileged: (boolean) Give extended privileges to this container

Currently, this settings are global for all containers (all analyzers/responders)