ghcr.io/idaholab/malcolm/strelka-backend:26.06.0 linux/amd64

ghcr.io/idaholab/malcolm/strelka-backend:26.06.0 - 国内下载镜像源 浏览次数:8

该镜像是Malcolm网络流量分析平台的组成部分,作为Strelka的后端服务组件,负责处理Strelka系统的数据相关任务,支持Malcolm平台实现网络流量的分析功能。

源镜像 ghcr.io/idaholab/malcolm/strelka-backend:26.06.0
国内镜像 swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend:26.06.0
镜像ID sha256:69b37ec822a287c40c130ed3673f10a29cdba8560228e1706416814abde800b9
镜像TAG 26.06.0
大小 3.56GB
镜像源 ghcr.io
CMD /usr/bin/supervisord -c /etc/supervisord.conf -n
启动入口 /usr/bin/tini -- /usr/local/bin/docker-uid-gid-setup.sh /usr/local/bin/service_check_passthrough.sh -s strelka_backend /usr/local/bin/docker-entrypoint.sh
工作目录 /home/strelka/strelka/
OS/平台 linux/amd64
浏览量 8 次
贡献者
镜像创建 2026-05-27T22:04:40.51101894Z
同步时间 2026-06-13 18:12
目录挂载
/var/lib/clamav /yara-rules /yara-rules-src
环境变量
PATH=/home/strelka/.pyenv/bin:/home/strelka/.pyenv/shims:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin PYTHONDONTWRITEBYTECODE=1 PYTHONFAULTHANDLER=1 PYTHONUNBUFFERED=1 PYENV_ROOT=/home/strelka/.pyenv DEFAULT_UID=1000 DEFAULT_GID=1000 PUSER=strelka PGROUP=strelka PUSER_PRIV_DROP=true PUSER_RLIMIT_UNLOCK=true RULES_UPDATE_ENABLED=false DEBIAN_FRONTEND=noninteractive TERM=xterm YQ_VERSION=4.53.2 YQ_URL=https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_ SUPERCRONIC_VERSION=0.2.46 SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux- SUPERCRONIC_CRONTAB=/etc/crontab YARA_RULES_SRC_DIR=/yara-rules-src YARA_RULES_DIR=/yara-rules YARA_COMPILED_RULES_FILE=rules.compiled EXTRACTED_FILE_MAX_BYTES=134217728 CLAMD_SOCKET_FILE=/tmp/clamd.ctl CLAMAV_RULES_DIR=/var/lib/clamav STRELKA_BACKEND_PROCS=1 STRELKA_SCANNERS=ScanBatch,ScanBmpEof,ScanBzip2,ScanClamav,ScanDmg,ScanDocx,ScanDonut,ScanEmail,ScanEncryptedDoc,ScanEncryptedZip,ScanEntropy,ScanExiftool,ScanGifEof,ScanGzip,ScanHtml,ScanIqy,ScanIso,ScanJarManifest,ScanJavascript,ScanJnlp,ScanJpegEof,ScanJson,ScanLibarchive,ScanLnk,ScanLsb,ScanLzma,ScanMacho,ScanManifest,ScanMsi,ScanOle,ScanOnenote,ScanPdf,ScanPe,ScanPgp,ScanPhp,ScanPkcs7,ScanPlist,ScanPngEof,ScanPyinstaller,ScanQr,ScanRar,ScanRpm,ScanRtf,ScanSevenZip,ScanSwf,ScanTar,ScanTnef,ScanTranscode,ScanUdf,ScanUpx,ScanUrl,ScanVb,ScanVba,ScanVhd,ScanVsto,ScanXar,ScanXl4ma,ScanXml,ScanYara,ScanZip,ScanZlib,ScanZstd PUSER_CHOWN=/var/lib/clamav;/yara-rules;/yara-rules-src BUILD_DATE=2026-05-27T22:02:44Z MALCOLM_VERSION=26.06.0 VCS_REVISION=381a66a
镜像标签
malcolm@inl.gov: maintainer malcolm@inl.gov: org.opencontainers.image.authors 2026-05-27T22:02:44Z: org.opencontainers.image.created Malcolm container for the Strelka backend: org.opencontainers.image.description https://github.com/idaholab/Malcolm/blob/main/README.md: org.opencontainers.image.documentation 381a66a: org.opencontainers.image.revision https://github.com/idaholab/Malcolm: org.opencontainers.image.source ghcr.io/idaholab/malcolm/strelka-backend: org.opencontainers.image.title https://github.com/idaholab/Malcolm: org.opencontainers.image.url Idaho National Laboratory: org.opencontainers.image.vendor 26.06.0: org.opencontainers.image.version
镜像安全扫描 查看Trivy扫描报告

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-06-13 18:12

低危漏洞:126 中危漏洞:1847 高危漏洞:76 严重漏洞:12

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend:26.06.0
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend:26.06.0  ghcr.io/idaholab/malcolm/strelka-backend:26.06.0

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend:26.06.0
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend:26.06.0  ghcr.io/idaholab/malcolm/strelka-backend:26.06.0

Shell快速替换命令

sed -i 's#ghcr.io/idaholab/malcolm/strelka-backend:26.06.0#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend:26.06.0#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend:26.06.0 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend:26.06.0  ghcr.io/idaholab/malcolm/strelka-backend:26.06.0'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend:26.06.0 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend:26.06.0  ghcr.io/idaholab/malcolm/strelka-backend:26.06.0'

镜像构建历史


# 2026-05-28 06:04:40  0.00B 添加元数据标签
LABEL org.opencontainers.image.revision=381a66a
                        
# 2026-05-28 06:04:40  0.00B 添加元数据标签
LABEL org.opencontainers.image.version=26.06.0
                        
# 2026-05-28 06:04:40  0.00B 添加元数据标签
LABEL org.opencontainers.image.created=2026-05-27T22:02:44Z
                        
# 2026-05-28 06:04:40  0.00B 设置环境变量 VCS_REVISION
ENV VCS_REVISION=381a66a
                        
# 2026-05-28 06:04:40  0.00B 设置环境变量 MALCOLM_VERSION
ENV MALCOLM_VERSION=26.06.0
                        
# 2026-05-28 06:04:40  0.00B 设置环境变量 BUILD_DATE
ENV BUILD_DATE=2026-05-27T22:02:44Z
                        
# 2026-05-28 06:04:40  0.00B 定义构建参数
ARG VCS_REVISION=381a66a
                        
# 2026-05-28 06:04:40  0.00B 定义构建参数
ARG MALCOLM_VERSION=26.06.0
                        
# 2026-05-28 06:04:40  0.00B 定义构建参数
ARG BUILD_DATE=2026-05-27T22:02:44Z
                        
# 2026-05-28 06:04:40  0.00B 设置默认要执行的命令
CMD ["/usr/bin/supervisord" "-c" "/etc/supervisord.conf" "-n"]
                        
# 2026-05-28 06:04:40  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/usr/bin/tini" "--" "/usr/local/bin/docker-uid-gid-setup.sh" "/usr/local/bin/service_check_passthrough.sh" "-s" "strelka_backend" "/usr/local/bin/docker-entrypoint.sh"]
                        
# 2026-05-28 06:04:40  0.00B 创建挂载点用于持久化数据或共享数据
VOLUME [/var/lib/clamav /yara-rules /yara-rules-src]
                        
# 2026-05-28 06:04:40  0.00B 设置环境变量 PUSER_CHOWN
ENV PUSER_CHOWN=/var/lib/clamav;/yara-rules;/yara-rules-src
                        
# 2026-05-28 06:04:40  304.00B 复制文件或目录到容器中
ADD --chmod=755 container-health-scripts/strelka-backend.sh /usr/local/bin/container_health.sh # buildkit
                        
# 2026-05-28 06:04:40  7.14KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/service_check_passthrough.sh /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:04:40  10.93KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/docker-uid-gid-setup.sh /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:04:40  1.82KB 复制文件或目录到容器中
ADD --chmod=644 strelka/backend/supervisord.conf /etc/supervisord.conf # buildkit
                        
# 2026-05-28 06:04:40  2.46MB 复制新文件或目录到容器中
COPY --chmod=755 /goStatic /usr/bin/goStatic # buildkit
                        
# 2026-05-28 06:04:40  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-05-28 06:04:40  86.10MB 执行命令并创建新的镜像层
RUN |6 DEFAULT_UID=1000 DEFAULT_GID=1000 RULES_UPDATE_ENABLED=false EXTRACTED_FILE_MAX_BYTES=134217728 STRELKA_BACKEND_PROCS=1 STRELKA_SCANNERS=ScanBatch,ScanBmpEof,ScanBzip2,ScanClamav,ScanDmg,ScanDocx,ScanDonut,ScanEmail,ScanEncryptedDoc,ScanEncryptedZip,ScanEntropy,ScanExiftool,ScanGifEof,ScanGzip,ScanHtml,ScanIqy,ScanIso,ScanJarManifest,ScanJavascript,ScanJnlp,ScanJpegEof,ScanJson,ScanLibarchive,ScanLnk,ScanLsb,ScanLzma,ScanMacho,ScanManifest,ScanMsi,ScanOle,ScanOnenote,ScanPdf,ScanPe,ScanPgp,ScanPhp,ScanPkcs7,ScanPlist,ScanPngEof,ScanPyinstaller,ScanQr,ScanRar,ScanRpm,ScanRtf,ScanSevenZip,ScanSwf,ScanTar,ScanTnef,ScanTranscode,ScanUdf,ScanUpx,ScanUrl,ScanVb,ScanVba,ScanVhd,ScanVsto,ScanXar,ScanXl4ma,ScanXml,ScanYara,ScanZip,ScanZlib,ScanZstd /bin/sh -c /usr/bin/freshclam freshclam --config-file=/etc/clamav/freshclam.conf # buildkit
                        
# 2026-05-28 06:04:30  0.00B 指定运行容器时使用的用户
USER strelka
                        
# 2026-05-28 06:04:30  108.33MB 执行命令并创建新的镜像层
RUN |6 DEFAULT_UID=1000 DEFAULT_GID=1000 RULES_UPDATE_ENABLED=false EXTRACTED_FILE_MAX_BYTES=134217728 STRELKA_BACKEND_PROCS=1 STRELKA_SCANNERS=ScanBatch,ScanBmpEof,ScanBzip2,ScanClamav,ScanDmg,ScanDocx,ScanDonut,ScanEmail,ScanEncryptedDoc,ScanEncryptedZip,ScanEntropy,ScanExiftool,ScanGifEof,ScanGzip,ScanHtml,ScanIqy,ScanIso,ScanJarManifest,ScanJavascript,ScanJnlp,ScanJpegEof,ScanJson,ScanLibarchive,ScanLnk,ScanLsb,ScanLzma,ScanMacho,ScanManifest,ScanMsi,ScanOle,ScanOnenote,ScanPdf,ScanPe,ScanPgp,ScanPhp,ScanPkcs7,ScanPlist,ScanPngEof,ScanPyinstaller,ScanQr,ScanRar,ScanRpm,ScanRtf,ScanSevenZip,ScanSwf,ScanTar,ScanTnef,ScanTranscode,ScanUdf,ScanUpx,ScanUrl,ScanVb,ScanVba,ScanVhd,ScanVsto,ScanXar,ScanXl4ma,ScanXml,ScanYara,ScanZip,ScanZlib,ScanZstd /bin/sh -c export BINARCH=$(uname -m | sed 's/x86_64/amd64/' | sed 's/aarch64/arm64/') &&     apt-get -q update &&     apt-get -y --no-install-recommends install       bc       clamav       clamav-daemon       clamav-freshclam       curl       git       jq       libclamunrar12       procps       psmisc       rsync       tini &&     usermod -a -G tty ${PUSER} &&     curl -fsSL -o /usr/local/bin/yq "${YQ_URL}${BINARCH}" &&       chmod 755 /usr/local/bin/yq &&     curl -fsSL -o /usr/local/bin/supercronic "${SUPERCRONIC_URL}${BINARCH}" &&       chmod +x /usr/local/bin/supercronic &&     mkdir -p "${YARA_RULES_DIR}" "${YARA_RULES_SRC_DIR}" /var/log/clamav "${CLAMAV_RULES_DIR}" &&     cd "${YARA_RULES_SRC_DIR}" &&       /usr/local/bin/yara_rules_setup.sh -u &&       rm -rf "${YARA_RULES_SRC_DIR}"/* &&       find "${YARA_RULES_DIR}" -type l \( ! -exec test -r "{}" \; \) -delete &&     chown -R ${PUSER}:${PGROUP} /var/log/clamav /etc/clamav "${CLAMAV_RULES_DIR}" "${YARA_RULES_DIR}" "${YARA_RULES_SRC_DIR}" &&       find /var/log/clamav /etc/clamav "${CLAMAV_RULES_DIR}" "${YARA_RULES_DIR}" "${YARA_RULES_SRC_DIR}" -type d -exec chmod 750 "{}" \; &&     sed -i 's/^Foreground .*$/Foreground true/g' /etc/clamav/clamd.conf &&       sed -i "s/^User .*$/User ${PUSER}/g" /etc/clamav/clamd.conf &&       sed -i "s|^LocalSocket .*$|LocalSocket $CLAMD_SOCKET_FILE|g" /etc/clamav/clamd.conf &&       sed -i "s/^LocalSocketGroup .*$/LocalSocketGroup ${PGROUP}/g" /etc/clamav/clamd.conf &&       sed -i "s/^MaxFileSize .*$/MaxFileSize $EXTRACTED_FILE_MAX_BYTES/g" /etc/clamav/clamd.conf &&       sed -i "s/^MaxScanSize .*$/MaxScanSize $(echo "$EXTRACTED_FILE_MAX_BYTES * 4" | bc)/g" /etc/clamav/clamd.conf &&       echo "TCPSocket 3310" >> /etc/clamav/clamd.conf &&     sed -i 's/^Foreground .*$/Foreground true/g' /etc/clamav/freshclam.conf &&       sed -i "s/^DatabaseOwner .*$/DatabaseOwner ${PUSER}/g" /etc/clamav/freshclam.conf &&     echo "0 0 * * * /usr/local/bin/yara_rules_setup.sh" > ${SUPERCRONIC_CRONTAB} &&     apt-get -y -q --allow-downgrades --allow-remove-essential --allow-change-held-packages autoremove &&       apt-get clean &&       rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* /var/log/journal # buildkit
                        
# 2026-05-28 06:03:31  48.38KB 复制文件或目录到容器中
ADD strelka/config/backend /etc/strelka/ # buildkit
                        
# 2026-05-28 06:03:31  7.61KB 复制文件或目录到容器中
ADD --chmod=755 strelka/backend/*.sh /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:03:31  5.73KB 复制文件或目录到容器中
ADD --chmod=755 strelka/*.sh /usr/local/bin/ # buildkit
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 STRELKA_SCANNERS
ENV STRELKA_SCANNERS=ScanBatch,ScanBmpEof,ScanBzip2,ScanClamav,ScanDmg,ScanDocx,ScanDonut,ScanEmail,ScanEncryptedDoc,ScanEncryptedZip,ScanEntropy,ScanExiftool,ScanGifEof,ScanGzip,ScanHtml,ScanIqy,ScanIso,ScanJarManifest,ScanJavascript,ScanJnlp,ScanJpegEof,ScanJson,ScanLibarchive,ScanLnk,ScanLsb,ScanLzma,ScanMacho,ScanManifest,ScanMsi,ScanOle,ScanOnenote,ScanPdf,ScanPe,ScanPgp,ScanPhp,ScanPkcs7,ScanPlist,ScanPngEof,ScanPyinstaller,ScanQr,ScanRar,ScanRpm,ScanRtf,ScanSevenZip,ScanSwf,ScanTar,ScanTnef,ScanTranscode,ScanUdf,ScanUpx,ScanUrl,ScanVb,ScanVba,ScanVhd,ScanVsto,ScanXar,ScanXl4ma,ScanXml,ScanYara,ScanZip,ScanZlib,ScanZstd
                        
# 2026-05-28 06:03:31  0.00B 定义构建参数
ARG STRELKA_SCANNERS=ScanBatch,ScanBmpEof,ScanBzip2,ScanClamav,ScanDmg,ScanDocx,ScanDonut,ScanEmail,ScanEncryptedDoc,ScanEncryptedZip,ScanEntropy,ScanExiftool,ScanGifEof,ScanGzip,ScanHtml,ScanIqy,ScanIso,ScanJarManifest,ScanJavascript,ScanJnlp,ScanJpegEof,ScanJson,ScanLibarchive,ScanLnk,ScanLsb,ScanLzma,ScanMacho,ScanManifest,ScanMsi,ScanOle,ScanOnenote,ScanPdf,ScanPe,ScanPgp,ScanPhp,ScanPkcs7,ScanPlist,ScanPngEof,ScanPyinstaller,ScanQr,ScanRar,ScanRpm,ScanRtf,ScanSevenZip,ScanSwf,ScanTar,ScanTnef,ScanTranscode,ScanUdf,ScanUpx,ScanUrl,ScanVb,ScanVba,ScanVhd,ScanVsto,ScanXar,ScanXl4ma,ScanXml,ScanYara,ScanZip,ScanZlib,ScanZstd
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 STRELKA_BACKEND_PROCS
ENV STRELKA_BACKEND_PROCS=1
                        
# 2026-05-28 06:03:31  0.00B 定义构建参数
ARG STRELKA_BACKEND_PROCS=1
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 CLAMAV_RULES_DIR
ENV CLAMAV_RULES_DIR=/var/lib/clamav
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 CLAMD_SOCKET_FILE
ENV CLAMD_SOCKET_FILE=/tmp/clamd.ctl
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 EXTRACTED_FILE_MAX_BYTES
ENV EXTRACTED_FILE_MAX_BYTES=134217728
                        
# 2026-05-28 06:03:31  0.00B 定义构建参数
ARG EXTRACTED_FILE_MAX_BYTES=134217728
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 YARA_COMPILED_RULES_FILE
ENV YARA_COMPILED_RULES_FILE=rules.compiled
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 YARA_RULES_DIR
ENV YARA_RULES_DIR=/yara-rules
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 YARA_RULES_SRC_DIR
ENV YARA_RULES_SRC_DIR=/yara-rules-src
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 SUPERCRONIC_CRONTAB
ENV SUPERCRONIC_CRONTAB=/etc/crontab
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 SUPERCRONIC_URL
ENV SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux-
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 SUPERCRONIC_VERSION
ENV SUPERCRONIC_VERSION=0.2.46
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 YQ_URL
ENV YQ_URL=https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 YQ_VERSION
ENV YQ_VERSION=4.53.2
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 TERM
ENV TERM=xterm
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 DEBIAN_FRONTEND
ENV DEBIAN_FRONTEND=noninteractive
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 RULES_UPDATE_ENABLED
ENV RULES_UPDATE_ENABLED=false
                        
# 2026-05-28 06:03:31  0.00B 定义构建参数
ARG RULES_UPDATE_ENABLED=false
                        
# 2026-05-28 06:03:31  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 PUSER_RLIMIT_UNLOCK
ENV PUSER_RLIMIT_UNLOCK=true
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 PUSER_PRIV_DROP
ENV PUSER_PRIV_DROP=true
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 PGROUP
ENV PGROUP=strelka
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 PUSER
ENV PUSER=strelka
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 DEFAULT_GID
ENV DEFAULT_GID=1000
                        
# 2026-05-28 06:03:31  0.00B 设置环境变量 DEFAULT_UID
ENV DEFAULT_UID=1000
                        
# 2026-05-28 06:03:31  0.00B 定义构建参数
ARG DEFAULT_GID=1000
                        
# 2026-05-28 06:03:31  0.00B 定义构建参数
ARG DEFAULT_UID=1000
                        
# 2026-05-28 06:03:31  0.00B 添加元数据标签
LABEL org.opencontainers.image.description=Malcolm container for the Strelka backend
                        
# 2026-05-28 06:03:31  0.00B 添加元数据标签
LABEL org.opencontainers.image.title=ghcr.io/idaholab/malcolm/strelka-backend
                        
# 2026-05-28 06:03:31  0.00B 添加元数据标签
LABEL org.opencontainers.image.vendor=Idaho National Laboratory
                        
# 2026-05-28 06:03:31  0.00B 添加元数据标签
LABEL org.opencontainers.image.source=https://github.com/idaholab/Malcolm
                        
# 2026-05-28 06:03:31  0.00B 添加元数据标签
LABEL org.opencontainers.image.documentation=https://github.com/idaholab/Malcolm/blob/main/README.md
                        
# 2026-05-28 06:03:31  0.00B 添加元数据标签
LABEL org.opencontainers.image.url=https://github.com/idaholab/Malcolm
                        
# 2026-05-28 06:03:31  0.00B 添加元数据标签
LABEL org.opencontainers.image.authors=malcolm@inl.gov
                        
# 2026-05-28 06:03:31  0.00B 添加元数据标签
LABEL maintainer=malcolm@inl.gov
                        
# 2026-04-17 03:48:50  0.00B 设置默认要执行的命令
CMD ["/home/strelka/.pyenv/bin/pyenv" "exec" "strelka-backend"]
                        
# 2026-04-17 03:48:50  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/usr/bin/tini" "--"]
                        
# 2026-04-17 03:48:50  0.00B 指定运行容器时使用的用户
USER strelka
                        
# 2026-04-17 03:48:50  0.00B 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c rm -rf /etc/strelka/ # buildkit
                        
# 2026-04-17 03:48:50  0.00B 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c rm -rf /home/$USERNAME/strelka/ &&     rm -rf /root/.cache &&     rm -rf /tmp/* # buildkit
                        
# 2026-04-17 03:48:50  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-04-17 03:48:50  134.99KB 复制新文件或目录到容器中
COPY ./configs/python/backend/ /etc/strelka/ # buildkit
                        
# 2026-04-17 03:48:50  85.21KB 复制新文件或目录到容器中
COPY ./configs/python/backend/suricata/suricata.yaml /etc/suricata/suricata.yaml # buildkit
                        
# 2026-04-17 03:48:50  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-04-17 03:48:50  10.80MB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c ls -alsF && python3 setup.py -q build &&     python3 setup.py -q install # buildkit
                        
# 2026-04-17 03:48:39  49.22MB 复制新文件或目录到容器中
COPY --chown=strelka:strelka ./src/python/ ./ # buildkit
                        
# 2026-04-17 03:48:39  1.40GB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c poetry install --only main # buildkit
                        
# 2026-04-17 03:47:58  388.38KB 复制文件或目录到容器中
ADD ./pyproject.toml ./poetry.lock ./ # buildkit
                        
# 2026-04-17 03:47:58  0.00B 设置工作目录为/home/strelka/strelka/
WORKDIR /home/strelka/strelka/
                        
# 2026-04-17 03:47:58  127.91MB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c python3 -m pip install poetry ruamel.yaml rich-argparse semver &&     poetry config virtualenvs.create false # buildkit
                        
# 2026-04-17 03:47:48  0.00B 指定运行容器时使用的用户
USER strelka
                        
# 2026-04-17 03:47:48  55.66MB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c mv /tmp/capa /usr/bin/ &&     chown root:root /usr/bin/capa # buildkit
                        
# 2026-04-17 03:47:48  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-04-17 03:47:48  78.48MB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c mkdir -p /tmp/build-capa &&     python3 -m venv /tmp/build-capa &&     cd /tmp/build-capa &&     . ./bin/activate &&     curl -fsSLo ./capa.zip https://github.com/mandiant/capa/archive/refs/tags/v$CAPA_VERSION.zip &&     curl -fsSLo ./rules.zip https://github.com/mandiant/capa-rules/archive/refs/tags/v$CAPA_VERSION.zip &&     unzip -q ./capa.zip &&     unzip -q ./rules.zip &&     cd capa-$CAPA_VERSION &&     python3 -m pip install -e .[build] &&     mv ../capa-rules-$CAPA_VERSION/* ./rules/ &&     python3 ./scripts/cache-ruleset.py rules/ cache &&     pyinstaller ./.github/pyinstaller/pyinstaller.spec &&     chmod 755 ./dist/capa &&     mv ./dist/capa /tmp/capa &&     deactivate &&     rm -rf /tmp/build-capa # buildkit
                        
# 2026-04-17 03:46:18  162.82KB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c mkdir -p /tmp/build-yara-python &&     cd /tmp/build-yara-python &&     curl -OL https://github.com/VirusTotal/yara-python/archive/v$YARA_PYTHON_VERSION.tar.gz &&     tar -xf v$YARA_PYTHON_VERSION.tar.gz &&     cd yara-python-$YARA_PYTHON_VERSION &&     python3 setup.py build --dynamic-linking &&     python3 setup.py install &&     cd /tmp &&     rm -rf /tmp/build-yara-python # buildkit
                        
# 2026-04-17 03:46:16  28.30MB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c python3 -m pip install -U pip setuptools pyinstaller # buildkit
                        
# 2026-04-17 03:46:11  302.98MB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c export HOME=/home/$USERNAME &&     pyenv install 3.11 &&     pyenv global 3.11 # buildkit
                        
# 2026-04-17 03:44:28  0.00B 设置环境变量 PATH
ENV PATH=/home/strelka/.pyenv/bin:/home/strelka/.pyenv/shims:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-04-17 03:44:28  0.00B 设置环境变量 PYENV_ROOT
ENV PYENV_ROOT=/home/strelka/.pyenv
                        
# 2026-04-17 03:44:28  6.60MB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c export HOME=/home/$USERNAME &&     curl -fsSL https://pyenv.run | bash # buildkit
                        
# 2026-04-17 03:44:26  0.00B 指定运行容器时使用的用户
USER strelka
                        
# 2026-04-17 03:44:26  0.00B 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c mkdir /var/log/strelka/ &&     chgrp -R 0 /var/log/strelka/ &&     chmod -R g=u /var/log/strelka/ # buildkit
                        
# 2026-04-17 03:44:26  247.05MB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c apt-get update -qq &&     apt-get install -qq -y --no-install-recommends     antiword     binwalk     libzbar0     libgl1     redis-server     tesseract-ocr     unrar     unzip     upx     jq &&     rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-04-17 03:44:08  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-04-17 03:44:08  112.76MB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c freshclam # buildkit
                        
# 2026-04-17 03:43:59  0.00B 指定运行容器时使用的用户
USER strelka
                        
# 2026-04-17 03:43:59  0.00B 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c touch /var/log/clamav/freshclam.log &&     chmod 777 /var/log/clamav/freshclam.log &&     chown clamav:clamav /var/log/clamav/freshclam.log &&     chown "$USERNAME":"$USERNAME" /var/lib/clamav # buildkit
                        
# 2026-04-17 03:43:59  52.53MB 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c apt-get update -qq -qq &&     apt-get install -qq -y --no-install-recommends     clamav     clamav-base     clamav-daemon     clamav-freshclam &&     rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-04-17 03:43:49  0.00B 执行命令并创建新的镜像层
RUN |13 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 SURICATA_INTEGRATION=0 SURICATA_VERSION_PATTERN=1:7.0.* /bin/sh -c if [ "$SURICATA_INTEGRATION" = "1" ]; then         echo "Suricata enabled — installing…";         apt-get -qq update &&         apt-get install -qq -y --no-install-recommends             suricata=${SURICATA_VERSION_PATTERN}             suricata-update &&         rm -rf /var/lib/apt/lists/*;     else         echo "Suricata disabled — skipping.";     fi # buildkit
                        
# 2026-04-17 03:43:49  0.00B 定义构建参数
ARG SURICATA_VERSION_PATTERN=1:7.0.*
                        
# 2026-04-17 03:43:49  0.00B 定义构建参数
ARG SURICATA_INTEGRATION=0
                        
# 2026-04-17 03:43:49  0.00B 执行命令并创建新的镜像层
RUN |11 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 ZEEK_INTEGRATION=0 /bin/sh -c if [ "$ZEEK_INTEGRATION" = "1" ]; then         echo "Zeek enabled — installing…";         echo 'deb http://download.opensuse.org/repositories/security:/zeek/xUbuntu_24.04/ /'             | tee /etc/apt/sources.list.d/security:zeek.list &&         curl -fsSL https://download.opensuse.org/repositories/security:zeek/xUbuntu_24.04/Release.key             | gpg --dearmor | tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null &&         apt-get -qq update &&         apt-get install -qq -y --no-install-recommends zeek-lts &&         cp /opt/zeek/bin/zeek /usr/bin/ &&         rm -rf /opt/zeek/share/btest /opt/zeek/bin &&         rm -rf /opt/zeek/lib/*.a &&         rm -rf /var/lib/apt/lists/*;     else         echo "Zeek disabled — skipping.";     fi # buildkit
                        
# 2026-04-17 03:43:49  0.00B 定义构建参数
ARG ZEEK_INTEGRATION=0
                        
# 2026-04-17 03:43:49  906.73KB 执行命令并创建新的镜像层
RUN |10 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 /bin/sh -c apt-get update -qq &&     apt-get install -qq -y --no-install-recommends     python-is-python3 &&     rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-04-17 03:43:31  2.63MB 执行命令并创建新的镜像层
RUN |10 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 /bin/sh -c mkdir -p /tmp/build-yara &&     cd /tmp/build-yara &&     curl -OL https://github.com/VirusTotal/yara/archive/v$YARA_VERSION.tar.gz &&     tar -xf v$YARA_VERSION.tar.gz &&     cd yara-$YARA_VERSION &&     ./bootstrap.sh &&     ./configure --with-crypto --enable-magic --enable-cuckoo &&     make -s &&     make -s install &&     make -s check &&     cd /tmp &&     rm -rf /tmp/build-yara # buildkit
                        
# 2026-04-17 03:42:34  2.88MB 执行命令并创建新的镜像层
RUN |10 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 /bin/sh -c mkdir -p /tmp/install-7z &&     cd /tmp/install-7z &&     curl -o 7z.tar.xz -fsSL https://7-zip.org/a/7z2600-linux-$(uname -m | sed 's/x86_64/x64/' | sed 's/aarch64/arm64/').tar.xz &&     tar -xf 7z.tar.xz &&     cp 7zz /usr/bin/ &&     cd /tmp &&     rm -rf /tmp/install-7z # buildkit
                        
# 2026-04-17 03:42:32  18.30MB 执行命令并创建新的镜像层
RUN |10 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 /bin/sh -c mkdir -p /tmp/build-exiftool &&     cd /tmp/build-exiftool &&     curl -OL https://github.com/exiftool/exiftool/archive/refs/tags/$EXIFTOOL_VERSION.tar.gz &&     tar -xf $EXIFTOOL_VERSION.tar.gz &&     cd exiftool-$EXIFTOOL_VERSION &&     perl Makefile.PL &&     make -s &&     make -s install &&     cd /tmp &&     rm -rf /tmp/build-exiftool # buildkit
                        
# 2026-04-17 03:42:27  168.40MB 执行命令并创建新的镜像层
RUN |10 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 /bin/sh -c mkdir -p /tmp/build-jtr &&     cd /tmp/build-jtr &&     curl -OL https://github.com/openwall/john-packages/archive/refs/tags/v$JOHN_VERSION.tar.gz &&     tar -xf v$JOHN_VERSION.tar.gz &&     JOHN_COMMIT=$(sed -rne 's/ *source-commit: *(.+)/\1/p'             john-packages-$JOHN_VERSION/deploy/snap/snapcraft.yaml) &&     [ -n "$JOHN_COMMIT" ] &&     mkdir /jtr &&     cd /jtr &&     git init &&     git remote add origin https://github.com/openwall/john.git &&     git fetch --depth 1 origin $JOHN_COMMIT &&     git reset --hard FETCH_HEAD &&     rm -rf .git &&     cd src &&     ./configure &&     make -s clean &&     make -sj4 &&     make install &&     cp -Tr /jtr/run/ /jtr &&     rm -rf /jtr/run &&     chmod -R 777 /jtr &&     chown -R $USER_UID:$USER_UID /jtr &&     cd /tmp &&     rm -rf /tmp/build-jtr # buildkit
                        
# 2026-04-17 03:40:55  1.03MB 执行命令并创建新的镜像层
RUN |10 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 /bin/sh -c mkdir -p /tmp/build-xar &&     cd /tmp/build-xar &&     mv ../xar-ext2-no-ecompr.patch . &&     curl -OL http://archive.ubuntu.com/ubuntu/pool/universe/x/xar/xar_1.8.0.498.orig.tar.gz &&     curl -OL http://archive.ubuntu.com/ubuntu/pool/universe/x/xar/xar_1.8.0.498-2.debian.tar.xz &&     tar -xf xar_1.8.0.498.orig.tar.gz &&     tar -xf xar_1.8.0.498-2.debian.tar.xz &&     cd xar-xar-498 &&     for patchfile in $(cat ../debian/patches/series); do         patch -Np1 -i ../debian/patches/$patchfile;     done;     patch -Np1 -i ../xar-ext2-no-ecompr.patch &&     cd xar &&     curl -fsSL https://git.savannah.gnu.org/cgit/config.git/plain/config.guess -o config.guess &&     curl -fsSL https://git.savannah.gnu.org/cgit/config.git/plain/config.sub   -o config.sub &&     chmod +x config.guess config.sub &&     sed -i 's/AC_PREREQ(\[2.72\])/AC_PREREQ([2.71])/' configure.ac &&     autoreconf -fi &&     ./configure &&     make -sj4 &&     make -s install &&     cd /tmp &&     rm -rf /tmp/build-xar # buildkit
                        
# 2026-04-17 03:40:39  821.00B 复制文件或目录到容器中
ADD build/python/backend/xar-ext2-no-ecompr.patch /tmp # buildkit
                        
# 2026-04-17 03:40:38  620.76MB 执行命令并创建新的镜像层
RUN |10 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 /bin/sh -c apt-get update -qq &&     apt-get install -qq -y --no-install-recommends         autoconf automake build-essential ca-certificates cmake curl gcc git dirmngr         gnupg gpg libbz2-dev libgmp-dev libglu1-mesa liblzma-dev libpcap-dev         libarchive-dev libfuzzy-dev libjansson-dev libmagic-dev libssl-dev         libffi-dev libreadline-dev libsqlite3-dev libncurses-dev         libtool libgomp1 make ncat openssh-client swig pkg-config supervisor         yasm zlib1g-dev tini &&     cpan -i Compress::Raw::Lzma &&     rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-04-17 03:39:53  9.47KB 执行命令并创建新的镜像层
RUN |10 DEBIAN_FRONTEND=noninteractive CONFIG_TESTS=false JOHN_VERSION=1.9.1-ce YARA_VERSION=4.5.5 YARA_PYTHON_VERSION=4.5.4 EXIFTOOL_VERSION=12.60 CAPA_VERSION=9.4.0 USERNAME=strelka USER_UID=1000 USER_GID=1000 /bin/sh -c set -eux;     EXISTING_USER=$(getent passwd $USER_UID | cut -d: -f1 || true);     if [ -n "$EXISTING_USER" ]; then         echo "UID $USER_UID already exists as user $EXISTING_USER. Renaming to $USERNAME...";         if getent group $EXISTING_USER >/dev/null; then             groupmod -n "$USERNAME" "$EXISTING_USER";         fi;         usermod --login "$USERNAME" "$EXISTING_USER";         usermod --shell /bin/bash "$USERNAME";         usermod --home "/home/$USERNAME" "$USERNAME";         if [ -d "/home/$EXISTING_USER" ]; then             mv "/home/$EXISTING_USER" "/home/$USERNAME";         else             mkdir -p "/home/$USERNAME";         fi;         chown -R "$USERNAME":"$USERNAME" "/home/$USERNAME";     else         echo "Creating new user $USERNAME with UID $USER_UID...";         groupadd --gid $USER_GID $USERNAME;         useradd --uid $USER_UID --gid $USER_GID --create-home --shell /bin/bash $USERNAME;     fi # buildkit
                        
# 2026-04-17 03:39:53  0.00B 定义构建参数
ARG USER_GID=1000
                        
# 2026-04-17 03:39:53  0.00B 定义构建参数
ARG USER_UID=1000
                        
# 2026-04-17 03:39:53  0.00B 定义构建参数
ARG USERNAME=strelka
                        
# 2026-04-17 03:39:53  0.00B 设置环境变量 PYTHONUNBUFFERED
ENV PYTHONUNBUFFERED=1
                        
# 2026-04-17 03:39:53  0.00B 设置环境变量 PYTHONFAULTHANDLER
ENV PYTHONFAULTHANDLER=1
                        
# 2026-04-17 03:39:53  0.00B 设置环境变量 PYTHONDONTWRITEBYTECODE
ENV PYTHONDONTWRITEBYTECODE=1
                        
# 2026-04-17 03:39:53  0.00B 定义构建参数
ARG CAPA_VERSION=9.4.0
                        
# 2026-04-17 03:39:53  0.00B 定义构建参数
ARG EXIFTOOL_VERSION=12.60
                        
# 2026-04-17 03:39:53  0.00B 定义构建参数
ARG YARA_PYTHON_VERSION=4.5.4
                        
# 2026-04-17 03:39:53  0.00B 定义构建参数
ARG YARA_VERSION=4.5.5
                        
# 2026-04-17 03:39:53  0.00B 定义构建参数
ARG JOHN_VERSION=1.9.1-ce
                        
# 2026-04-17 03:39:53  0.00B 定义构建参数
ARG CONFIG_TESTS=false
                        
# 2026-04-17 03:39:53  0.00B 添加元数据标签
LABEL maintainer=Target Brands, Inc. TTS-CFC-OpenSource@target.com
                        
# 2026-04-17 03:39:53  0.00B 定义构建参数
ARG DEBIAN_FRONTEND=noninteractive
                        
# 2026-04-10 14:49:18  0.00B 
/bin/sh -c #(nop)  CMD ["/bin/bash"]
                        
# 2026-04-10 14:49:17  78.14MB 
/bin/sh -c #(nop) ADD file:8ce1caf246e7c778bca84c516d02fd4e83766bb2c530a0fffa8a351b560a2728 in / 
                        
# 2026-04-10 14:49:15  0.00B 
/bin/sh -c #(nop)  LABEL org.opencontainers.image.version=24.04
                        
# 2026-04-10 14:49:15  0.00B 
/bin/sh -c #(nop)  ARG LAUNCHPAD_BUILD_ARCH
                        
# 2026-04-10 14:49:15  0.00B 
/bin/sh -c #(nop)  ARG RELEASE
                        
                    

镜像信息

{
    "Id": "sha256:69b37ec822a287c40c130ed3673f10a29cdba8560228e1706416814abde800b9",
    "RepoTags": [
        "ghcr.io/idaholab/malcolm/strelka-backend:26.06.0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend:26.06.0"
    ],
    "RepoDigests": [
        "ghcr.io/idaholab/malcolm/strelka-backend@sha256:82f5d2348343f883ed19cadca87eebbc48b89afa6aa8081cc241f2ed0bd32e7d",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/strelka-backend@sha256:685c08e776ae46e296a9a93240472426e028eb4038679b9058f66a8a3fbcf955"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-05-27T22:04:40.51101894Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "root",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/home/strelka/.pyenv/bin:/home/strelka/.pyenv/shims:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "PYTHONDONTWRITEBYTECODE=1",
            "PYTHONFAULTHANDLER=1",
            "PYTHONUNBUFFERED=1",
            "PYENV_ROOT=/home/strelka/.pyenv",
            "DEFAULT_UID=1000",
            "DEFAULT_GID=1000",
            "PUSER=strelka",
            "PGROUP=strelka",
            "PUSER_PRIV_DROP=true",
            "PUSER_RLIMIT_UNLOCK=true",
            "RULES_UPDATE_ENABLED=false",
            "DEBIAN_FRONTEND=noninteractive",
            "TERM=xterm",
            "YQ_VERSION=4.53.2",
            "YQ_URL=https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_",
            "SUPERCRONIC_VERSION=0.2.46",
            "SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux-",
            "SUPERCRONIC_CRONTAB=/etc/crontab",
            "YARA_RULES_SRC_DIR=/yara-rules-src",
            "YARA_RULES_DIR=/yara-rules",
            "YARA_COMPILED_RULES_FILE=rules.compiled",
            "EXTRACTED_FILE_MAX_BYTES=134217728",
            "CLAMD_SOCKET_FILE=/tmp/clamd.ctl",
            "CLAMAV_RULES_DIR=/var/lib/clamav",
            "STRELKA_BACKEND_PROCS=1",
            "STRELKA_SCANNERS=ScanBatch,ScanBmpEof,ScanBzip2,ScanClamav,ScanDmg,ScanDocx,ScanDonut,ScanEmail,ScanEncryptedDoc,ScanEncryptedZip,ScanEntropy,ScanExiftool,ScanGifEof,ScanGzip,ScanHtml,ScanIqy,ScanIso,ScanJarManifest,ScanJavascript,ScanJnlp,ScanJpegEof,ScanJson,ScanLibarchive,ScanLnk,ScanLsb,ScanLzma,ScanMacho,ScanManifest,ScanMsi,ScanOle,ScanOnenote,ScanPdf,ScanPe,ScanPgp,ScanPhp,ScanPkcs7,ScanPlist,ScanPngEof,ScanPyinstaller,ScanQr,ScanRar,ScanRpm,ScanRtf,ScanSevenZip,ScanSwf,ScanTar,ScanTnef,ScanTranscode,ScanUdf,ScanUpx,ScanUrl,ScanVb,ScanVba,ScanVhd,ScanVsto,ScanXar,ScanXl4ma,ScanXml,ScanYara,ScanZip,ScanZlib,ScanZstd",
            "PUSER_CHOWN=/var/lib/clamav;/yara-rules;/yara-rules-src",
            "BUILD_DATE=2026-05-27T22:02:44Z",
            "MALCOLM_VERSION=26.06.0",
            "VCS_REVISION=381a66a"
        ],
        "Cmd": [
            "/usr/bin/supervisord",
            "-c",
            "/etc/supervisord.conf",
            "-n"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": {
            "/var/lib/clamav": {},
            "/yara-rules": {},
            "/yara-rules-src": {}
        },
        "WorkingDir": "/home/strelka/strelka/",
        "Entrypoint": [
            "/usr/bin/tini",
            "--",
            "/usr/local/bin/docker-uid-gid-setup.sh",
            "/usr/local/bin/service_check_passthrough.sh",
            "-s",
            "strelka_backend",
            "/usr/local/bin/docker-entrypoint.sh"
        ],
        "OnBuild": null,
        "Labels": {
            "maintainer": "malcolm@inl.gov",
            "org.opencontainers.image.authors": "malcolm@inl.gov",
            "org.opencontainers.image.created": "2026-05-27T22:02:44Z",
            "org.opencontainers.image.description": "Malcolm container for the Strelka backend",
            "org.opencontainers.image.documentation": "https://github.com/idaholab/Malcolm/blob/main/README.md",
            "org.opencontainers.image.revision": "381a66a",
            "org.opencontainers.image.source": "https://github.com/idaholab/Malcolm",
            "org.opencontainers.image.title": "ghcr.io/idaholab/malcolm/strelka-backend",
            "org.opencontainers.image.url": "https://github.com/idaholab/Malcolm",
            "org.opencontainers.image.vendor": "Idaho National Laboratory",
            "org.opencontainers.image.version": "26.06.0"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 3563730243,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/fdfee1f3d84135e018b28b70d6f31b17f66d0c814eaa4863ef27922fe75adc7e/diff:/var/lib/docker/overlay2/2afcbd9d28cd1798dd768734230cbc8616a7a08175520b8d7dbf4b4f75b10fc4/diff:/var/lib/docker/overlay2/f12d172bb724fa3ab77b7fbc5d1b0f2b3aa0c8b6e9d98f202510541517c1ef82/diff:/var/lib/docker/overlay2/d438fc3c361812b38ae1b50e7105375cde96f0e6b4b3066703a49b93adf9f73b/diff:/var/lib/docker/overlay2/7348056ef72df49875376b4624ca869c7184bfe4c576172f7fa0c2f151e41b42/diff:/var/lib/docker/overlay2/7d167fd421b8ced774f75f2c4b221f50b6fec2f9517f2707628db46356f2a308/diff:/var/lib/docker/overlay2/24a7feeff4c6b5ffcbc064a10e18407da20348f12bd1da2e9772b48630fc5792/diff:/var/lib/docker/overlay2/406cd9841894abc32b97370558c39b159ead479021fffbad24f0b4e1d152792f/diff:/var/lib/docker/overlay2/49f70209506af1475dae29629bb33b2496c985792400c2c1444f1de7c95552b0/diff:/var/lib/docker/overlay2/b07d004d8436388319390d226d3133fe55bdec6e4f3bae5edfdb8d3df26e4210/diff:/var/lib/docker/overlay2/349a039b96d3f802c8958311503ae32d745efe0c2985960c24ab04189056689a/diff:/var/lib/docker/overlay2/7d37c6526b4cb002782b4afb8296eefd2859668f3000f697db53d5f7817a03cb/diff:/var/lib/docker/overlay2/856a59b77c04d6c282fb1da28adf41e928785587fe77a7f485531effce8e880f/diff:/var/lib/docker/overlay2/2accaaaddf479e1b26d1c6ae9058303ca52ae4614143f8151d12b33a0f0f2e6f/diff:/var/lib/docker/overlay2/1260f29b92e04e98d42cda0be5c09e701b9a02fed74a72dc901cd22d091236d3/diff:/var/lib/docker/overlay2/7bb2abc9daf657fb81c653b80086bf5e203c1c10f6f11fb76a1021f9a6059b96/diff:/var/lib/docker/overlay2/0d91736a75b9563fd6260286b22037b162603a83c7739fba7567cb3f2f4f4cd0/diff:/var/lib/docker/overlay2/5f50554fa9cfaa09120643b1fe1f32ccf397ca96b667ceba28e448d6690b58bb/diff:/var/lib/docker/overlay2/851b6ad5ba42b97dfd3bb4fa700803649a3733c761608eda281343ce1ea0b2b2/diff:/var/lib/docker/overlay2/f28300ff886c4ed08d613bf679bd60b1d8aa0077a6c355bedb2982749ab78d77/diff:/var/lib/docker/overlay2/705d555a182d97fb62c58a69be7a185674d8119e8a38ef8d78e3be9e49f9a102/diff:/var/lib/docker/overlay2/1c72219415e20886bf7be6c37ed38e46189e314194890fbe412b228927bb6bb8/diff:/var/lib/docker/overlay2/6180ae599af17e0cc2ab27fa2b4aa2e65c475de62c32df12a9f28a88ee71b395/diff:/var/lib/docker/overlay2/e0b3732ebaa8614bc8a8efc0790b6d18d3c476c6f883ad2a5adcdd91acdae107/diff:/var/lib/docker/overlay2/01473c85c8e62fe1c9c11d52d2639abfa651e8e99b435c28a15520f277ebaf23/diff:/var/lib/docker/overlay2/b95ee6ab87a8e9d96e44a64f35c74de6511b54d45f18aa083649b3c3e4ceba70/diff:/var/lib/docker/overlay2/87b040ba7e95025131a0e520d017b2c81c427e8cb1a9ee7578530e38ce616aaa/diff:/var/lib/docker/overlay2/dbfae89f543cebf6437a72e6d8b5d9bdf93b3de445cff53190eba4320da174e8/diff:/var/lib/docker/overlay2/62f531b39ce8f982acc1ce6288cececea0ebd03ce9a0939fcb1dc10d9c6290a9/diff:/var/lib/docker/overlay2/a6ca46b2927dc089c9a470afea1dc70503c60ee856b2898b29cbd61fd89cf7e1/diff:/var/lib/docker/overlay2/a8a9991db19da35f65ab367cd3f32852d87caae3e0bcb1c54a459119d56a6e7d/diff:/var/lib/docker/overlay2/008de69400e577f151cf38d952da9bc113bca5ed552d8ffb466e558a610c833a/diff:/var/lib/docker/overlay2/08779e10a2be73ee784ac82d0f72f0d365b8b03c50fb03b36fc2258da006ff09/diff:/var/lib/docker/overlay2/da88e03f2e364bbddc8136e4e8680c0278bba759b9ea342cf239b913af58e53f/diff:/var/lib/docker/overlay2/20150c8bd47d378b933119dd2ac87fe1d99cd0818fdc7c0e0717a44996540287/diff:/var/lib/docker/overlay2/0d0692d7f399194a532e5be6fed269667ab3b49cc9c87d4305250ba4a6993c91/diff:/var/lib/docker/overlay2/19a43311f9323f886233012e0b492594f75556318cede0a2563598a71b172d4b/diff:/var/lib/docker/overlay2/10db154b2e64dd5dea59d7f19093eaf26912dde96d50c300571f48a3eda68ed4/diff:/var/lib/docker/overlay2/d0d652fafd3254ac3a03166396a4bd54c4a3d003e00784a9fe11a7f2643c14c6/diff:/var/lib/docker/overlay2/63684470381d7d3636233d33f50a503bdbd8c11ee99c0a9ff29a0f299fe647d6/diff:/var/lib/docker/overlay2/5f609c7f2d57ab37705d5a6912b6863488c5a59f9e8ae26b8de39650b9e4f7c3/diff:/var/lib/docker/overlay2/64a943f0a3c4ddef61942dc89811958d0ab1f3cf9f996a86330816b2e891b8e8/diff",
            "MergedDir": "/var/lib/docker/overlay2/637fd4b4ea8c2450351ad538d2a71ad84858d34a9e6033ffe0890738a5e473fa/merged",
            "UpperDir": "/var/lib/docker/overlay2/637fd4b4ea8c2450351ad538d2a71ad84858d34a9e6033ffe0890738a5e473fa/diff",
            "WorkDir": "/var/lib/docker/overlay2/637fd4b4ea8c2450351ad538d2a71ad84858d34a9e6033ffe0890738a5e473fa/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475",
            "sha256:40c21aa0c8c0ce16bc02292c2c24b4daf0e28aead838806805a40efddd2c9512",
            "sha256:7ee39172b5be7857fc13a1dc1dd23c438eb5b47cefb61e657401bdeb2ae83961",
            "sha256:ad8480d830ef771f8d406dda7c5be050d234f55e6bc3d963fade82cb5fb048fc",
            "sha256:22e9f82fa41e03801beaca092dbbc4509ea1d2812a6a5c0969f61954f50b3710",
            "sha256:2429778043efe6cd341318cf62291f215a4db3b2b5d53ab3e83c79de5415f5f8",
            "sha256:7efd31df3e2633a18ac9ca4eee4122fb305d201fc007e35ef2b746aec29d91d4",
            "sha256:a3c1b0243b3055b7a6f006736c32e9239f9bd737f06cd9cc7640961fd67ef4f4",
            "sha256:294b662ee3f24ab535e90ebe65ef374903080584d21f72fe837835b033e987b1",
            "sha256:c09937a63a19f544007178f9385dbadb0e7b3db544ad3ae29e9377563085bb0d",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:18f6b7e99b9a48dfd5ab5a5113e442de8edf2dedfbda7fd6c1bcdeafc76aba73",
            "sha256:919189f12edb38d474d7e531ee78c32b7ae0313ecad5036b3ca5773c69fff100",
            "sha256:3ba16b127e7462e319ffbd5fd71f808db4a5f9683b17f36171d74efc2e3f4c15",
            "sha256:66b424b8704d5cfa26cc80319de7b9e59f77a32ecb56a57dd42c443cac3a0a1c",
            "sha256:daa6cc966a995731030f5f56494dd8c32cb220944d446e857741f037541db006",
            "sha256:c7e44eec7694c80ee01cac35ec9b8caa2d5924bb750c12679431aa9a685d10b3",
            "sha256:866d935a8d290cbf6936b4f2a38e5c390c96b26a7f9b54f4571e72cd79ab40a2",
            "sha256:2771dea270cb43e2b50974041a7d4ccb5b9aaefa86aba5559145a9bf46d4618d",
            "sha256:633aa4100c944354652704173416dab4bba16dc533ca29ebeee1da21f794f5ac",
            "sha256:371bf348efbbd5a4da014f3329cb84d3ec08d2e7d4077edc509e40e8fcf9d5af",
            "sha256:5558eb2d2a17240a085815b5276e12c86d973d6d56e886a009b7a011860006fc",
            "sha256:d1eed8ede8cd47cb37a4f9bc4c5926ca03e181bf0a737067079a6f9a5fb66523",
            "sha256:2b49e8222e353c50192ae497dce4edb94c25c2f2e67f0520ef8b38f0db27e20b",
            "sha256:fef2a6f1fa87a35da9ed16fd454879459f74c77a5f1f78d8ea68499d5ba1bce5",
            "sha256:23a864dc95a63b893f49e057ed0ebd8344aeb1552d5d1003836f25d7e45ec293",
            "sha256:49becfda33c2fc9f3c838f0606cd28393309674bce9973d8d7461e5a932e9a27",
            "sha256:26ef3932bd65d779be02a080773936ef241932ffd8408f6a6c7c0e0757637931",
            "sha256:a16ab7be2ed13d33c1f3088ab44ca8108668c7be665985d7e7b963a7699daf22",
            "sha256:2138e39624b57bb0e7b901ab4214df17a9c7f663313b44f2e9ac2ac54b2da1b3",
            "sha256:5828c6ccc65d204980e4fb3f63b07afcb2cf56734fc27a943338a7a120d77328",
            "sha256:0e117467904320fb4c52477cea5bb3fcfe1ab32fb4b98c386c539cb073991505",
            "sha256:f8ca29819cc8989526f8b00550653115f0f8a9c520b7119d07512db9b04999e7",
            "sha256:8b894bc9ae4cacb86452f26f6d6c08da8aaab074d519a16f031b98b129524657",
            "sha256:635932d6b53e1940aaefd20ff1618d79f8519bd85439bc812eabd317d792f6e1",
            "sha256:d39b9cbfd23c80b48ff648a38e1e3328b951d0b51a5b5edddc81ea1f3614276d",
            "sha256:c5ac991a248137ea380fa73fabf1e6e48bbd0116c08ae0b0727de6c842d79ac7",
            "sha256:62935988654ef44dd729de6e80a65bf889a17652d9f9e4f7dcc0edd025f87d1f",
            "sha256:68783e8c7f087fe95860293fb8eebae89917670dee5e31fb968a79e75825e9cf",
            "sha256:89491b639bd1e490a3cd6be3d169055ba67c9e1c123cba089c3752d94aeb6108",
            "sha256:8ddc1ab24d08d658fd3a8aa31900c5665dc07130b4edf9e389c23a3e71a22161",
            "sha256:71ef668099fd869478a35e7f1d3e0478fffa12714a5efe7312713d41b079cc8b"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-06-13T18:07:16.02368589+08:00"
    }
}

更多版本

ghcr.io/idaholab/malcolm/strelka-backend:26.06.0

linux/amd64 ghcr.io3.56GB2026-06-13 18:12
7