Overhaul of Dockerfile

[vittring]

PGP signed copy of this message here: raw signed text

This PR fixes #198. Also of note: read this for more info on mismatching hashes.

Changelog

Dockerfile

• Update image to python:3.8.12-slim-bullseye
• Environment variables
• Build with poetry now possible but actual poetry build unresolved
• Install poetry on Docker image succeeds
• Poetry lockfile exists so poetry install synced across installations
• New CHROOT setup added to Dockerfile
• Docker Hub updated with working image

Verification

• [ ] git clone the repository on Ubuntu 20.04 LTS and setup the environment
• [ ] cd Venom dir, change into installed directory
• [ ] run poetry install
• [ ] Verify that the dependencies succeed in installing

Installing dependencies from lock file

Package operations: 25 installs, 0 updates, 0 removals

  • Installing frozenlist (1.2.0)
  • Installing idna (3.3)
  • Installing multidict (5.2.0)
  • Installing soupsieve (2.3.1)
  • Installing aiosignal (1.2.0)
  • Installing async-timeout (4.0.2)
  • Installing attrs (21.4.0)
  • Installing beautifulsoup4 (4.10.0)
  • Installing certifi (2021.10.8)
  • Installing charset-normalizer (2.0.10)
  • Installing pyparsing (3.0.7)
  • Installing pytz (2021.3)
  • Installing urllib3 (1.26.8)
  • Installing yarl (1.7.2)
  • Installing zope.interface (5.4.0)
  • Installing aiohttp (3.8.1)
  • Installing asyncio (3.4.3)
  • Installing bs4 (0.0.1)
  • Installing datetime (4.3)
  • Installing dnspython (2.2.0)
  • Installing httplib2 (0.20.2)
  • Installing requests (2.27.1)
  • Installing socksipy-branch (1.01)
  • Installing termcolor (1.1.0)
  • Installing tqdm (4.62.3)

• [ ] Verify that the script does not fail with an error message

$ poetry show

aiohttp            3.8.1     Async http client/server framework (asyncio)
aiosignal          1.2.0     aiosignal: a list of registered asynchronous callbacks
async-timeout      4.0.2     Timeout context manager for asyncio programs
asyncio            3.4.3     reference implementation of PEP 3156
attrs              21.4.0    Classes Without Boilerplate
beautifulsoup4     4.10.0    Screen-scraping library
bs4                0.0.1     Dummy package for Beautiful Soup
certifi            2021.10.8 Python package for providing Mozilla's CA Bundle.
charset-normalizer 2.0.10    The Real First Universal Charset Detector. Open, modern and actively maintained altern...
datetime           4.3       This package provides a DateTime data type, as known from Zope. Unless you need to com...
dnspython          2.2.0     DNS toolkit
frozenlist         1.2.0     A list-like structure which implements collections.abc.MutableSequence
httplib2           0.20.2    A comprehensive HTTP client library.
idna               3.3       Internationalized Domain Names in Applications (IDNA)
multidict          5.2.0     multidict implementation
pyparsing          3.0.7     Python parsing module
pytz               2021.3    World timezone definitions, modern and historical
requests           2.27.1    Python HTTP for Humans.
socksipy-branch    1.01      A Python SOCKS module
soupsieve          2.3.1     A modern CSS selector implementation for Beautiful Soup.
termcolor          1.1.0     ANSII Color formatting for output in terminal.
tqdm               4.62.3    Fast, Extensible Progress Meter
urllib3            1.26.8    HTTP library with thread-safe connection pooling, file post, and more.
yarl               1.7.2     Yet another URL library
zope.interface     5.4.0     Interfaces for Python

Note

Do NOT install from the PyPI repo: https://pypi.org/project/V3n0m/ is outdated and the included packages may be insecure. I do not have access to the PyPI repo. Only one person does.

Also, the other vittring/venom:latest image was removed (by me) because there only needs to be one image at the moment and it's the bleeding edge of Venom's development.