utiso / dorkbot

Command-line tool to scan Google search results for vulnerabilities
http://dorkbot.io
Other
506 stars 102 forks source link

Dockerizing #9

Closed catatonicprime closed 5 years ago

catatonicprime commented 5 years ago

Working towards a "it just works" dockerized environment. I think this meets this need.

To be both frank & sincere; I do not like this bit below...

Arachni appears to have fallen out of support about 2 years ago & ruby appears to have progressed without it. I've forked arachni & this docker file uses my fork. My fork contains a couple of very minor modifications, primarily to the gemspec, just to get ruby to work with a modern version of ruby (2.5.1).

If arachni were still being visibly updated I would not have done this - and I am in no way part of arachni's development team/efforts. That said - I am willing to run a low-delta version of arachni in order to support this dependency here. On the other-hand, if you guys have a great idea on how to do this better (or would like to fork arachni and run a low-delta version yourselves) I'm a million times open to options.

jgor commented 5 years ago

Thanks for the interest and efforts here @catatonicprime! In case it sparks any additional ideas -- our approach running dorkbot via docker in-house has been to run pip install dorkbot in a live python:3-slim image with a mounted volume containing the arachni directory.

catatonicprime commented 5 years ago

I'm brand new to docker and pip. I closed the PR in a moment of realizing "omg I have no idea what I'm doing."

This makes perfect sense.