search

olacabs / jackhammer

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
https://jch.olacabs.com/userguide
Other
718 stars 162 forks source link

I am trying to install it in ubuntu 16.4 with docker but by far no luck can you please guide me with the steps? #97

Open imarnab opened 6 years ago

imarnab commented 6 years ago

arnab@arnab-ThinkCentre-A55:/var/www/html/jackhammer$ sh ./docker-build.sh mysqldb uses an image, skipping redis uses an image, skipping Building web Step 1/50 : FROM ubuntu:14.04 ---> 8cef1fa16c77 Step 2/50 : MAINTAINER JACKHAMMER "jackhammer@olacabs.com" ---> Using cache ---> 8d6ec8095853 Step 3/50 : ENV HOME /root ---> Using cache ---> ec9838833540 Step 4/50 : ENV PATH $HOME/.rbenv/bin:$HOME/.rbenv/shims:$PATH ---> Using cache ---> e8cb1b91392b Step 5/50 : ENV SHELL /bin/bash ---> Using cache ---> 13cbdd3011fc Step 6/50 : RUN apt-get -y update ---> Using cache ---> 3617d2a92fc9 Step 7/50 : RUN apt-get -y install git curl zlib1g-dev build-essential libssl-dev libreadline-dev libyaml-dev libsqlite3-dev sqlite3 libxml2-dev libxslt1-dev libcurl4-openssl-dev python-software-properties libffi-dev ---> Using cache ---> d9176b1a9c5a Step 8/50 : RUN export GIT_TRACE_PACKET=1 ---> Using cache ---> 4383df9c3a27 Step 9/50 : RUN export GIT_TRACE=1 ---> Using cache ---> 5e44b7290d47 Step 10/50 : RUN export GIT_CURL_VERBOSE=1 ---> Using cache ---> 807aed3fe3ab Step 11/50 : RUN apt-get -y install figlet ---> Using cache ---> 2c1328ba7817 Step 12/50 : RUN echo "#!/bin/sh\nexit 0" > /usr/sbin/policy-rc.d ---> Using cache ---> 810a36540cd5 Step 13/50 : RUN apt-get -y install libmysqlclient-dev ---> Using cache ---> ff054c21b857 Step 14/50 : RUN apt-get -y install mysql-client ---> Using cache ---> 4f893734bcaa Step 15/50 : RUN apt-get -y update ---> Using cache ---> 2df9d1f35f7f Step 16/50 : RUN curl -sL https://deb.nodesource.com/setup_6.x | bash - ---> Using cache ---> f82b1b8dc073 Step 17/50 : RUN apt-get -y install nodejs ---> Using cache ---> 3e024c0a84d0 Step 18/50 : RUN npm install -g nsp ---> Using cache ---> 96701eb0fa2b Step 19/50 : RUN npm install -g retire ---> Using cache ---> 8b67f04a77cd Step 20/50 : RUN DEBIAN_FRONTEND=noninteractive apt-get -y install python-software-properties ---> Using cache ---> 15341efc237b Step 21/50 : RUN DEBIAN_FRONTEND=noninteractive apt-get -y install software-properties-common ---> Using cache ---> cf57c5790180 Step 22/50 : RUN echo oracle-java8-installer shared/accepted-oracle-license-v1-1 select true | debconf-set-selections && add-apt-repository -y ppa:webupd8team/java && apt-get update && apt-get install -y oracle-java8-installer && rm -rf /var/lib/apt/lists/* && rm -rf /var/cache/oracle-jdk8-installer ---> Using cache ---> 84028dd723c1 Step 23/50 : RUN apt-add-repository ppa:andrei-pozolotin/maven3 ---> Using cache ---> 95fdf6c7a57c Step 24/50 : RUN apt-get -y update ---> Using cache ---> ef90dd250525 Step 25/50 : RUN apt-get install maven3 ---> Using cache ---> 91dfbbbab2cc Step 26/50 : RUN apt-get -y install libfontconfig ---> Using cache ---> 4f4128d857aa Step 27/50 : RUN wget https://bitbucket.org/ariya/phantomjs/downloads/phantomjs-2.1.1-linux-x86_64.tar.bz2 ---> Using cache ---> 48480fb80c85 Step 28/50 : RUN tar xvfj ./phantomjs-2.1.1-linux-x86_64.tar.bz2 ---> Using cache ---> bdb1fdfeb304 Step 29/50 : RUN ln -sf $(pwd)/phantomjs-2.1.1-linux-x86_64/bin/phantomjs /usr/bin ---> Using cache ---> 8f45cf64ac69 Step 30/50 : RUN git clone https://github.com/sstephenson/rbenv.git /root/.rbenv ---> Using cache ---> 055000bd5fbf Step 31/50 : RUN git clone https://github.com/sstephenson/ruby-build.git /root/.rbenv/plugins/ruby-build ---> Using cache ---> df67468ce504 Step 32/50 : RUN echo 'eval "$(rbenv init -)"' >> $HOME/.profile ---> Using cache ---> 461d1176bd07 Step 33/50 : RUN echo 'eval "$(rbenv init -)"' >> $HOME/.bashrc ---> Using cache ---> 2111c835b64c Step 34/50 : RUN rbenv install 2.3.0 ---> Using cache ---> 4b847d313c8f Step 35/50 : RUN rbenv global 2.3.0 ---> Using cache ---> b40a7b08f565 Step 36/50 : RUN gem install bundler ---> Using cache ---> 8af24a1ca722 Step 37/50 : WORKDIR /tmp ---> Using cache ---> be8e017e767a Step 38/50 : ADD app/Gemfile Gemfile ---> Using cache ---> 48e18b4a8e96 Step 39/50 : ADD app/Gemfile.lock Gemfile.lock ---> Using cache ---> 0489f48c9c96 Step 40/50 : ADD bundle.sh bundle.sh ---> Using cache ---> 39b0081e4c0c Step 41/50 : RUN bash bundle.sh ---> Running in 68361d9d1aff Don't run Bundler as root. Bundler can ask for sudo if it is needed, and installing your bundle as root will break this application for all non-root users on this machine. The git source git://github.com/rweng/jquery-datatables-rails.git uses the git protocol, which transmits data without encryption. Disable this warning with bundle config git.allow_insecure true, or switch to the https protocol to keep your data secure. The git source git://github.com/sumoheavy/jira-ruby.git uses the git protocol, which transmits data without encryption. Disable this warning with bundle config git.allow_insecure true, or switch to the https protocol to keep your data secure. Fetching git://github.com/sumoheavy/jira-ruby.git Fetching git://github.com/rweng/jquery-datatables-rails.git Fetching gem metadata from https://rubygems.org/......... Fetching gem metadata from https://rubygems.org/.. You have requested: connection_pool ~> 1.2.0

The bundle currently has connection_pool locked at 2.2.1. Try running bundle update connection_pool

If you are updating multiple gems in your Gemfile at once, try passing them all to bundle update Try bundle again ... Don't run Bundler as root. Bundler can ask for sudo if it is needed, and installing your bundle as root will break this application for all non-root users on this machine. The git source git://github.com/rweng/jquery-datatables-rails.git uses the git protocol, which transmits data without encryption. Disable this warning with bundle config git.allow_insecure true, or switch to the https protocol to keep your data secure. The git source git://github.com/sumoheavy/jira-ruby.git uses the git protocol, which transmits data without encryption. Disable this warning with bundle config git.allow_insecure true, or switch to the https protocol to keep your data secure. Fetching gem metadata from https://rubygems.org/....... Fetching gem metadata from https://rubygems.org/. You have requested: connection_pool ~> 1.2.0

The bundle currently has connection_pool locked at 2.2.1. Try running bundle update connection_pool

If you are updating multiple gems in your Gemfile at once, try passing them all to bundle update Try bundle again ... Don't run Bundler as root. Bundler can ask for sudo if it is needed, and installing your bundle as root will break this application for all non-root users on this machine. The git source git://github.com/rweng/jquery-datatables-rails.git uses the git protocol, which transmits data without encryption. Disable this warning with bundle config git.allow_insecure true, or switch to the https protocol to keep your data secure. The git source git://github.com/sumoheavy/jira-ruby.git uses the git protocol, which transmits data without encryption. Disable this warning with bundle config git.allow_insecure true, or switch to the https protocol to keep your data secure. Fetching gem metadata from https://rubygems.org/....... Fetching gem metadata from https://rubygems.org/. You have requested: connection_pool ~> 1.2.0

The bundle currently has connection_pool locked at 2.2.1. Try running bundle update connection_pool

If you are updating multiple gems in your Gemfile at once, try passing them all to bundle update Try bundle again ... Don't run Bundler as root. Bundler can ask for sudo if it is needed, and installing your bundle as root will break this application for all non-root users on this machine. The git source git://github.com/rweng/jquery-datatables-rails.git uses the git protocol, which transmits data without encryption. Disable this warning with bundle config git.allow_insecure true, or switch to the https protocol to keep your data secure. The git source git://github.com/sumoheavy/jira-ruby.git uses the git protocol, which transmits data without encryption. Disable this warning with bundle config git.allow_insecure true, or switch to the https protocol to keep your data secure. Fetching gem metadata from https://rubygems.org/....... Fetching gem metadata from https://rubygems.org/. You have requested: connection_pool ~> 1.2.0

The bundle currently has connection_pool locked at 2.2.1. Try running bundle update connection_pool

If you are updating multiple gems in your Gemfile at once, try passing them all to bundle update Try bundle again ... Don't run Bundler as root. Bundler can ask for sudo if it is needed, and installing your bundle as root will break this application for all non-root users on this machine. The git source git://github.com/rweng/jquery-datatables-rails.git uses the git protocol, which transmits data without encryption. Disable this warning with bundle config git.allow_insecure true, or switch to the https protocol to keep your data secure. The git source git://github.com/sumoheavy/jira-ruby.git uses the git protocol, which transmits data without encryption. Disable this warning with bundle config git.allow_insecure true, or switch to the https protocol to keep your data secure. Fetching gem metadata from https://rubygems.org/....... Fetching gem metadata from https://rubygems.org/. You have requested: connection_pool ~> 1.2.0

The bundle currently has connection_pool locked at 2.2.1. Try running bundle update connection_pool

If you are updating multiple gems in your Gemfile at once, try passing them all to bundle update Try bundle again ... ERROR: Service 'web' failed to build: The command '/bin/sh -c bash bundle.sh' returned a non-zero code: 1 jackhammer_redis_1 is up-to-date jackhammer-db is up-to-date Starting jackhammer_web_1 ... done Starting jackhammer_redis_1 ... done Starting jackhammer-db ... done Could not find gem 'connection_pool (~> 1.2.0)' in any of the gem sources listed in your Gemfile. Run bundle install to install missing gems. Starting jackhammer_redis_1 ... done Starting jackhammer-db ... done Could not find gem 'connection_pool (~> 1.2.0)' in any of the gem sources listed in your Gemfile. Run bundle install to install missing gems. Starting jackhammer_redis_1 ... done Starting jackhammer-db ... done Could not find gem 'connection_pool (~> 1.2.0)' in any of the gem sources listed in your Gemfile. Run bundle install to install missing gems. Starting jackhammer-db ... done Starting jackhammer_redis_1 ... done

| |  / \   / ___|| |/ /| | | |   / \   |  \/  ||  \/  || ____||  _ \  |_ _|/ ___|  | | | ||  _ \

| | / \ | | | ' / | || | / \ | |\/| || |\/| || | | |) | | | _ \ | | | || |) | | || |/ __ | | | . \ | _ | / \ | | | || | | || | | _ < | | ) | | || || / _/// _\____|||_|| ||// _|| |||| |||____||| \\ |_||__/ _/ |_|

kmadhusudhan commented 6 years ago

@imarnab Please make sure your docker version above 17.03.1 + . please go through this https://jch.olacabs.com/userguide/installation/

dkogue commented 6 years ago

@KMadhuSudhan My docker version is above 17.03.1 but I have the same error.

bappa92chakraborty commented 6 years ago

My docker version is 18.03.1 and I also have the same issue. please provide some solution.

dkogue commented 6 years ago

@bappa92chakraborty you need to update Gemifile with missing gem and update your docker-build.sh and your docker-compose.yml as it is in this repository. (https://github.com/zee7han/jackhammer).

I have tried this tool and for me it is not stable, specially if you want to add other tools. Maybe you look at this tool as well. (SecurecodeBox).

bappa92chakraborty commented 6 years ago

Hey, Thanks for this information!!!! it starts working...

On Mon, Jul 16, 2018 at 2:07 PM, wolagno notifications@github.com wrote:

@bappa92chakraborty https://github.com/bappa92chakraborty you need to update Gemifile with missing gem and update your docker-build.sh and your docker-compose.yml as it is in this repository. ( https://github.com/zee7han/jackhammer).

I have tried this tool and for me it is not stable, specially if you want to add other tools. Maybe you look at this tool as well. (SecurecodeBox).

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/olacabs/jackhammer/issues/97#issuecomment-405180439, or mute the thread https://github.com/notifications/unsubscribe-auth/AkSOKjeecf1iZIx5b2-2Wa0CDUYwlSd7ks5uHFDMgaJpZM4T7SUD .