ghcr.io/idaholab/malcolm/filescan:26.06.0 linux/amd64

ghcr.io/idaholab/malcolm/filescan:26.06.0 - 国内下载镜像源 浏览次数:8

ghcr.io/idaholab/malcolm/filescan镜像是Malcolm项目的组件之一,用于对文件进行扫描与分析,可处理从网络流量或其他数据源中提取的文件,识别潜在的恶意内容或安全威胁,是Malcolm安全监控系统中负责文件分析的部分。

源镜像 ghcr.io/idaholab/malcolm/filescan:26.06.0
国内镜像 swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan:26.06.0
镜像ID sha256:224d5e9ccd72fbbd737dad1a60a34ce36f35d857bb7d02ef7a5443f2be2fd328
镜像TAG 26.06.0
大小 366.19MB
镜像源 ghcr.io
CMD /usr/local/bin/supervisord -c /etc/supervisord.conf -n
启动入口 /usr/bin/tini -- /usr/local/bin/docker-uid-gid-setup.sh /usr/local/bin/service_check_passthrough.sh -s filescan /usr/local/bin/docker-entrypoint.sh
工作目录 /filescan
OS/平台 linux/amd64
浏览量 8 次
贡献者
镜像创建 2026-05-27T22:07:20.904657561Z
同步时间 2026-06-13 18:59
开放端口
8001/tcp 8006/tcp
目录挂载
/filescan/data
环境变量
PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305 PYTHON_VERSION=3.13.13 PYTHON_SHA256=2ab91ff401783ccca64f75d10c882e957bdfd60e2bf5a72f8421793729b78a71 DEFAULT_UID=1000 DEFAULT_GID=1000 PUSER=scan PGROUP=scan PUSER_CHOWN=/filescan/data PUSER_PRIV_DROP=true PUSER_RLIMIT_UNLOCK=true DEBIAN_FRONTEND=noninteractive TERM=xterm PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 SUPERCRONIC_VERSION=0.2.46 SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux- SUPERCRONIC_CRONTAB=/etc/crontab YQ_VERSION=4.53.2 YQ_URL=https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_ STRELKA_HOST=strelka-frontend STRELKA_PORT=57314 FILESCAN_HEALTH_PORT=8001 FILESCAN_VERBOSITY= FILESCAN_OUTPUT_PATH=/filescan/data/logs/filescan-%(ts)s.log ZEEK_EXTRACTOR_PATH=/zeek/extract_files FILESCAN_HTTP_SERVER_ASSETS_DIR=/opt/assets FILESCAN_HTTP_SERVER_ENABLE=false FILESCAN_HTTP_SERVER_ZIP=true FILESCAN_HTTP_SERVER_KEY=infected FILESCAN_HTTP_SERVER_PORT=8006 FILESCAN_PRUNE_THRESHOLD_MAX_SIZE=1TB FILESCAN_PRUNE_THRESHOLD_TOTAL_DISK_USAGE_PERCENT=0 FILESCAN_PRUNE_INTERVAL_SECONDS=300 BUILD_DATE=2026-05-27T22:06:31Z MALCOLM_VERSION=26.06.0 VCS_REVISION=381a66a
镜像标签
malcolm@inl.gov: maintainer malcolm@inl.gov: org.opencontainers.image.authors 2026-05-27T22:06:31Z: org.opencontainers.image.created Malcolm container for scanning files extracted by Zeek: org.opencontainers.image.description https://github.com/idaholab/Malcolm/blob/main/README.md: org.opencontainers.image.documentation 381a66a: org.opencontainers.image.revision https://github.com/idaholab/Malcolm: org.opencontainers.image.source ghcr.io/idaholab/malcolm/filescan: org.opencontainers.image.title https://github.com/idaholab/Malcolm: org.opencontainers.image.url Idaho National Laboratory: org.opencontainers.image.vendor 26.06.0: org.opencontainers.image.version
镜像安全扫描 查看Trivy扫描报告

系统OS: debian 13.5 扫描引擎: Trivy 扫描时间: 2026-06-13 18:59

低危漏洞:152 中危漏洞:105 高危漏洞:44 严重漏洞:8

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan:26.06.0
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan:26.06.0  ghcr.io/idaholab/malcolm/filescan:26.06.0

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan:26.06.0
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan:26.06.0  ghcr.io/idaholab/malcolm/filescan:26.06.0

Shell快速替换命令

sed -i 's#ghcr.io/idaholab/malcolm/filescan:26.06.0#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan:26.06.0#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan:26.06.0 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan:26.06.0  ghcr.io/idaholab/malcolm/filescan:26.06.0'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan:26.06.0 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan:26.06.0  ghcr.io/idaholab/malcolm/filescan:26.06.0'

镜像构建历史


# 2026-05-28 06:07:20  0.00B 添加元数据标签
LABEL org.opencontainers.image.revision=381a66a
                        
# 2026-05-28 06:07:20  0.00B 添加元数据标签
LABEL org.opencontainers.image.version=26.06.0
                        
# 2026-05-28 06:07:20  0.00B 添加元数据标签
LABEL org.opencontainers.image.created=2026-05-27T22:06:31Z
                        
# 2026-05-28 06:07:20  0.00B 设置环境变量 VCS_REVISION
ENV VCS_REVISION=381a66a
                        
# 2026-05-28 06:07:20  0.00B 设置环境变量 MALCOLM_VERSION
ENV MALCOLM_VERSION=26.06.0
                        
# 2026-05-28 06:07:20  0.00B 设置环境变量 BUILD_DATE
ENV BUILD_DATE=2026-05-27T22:06:31Z
                        
# 2026-05-28 06:07:20  0.00B 定义构建参数
ARG VCS_REVISION=381a66a
                        
# 2026-05-28 06:07:20  0.00B 定义构建参数
ARG MALCOLM_VERSION=26.06.0
                        
# 2026-05-28 06:07:20  0.00B 定义构建参数
ARG BUILD_DATE=2026-05-27T22:06:31Z
                        
# 2026-05-28 06:07:20  0.00B 设置默认要执行的命令
CMD ["/usr/local/bin/supervisord" "-c" "/etc/supervisord.conf" "-n"]
                        
# 2026-05-28 06:07:20  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/usr/bin/tini" "--" "/usr/local/bin/docker-uid-gid-setup.sh" "/usr/local/bin/service_check_passthrough.sh" "-s" "filescan" "/usr/local/bin/docker-entrypoint.sh"]
                        
# 2026-05-28 06:07:20  0.00B 设置工作目录为/filescan
WORKDIR /filescan
                        
# 2026-05-28 06:07:20  0.00B 声明容器运行时监听的端口
EXPOSE [8001/tcp]
                        
# 2026-05-28 06:07:20  0.00B 声明容器运行时监听的端口
EXPOSE [8006/tcp]
                        
# 2026-05-28 06:07:20  0.00B 创建挂载点用于持久化数据或共享数据
VOLUME [/filescan/data]
                        
# 2026-05-28 06:07:20  14.62KB 复制文件或目录到容器中
ADD --chmod=644 shared/bin/watch_common.py /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:07:20  6.67KB 复制文件或目录到容器中
ADD --chmod=644 scripts/malcolm_constants.py /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:07:20  52.21KB 复制文件或目录到容器中
ADD --chmod=644 scripts/malcolm_utils.py /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:07:20  708.00B 复制文件或目录到容器中
ADD --chmod=755 filescan/scripts/*.sh /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:07:20  38.05KB 复制文件或目录到容器中
ADD --chmod=755 filescan/scripts/*.py /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:07:20  2.96KB 复制文件或目录到容器中
ADD --chmod=644 filescan/supervisord.conf /etc/supervisord.conf # buildkit
                        
# 2026-05-28 06:07:20  701.00B 复制文件或目录到容器中
ADD --chmod=644 filescan/filescan-config.yml /filescan/filescan-config.yml # buildkit
                        
# 2026-05-28 06:07:20  7.14KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/service_check_passthrough.sh /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:07:20  5.86KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/prune_files.sh /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:07:20  10.93KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/docker-uid-gid-setup.sh /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:07:20  679.00B 复制文件或目录到容器中
ADD --chmod=755 container-health-scripts/filescan.sh /usr/local/bin/container_health.sh # buildkit
                        
# 2026-05-28 06:07:20  2.46MB 复制新文件或目录到容器中
COPY --chmod=755 /goStatic /usr/bin/goStatic # buildkit
                        
# 2026-05-28 06:07:20  244.77MB 执行命令并创建新的镜像层
RUN |14 DEFAULT_UID=1000 DEFAULT_GID=1000 STRELKA_HOST=strelka-frontend STRELKA_PORT=57314 FILESCAN_HEALTH_PORT=8001 FILESCAN_VERBOSITY= FILESCAN_OUTPUT_PATH=/filescan/data/logs/filescan-%(ts)s.log FILESCAN_HTTP_SERVER_ENABLE=false FILESCAN_HTTP_SERVER_ZIP=true FILESCAN_HTTP_SERVER_KEY=infected FILESCAN_HTTP_SERVER_PORT=8006 FILESCAN_PRUNE_THRESHOLD_MAX_SIZE=1TB FILESCAN_PRUNE_THRESHOLD_TOTAL_DISK_USAGE_PERCENT=0 FILESCAN_PRUNE_INTERVAL_SECONDS=300 /bin/sh -c set -e ;     groupadd --gid ${DEFAULT_GID} ${PGROUP} ;         useradd -M --uid ${DEFAULT_UID} --gid ${DEFAULT_GID} --home /nonexistent ${PUSER} ;         usermod -a -G tty ${PUSER} ;     sed -i /etc/apt/sources.list.d/debian.sources -e 's/main$/main contrib non-free/' ;     apt-get update -q ;     apt-get install -y -q --no-install-recommends       automake       build-essential       bash       bc       ca-certificates       curl       gcc       g++       git       inotify-tools       jq       libjansson-dev       libjansson4       libmagic-dev       libmagic1       libssl-dev       libssl3       libtool       make       openssl       pkg-config       psmisc       rsync       tini       unzip       webfs ;     curl -fsSL -o /usr/local/bin/supercronic "${SUPERCRONIC_URL}$(uname -m | sed 's/x86_64/amd64/' | sed 's/aarch64/arm64/')" ;         chmod +x /usr/local/bin/supercronic ;     curl -fsSL -o /usr/local/bin/yq "${YQ_URL}$(uname -m | sed 's/x86_64/amd64/' | sed 's/aarch64/arm64/')" ;         chmod 755 /usr/local/bin/yq ;     mkdir -p /filescan /filescan/data/files /filescan/data/logs "${FILESCAN_HTTP_SERVER_ASSETS_DIR}" ;     cd /tmp &&       /usr/local/bin/web-ui-asset-download.sh -o "${FILESCAN_HTTP_SERVER_ASSETS_DIR}/css" &&     cd /install-filescan ;         python3 -m pip install --break-system-packages --no-cache-dir -r requirements.txt ;         make ;         python3 -m pip install --break-system-packages --no-cache-dir . ;     cd /filescan ;     find /filescan "${FILESCAN_HTTP_SERVER_ASSETS_DIR}" -type d -exec chmod 755 "{}" \; ;     find /filescan "${FILESCAN_HTTP_SERVER_ASSETS_DIR}" -type f -exec chmod 644 "{}" \; ;     chown -R $PUSER:$PGROUP /filescan/data "${FILESCAN_HTTP_SERVER_ASSETS_DIR}" ;     apt-get remove -y -q --allow-downgrades --allow-remove-essential --allow-change-held-packages --purge       automake       build-essential       gcc       g++       gcc-12       libc6-dev       libgcc-12-dev       libjansson-dev       libmagic-dev       libssl-dev       libtool       make ;     apt-get autoremove -y -q --allow-downgrades --allow-remove-essential --allow-change-held-packages ;         apt-get clean -y -q ;         rm -rf /install-filescan /var/lib/apt/lists/* /var/cache/* /tmp/* /var/tmp/* /usr/lib/x86_64-linux-gnu/*.a # buildkit
                        
# 2026-05-28 06:06:38  1.99KB 复制文件或目录到容器中
ADD --chmod=755 filescan/scripts/web-ui-asset-download.sh /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:06:38  34.49KB 复制文件或目录到容器中
ADD --chmod=644 docs/images/icon/favicon.ico /opt/assets/favicon.ico # buildkit
                        
# 2026-05-28 06:06:38  81.18KB 复制文件或目录到容器中
ADD --chmod=644 docs/images/logo/Malcolm_background.png /opt/assets/assets/img/bg-masthead.png # buildkit
                        
# 2026-05-28 06:06:38  80.74KB 复制文件或目录到容器中
ADD nginx/landingpage/js /opt/assets/js # buildkit
                        
# 2026-05-28 06:06:38  239.76KB 复制文件或目录到容器中
ADD nginx/landingpage/css /opt/assets/css # buildkit
                        
# 2026-05-28 06:06:38  668.05KB 复制文件或目录到容器中
ADD filescan/python-filescan/ /install-filescan/ # buildkit
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 FILESCAN_PRUNE_INTERVAL_SECONDS
ENV FILESCAN_PRUNE_INTERVAL_SECONDS=300
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 FILESCAN_PRUNE_THRESHOLD_TOTAL_DISK_USAGE_PERCENT
ENV FILESCAN_PRUNE_THRESHOLD_TOTAL_DISK_USAGE_PERCENT=0
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 FILESCAN_PRUNE_THRESHOLD_MAX_SIZE
ENV FILESCAN_PRUNE_THRESHOLD_MAX_SIZE=1TB
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 FILESCAN_HTTP_SERVER_PORT
ENV FILESCAN_HTTP_SERVER_PORT=8006
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 FILESCAN_HTTP_SERVER_KEY
ENV FILESCAN_HTTP_SERVER_KEY=infected
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 FILESCAN_HTTP_SERVER_ZIP
ENV FILESCAN_HTTP_SERVER_ZIP=true
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 FILESCAN_HTTP_SERVER_ENABLE
ENV FILESCAN_HTTP_SERVER_ENABLE=false
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 FILESCAN_HTTP_SERVER_ASSETS_DIR
ENV FILESCAN_HTTP_SERVER_ASSETS_DIR=/opt/assets
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 ZEEK_EXTRACTOR_PATH
ENV ZEEK_EXTRACTOR_PATH=/zeek/extract_files
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 FILESCAN_OUTPUT_PATH
ENV FILESCAN_OUTPUT_PATH=/filescan/data/logs/filescan-%(ts)s.log
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 FILESCAN_VERBOSITY
ENV FILESCAN_VERBOSITY=
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 FILESCAN_HEALTH_PORT
ENV FILESCAN_HEALTH_PORT=8001
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 STRELKA_PORT
ENV STRELKA_PORT=57314
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 STRELKA_HOST
ENV STRELKA_HOST=strelka-frontend
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 YQ_URL
ENV YQ_URL=https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 YQ_VERSION
ENV YQ_VERSION=4.53.2
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 SUPERCRONIC_CRONTAB
ENV SUPERCRONIC_CRONTAB=/etc/crontab
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 SUPERCRONIC_URL
ENV SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux-
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 SUPERCRONIC_VERSION
ENV SUPERCRONIC_VERSION=0.2.46
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 PYTHONUNBUFFERED
ENV PYTHONUNBUFFERED=1
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 PYTHONDONTWRITEBYTECODE
ENV PYTHONDONTWRITEBYTECODE=1
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 TERM
ENV TERM=xterm
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 DEBIAN_FRONTEND
ENV DEBIAN_FRONTEND=noninteractive
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG FILESCAN_PRUNE_INTERVAL_SECONDS=300
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG FILESCAN_PRUNE_THRESHOLD_TOTAL_DISK_USAGE_PERCENT=0
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG FILESCAN_PRUNE_THRESHOLD_MAX_SIZE=1TB
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG FILESCAN_HTTP_SERVER_PORT=8006
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG FILESCAN_HTTP_SERVER_KEY=infected
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG FILESCAN_HTTP_SERVER_ZIP=true
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG FILESCAN_HTTP_SERVER_ENABLE=false
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG FILESCAN_OUTPUT_PATH=/filescan/data/logs/filescan-%(ts)s.log
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG FILESCAN_VERBOSITY=
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG FILESCAN_HEALTH_PORT=8001
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG STRELKA_PORT=57314
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG STRELKA_HOST=strelka-frontend
                        
# 2026-05-28 06:06:38  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 PUSER_RLIMIT_UNLOCK
ENV PUSER_RLIMIT_UNLOCK=true
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 PUSER_PRIV_DROP
ENV PUSER_PRIV_DROP=true
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 PUSER_CHOWN
ENV PUSER_CHOWN=/filescan/data
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 PGROUP
ENV PGROUP=scan
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 PUSER
ENV PUSER=scan
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 DEFAULT_GID
ENV DEFAULT_GID=1000
                        
# 2026-05-28 06:06:38  0.00B 设置环境变量 DEFAULT_UID
ENV DEFAULT_UID=1000
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG DEFAULT_GID=1000
                        
# 2026-05-28 06:06:38  0.00B 定义构建参数
ARG DEFAULT_UID=1000
                        
# 2026-05-28 06:06:38  0.00B 添加元数据标签
LABEL org.opencontainers.image.description=Malcolm container for scanning files extracted by Zeek
                        
# 2026-05-28 06:06:38  0.00B 添加元数据标签
LABEL org.opencontainers.image.title=ghcr.io/idaholab/malcolm/filescan
                        
# 2026-05-28 06:06:38  0.00B 添加元数据标签
LABEL org.opencontainers.image.vendor=Idaho National Laboratory
                        
# 2026-05-28 06:06:38  0.00B 添加元数据标签
LABEL org.opencontainers.image.source=https://github.com/idaholab/Malcolm
                        
# 2026-05-28 06:06:38  0.00B 添加元数据标签
LABEL org.opencontainers.image.documentation=https://github.com/idaholab/Malcolm/blob/main/README.md
                        
# 2026-05-28 06:06:38  0.00B 添加元数据标签
LABEL org.opencontainers.image.url=https://github.com/idaholab/Malcolm
                        
# 2026-05-28 06:06:38  0.00B 添加元数据标签
LABEL org.opencontainers.image.authors=malcolm@inl.gov
                        
# 2026-05-28 06:06:38  0.00B 添加元数据标签
LABEL maintainer=malcolm@inl.gov
                        
# 2026-05-20 07:50:25  0.00B 设置默认要执行的命令
CMD ["python3"]
                        
# 2026-05-20 07:50:25  36.00B 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	for src in idle3 pip3 pydoc3 python3 python3-config; do 		dst="$(echo "$src" | tr -d 3)"; 		[ -s "/usr/local/bin/$src" ]; 		[ ! -e "/usr/local/bin/$dst" ]; 		ln -svT "$src" "/usr/local/bin/$dst"; 	done # buildkit
                        
# 2026-05-20 07:50:25  35.28MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 		savedAptMark="$(apt-mark showmanual)"; 	apt-get update; 	apt-get install -y --no-install-recommends 		dpkg-dev 		gcc 		gnupg 		libbluetooth-dev 		libbz2-dev 		libc6-dev 		libdb-dev 		libffi-dev 		libgdbm-dev 		liblzma-dev 		libncursesw5-dev 		libreadline-dev 		libsqlite3-dev 		libssl-dev 		make 		tk-dev 		uuid-dev 		wget 		xz-utils 		zlib1g-dev 	; 		wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; 	echo "$PYTHON_SHA256 *python.tar.xz" | sha256sum -c -; 	wget -O python.tar.xz.asc "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc"; 	GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; 	gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$GPG_KEY"; 	gpg --batch --verify python.tar.xz.asc python.tar.xz; 	gpgconf --kill all; 	rm -rf "$GNUPGHOME" python.tar.xz.asc; 	mkdir -p /usr/src/python; 	tar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; 	rm python.tar.xz; 		cd /usr/src/python; 	gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; 	./configure 		--build="$gnuArch" 		--enable-loadable-sqlite-extensions 		--enable-optimizations 		--enable-option-checking=fatal 		--enable-shared 		$(test "${gnuArch%%-*}" != 'riscv64' && echo '--with-lto') 		--with-ensurepip 	; 	nproc="$(nproc)"; 	EXTRA_CFLAGS="$(dpkg-buildflags --get CFLAGS)"; 	LDFLAGS="$(dpkg-buildflags --get LDFLAGS)"; 	LDFLAGS="${LDFLAGS:-} -Wl,--strip-all"; 	arch="$(dpkg --print-architecture)"; arch="${arch##*-}"; 	case "$arch" in 		amd64|arm64) 			EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer"; 			;; 		i386) 			;; 		*) 			EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer"; 			;; 	esac; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:-}" 	; 	rm python; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:-} -Wl,-rpath='\$\$ORIGIN/../lib'" 		python 	; 	make install; 		cd /; 	rm -rf /usr/src/python; 		find /usr/local -depth 		\( 			\( -type d -a \( -name test -o -name tests -o -name idle_test \) \) 			-o \( -type f -a \( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \) \) 		\) -exec rm -rf '{}' + 	; 		ldconfig; 		apt-mark auto '.*' > /dev/null; 	apt-mark manual $savedAptMark; 	find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec ldd '{}' ';' 		| awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' 		| sort -u 		| xargs -rt dpkg-query --search 		| awk 'sub(":$", "", $1) { print $1 }' 		| sort -u 		| xargs -r apt-mark manual 	; 	apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; 	apt-get dist-clean; 		export PYTHONDONTWRITEBYTECODE=1; 	python3 --version; 	pip3 --version # buildkit
                        
# 2026-05-20 07:40:20  0.00B 设置环境变量 PYTHON_SHA256
ENV PYTHON_SHA256=2ab91ff401783ccca64f75d10c882e957bdfd60e2bf5a72f8421793729b78a71
                        
# 2026-05-20 07:40:20  0.00B 设置环境变量 PYTHON_VERSION
ENV PYTHON_VERSION=3.13.13
                        
# 2026-05-20 07:40:20  0.00B 设置环境变量 GPG_KEY
ENV GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305
                        
# 2026-05-20 07:40:20  3.81MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	apt-get update; 	apt-get install -y --no-install-recommends 		ca-certificates 		netbase 		tzdata 	; 	apt-get dist-clean # buildkit
                        
# 2026-05-20 07:40:20  0.00B 设置环境变量 PATH
ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-05-18 08:00:00  78.62MB 
# debian.sh --arch 'amd64' out/ 'trixie' '@1779062400'
                        
                    

镜像信息

{
    "Id": "sha256:224d5e9ccd72fbbd737dad1a60a34ce36f35d857bb7d02ef7a5443f2be2fd328",
    "RepoTags": [
        "ghcr.io/idaholab/malcolm/filescan:26.06.0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan:26.06.0"
    ],
    "RepoDigests": [
        "ghcr.io/idaholab/malcolm/filescan@sha256:6f78f6fa0e562db92613951def6da047fabdfb848f64a14c80c0d208e8d7b6d0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filescan@sha256:c32b6de467ea6e91df9c3cf09d22dff07d6b8e19f5246ff488241e078bc3727f"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-05-27T22:07:20.904657561Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "root",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "8001/tcp": {},
            "8006/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305",
            "PYTHON_VERSION=3.13.13",
            "PYTHON_SHA256=2ab91ff401783ccca64f75d10c882e957bdfd60e2bf5a72f8421793729b78a71",
            "DEFAULT_UID=1000",
            "DEFAULT_GID=1000",
            "PUSER=scan",
            "PGROUP=scan",
            "PUSER_CHOWN=/filescan/data",
            "PUSER_PRIV_DROP=true",
            "PUSER_RLIMIT_UNLOCK=true",
            "DEBIAN_FRONTEND=noninteractive",
            "TERM=xterm",
            "PYTHONDONTWRITEBYTECODE=1",
            "PYTHONUNBUFFERED=1",
            "SUPERCRONIC_VERSION=0.2.46",
            "SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux-",
            "SUPERCRONIC_CRONTAB=/etc/crontab",
            "YQ_VERSION=4.53.2",
            "YQ_URL=https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_",
            "STRELKA_HOST=strelka-frontend",
            "STRELKA_PORT=57314",
            "FILESCAN_HEALTH_PORT=8001",
            "FILESCAN_VERBOSITY=",
            "FILESCAN_OUTPUT_PATH=/filescan/data/logs/filescan-%(ts)s.log",
            "ZEEK_EXTRACTOR_PATH=/zeek/extract_files",
            "FILESCAN_HTTP_SERVER_ASSETS_DIR=/opt/assets",
            "FILESCAN_HTTP_SERVER_ENABLE=false",
            "FILESCAN_HTTP_SERVER_ZIP=true",
            "FILESCAN_HTTP_SERVER_KEY=infected",
            "FILESCAN_HTTP_SERVER_PORT=8006",
            "FILESCAN_PRUNE_THRESHOLD_MAX_SIZE=1TB",
            "FILESCAN_PRUNE_THRESHOLD_TOTAL_DISK_USAGE_PERCENT=0",
            "FILESCAN_PRUNE_INTERVAL_SECONDS=300",
            "BUILD_DATE=2026-05-27T22:06:31Z",
            "MALCOLM_VERSION=26.06.0",
            "VCS_REVISION=381a66a"
        ],
        "Cmd": [
            "/usr/local/bin/supervisord",
            "-c",
            "/etc/supervisord.conf",
            "-n"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": {
            "/filescan/data": {}
        },
        "WorkingDir": "/filescan",
        "Entrypoint": [
            "/usr/bin/tini",
            "--",
            "/usr/local/bin/docker-uid-gid-setup.sh",
            "/usr/local/bin/service_check_passthrough.sh",
            "-s",
            "filescan",
            "/usr/local/bin/docker-entrypoint.sh"
        ],
        "OnBuild": null,
        "Labels": {
            "maintainer": "malcolm@inl.gov",
            "org.opencontainers.image.authors": "malcolm@inl.gov",
            "org.opencontainers.image.created": "2026-05-27T22:06:31Z",
            "org.opencontainers.image.description": "Malcolm container for scanning files extracted by Zeek",
            "org.opencontainers.image.documentation": "https://github.com/idaholab/Malcolm/blob/main/README.md",
            "org.opencontainers.image.revision": "381a66a",
            "org.opencontainers.image.source": "https://github.com/idaholab/Malcolm",
            "org.opencontainers.image.title": "ghcr.io/idaholab/malcolm/filescan",
            "org.opencontainers.image.url": "https://github.com/idaholab/Malcolm",
            "org.opencontainers.image.vendor": "Idaho National Laboratory",
            "org.opencontainers.image.version": "26.06.0"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 366193188,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/4404894ae31428cc63cf15b01d55f955d6041810c7c2deada789916a50c11c75/diff:/var/lib/docker/overlay2/3fd5383db0ea9c8f6f08c4107b2a60624817da343bd374649995a8b57ccbf94f/diff:/var/lib/docker/overlay2/569d503e288c7826060d75a91e808bc88b1c17c481a882f5c52a0b17c55cc66f/diff:/var/lib/docker/overlay2/4473d3eec497ba6eaeb6df270563c152c40bb645abda7233cc017c0978302f08/diff:/var/lib/docker/overlay2/0bf03f735452d74c09e78b719ca4a5c5555d04aca7c17e1cb93d52f28b23a35b/diff:/var/lib/docker/overlay2/9ad5be18168cb80dbe12fd5094ef13a1b64b91ebd747e53e192d591044a04a97/diff:/var/lib/docker/overlay2/e4176b10763c6044d41a3bd811df73f3818370da43a4a9b78c8b57f39f0eb3a3/diff:/var/lib/docker/overlay2/b97bf19f8b88bbf1292ab6972812745bc5fe06fc47227f9bc02c83eb59e48b0c/diff:/var/lib/docker/overlay2/6ada7cab4942d7e8ba2ad9365a56690330ee8467835cbc68b83fe8119dd7dfe7/diff:/var/lib/docker/overlay2/f11664917c2dd5d5a665660a3f31dc630f734272f86347996db62e2d3d40140f/diff:/var/lib/docker/overlay2/d777a15c523f9784d3110e25e69fc44794b755717efc898ffae06eadeb603cd7/diff:/var/lib/docker/overlay2/515ae44df062aa86b231ab31e07f3212b537100bf19ef850abf0341ee6714a08/diff:/var/lib/docker/overlay2/4774d99f8b04dcbc4b3604a74105caf0cbe5196cc35d5c0b0865781f8ee88b7b/diff:/var/lib/docker/overlay2/8b5f328f1f97af56069a96f677b6723822890cd66408e5ba9d67e8e0645b80c7/diff:/var/lib/docker/overlay2/c1dc264923f57f830d9b48dc65bd3a9cbf7c21d9a3e8af1ea494a47c40b94772/diff:/var/lib/docker/overlay2/20d2838206dbac9e22ebd0333036aab0bfbe552c136f99077771e1d426310be7/diff:/var/lib/docker/overlay2/b8b8ee822d525f291faf3d81407c504c5ea0119a278a51c919ace6934d6e3972/diff:/var/lib/docker/overlay2/5ee87c4087e79f48852ffcf203e273e24a0912e40c448b18c390119d05d5bb6a/diff:/var/lib/docker/overlay2/e6ce6c4d463cecba03ee6772933f9f8a3b1768f4b3b5c99ab140ebefa58f0e19/diff:/var/lib/docker/overlay2/614578e012fbef2c3900d6359e035327626d6052b0cc0b863da794b44eac57d7/diff:/var/lib/docker/overlay2/9a0504d700395667692e6dd0ccc406233cdd1733f9e623999ffef9ec610621ea/diff:/var/lib/docker/overlay2/4c16587e6800a036adbffbf9dc90571dc77b23187fba070bc882372c96085dbf/diff:/var/lib/docker/overlay2/cd0bbc9c69e026633d38a0c4693c779a3d10a0542c78032cd6cc9dbe54fe597d/diff",
            "MergedDir": "/var/lib/docker/overlay2/70e95a146490412aec6b39ce9753a3c577e9dbbb6fafeea1f60a461ca7688855/merged",
            "UpperDir": "/var/lib/docker/overlay2/70e95a146490412aec6b39ce9753a3c577e9dbbb6fafeea1f60a461ca7688855/diff",
            "WorkDir": "/var/lib/docker/overlay2/70e95a146490412aec6b39ce9753a3c577e9dbbb6fafeea1f60a461ca7688855/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40",
            "sha256:11a6b74b5f5043af6e7733d95340f3c61fd1819276dcedba287a1212ff93ca9b",
            "sha256:18c755e4a9cc88f271358a36f12e9a599ba12ebf7ae6d01c18737cfb5aa0280f",
            "sha256:a333446ab0a718911bd7420a86800097b203696964112d33e968d4d2895537fe",
            "sha256:9b7f67ea3affb489883292e59e4b438047c4f87f72f2f3e71e5e9a38d12aec6f",
            "sha256:19c9f4113e68cf08761f1ecce810d35aee633dfd906c80967212f953e2c81bbc",
            "sha256:21aa951b8505b69e696eaa3a3c7c92c60ca28a95428e20b47b0b9518785619bb",
            "sha256:d806c13ba5ca3df7090b781f4a689775f5ef73225f6bf5789c7931b8173861ef",
            "sha256:2e48c8df9fe3448842bb31e99490184613b57c6caee66de6ebbbf1f48b0d73b1",
            "sha256:d610e8bc6de1ad8c7c605ff555c6649d3db93c87ed4a154f5929c42fb279ddc1",
            "sha256:2813c0cd3583a42a2f47374f93abd5a5152a7eec264b7c3487203f47f59e2c1f",
            "sha256:23d5eefea476306d46484f9eeaf179a48e7fe8861be0293bb143ff146f926fa3",
            "sha256:ff335336eba7d8a5609033973c2ae6315597ef041ed2cb62f9278f0fa9df757b",
            "sha256:b37d299f5cee24c83716f619295954b8ba2266a844d03de03aec34b9adfa5138",
            "sha256:b434fd4f7b9ff32f49e62e74430cf374a7ae10bf780aa87015a5a4e0129667da",
            "sha256:4554ad7ace8d9dac09f70c29c9c281b1344c8969ab8f6064f917e38a4189a3a8",
            "sha256:0804bab466ac0cb7a45ccf810d6b23914e3163969e4d30ed2fc9d43b82b77b9e",
            "sha256:13732c0daa9a1eee84ae73deff7c772e7d7103bea0af062dc8843d86e284ff5e",
            "sha256:6f1602d8e06c45f939a1ff9791e963dd8b2a48fd8e634b9ca59b6f813ab37c1f",
            "sha256:1fb5cb06be99b28d778c698cf83f6b821e122aa2af676a690a9708135218ed87",
            "sha256:5b134ad48218d9d06726bd02bb4ef051730bb01da18f89446e155a02dd55db23",
            "sha256:168aff07b97ebc42ddba5e026c500aac19daf1ccec85c504b4b023fe8f859729",
            "sha256:b707185cd9b6e526bb4c1c0996bff318e90b464bbaac9c2032f7a7514660913f",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-06-13T18:59:00.15185962+08:00"
    }
}

更多版本

ghcr.io/idaholab/malcolm/filescan:26.06.0

linux/amd64 ghcr.io366.19MB2026-06-13 18:59
7