diff options
author | Thomas Kriechbaumer <thomas@kriechbaumer.name> | 2018-09-15 12:00:20 +0000 |
---|---|---|
committer | Thomas Kriechbaumer <thomas@kriechbaumer.name> | 2018-09-15 14:01:34 +0200 |
commit | cf15da1ed5e319bcc8dac18cb9f76166ac0a50fa (patch) | |
tree | 040eb51d12f151b6a164edaf64c709771f2adf8a /docker | |
parent | 6c0849aa464397ef3a118a7233edbf1955b89c1b (diff) | |
download | mitmproxy-cf15da1ed5e319bcc8dac18cb9f76166ac0a50fa.tar.gz mitmproxy-cf15da1ed5e319bcc8dac18cb9f76166ac0a50fa.tar.bz2 mitmproxy-cf15da1ed5e319bcc8dac18cb9f76166ac0a50fa.zip |
add docker security warning
Diffstat (limited to 'docker')
-rw-r--r-- | docker/Dockerfile | 41 | ||||
-rw-r--r-- | docker/DockerfileARMv7 | 45 | ||||
-rw-r--r-- | docker/README.md | 38 | ||||
-rwxr-xr-x | docker/docker-entrypoint.sh | 13 |
4 files changed, 0 insertions, 137 deletions
diff --git a/docker/Dockerfile b/docker/Dockerfile deleted file mode 100644 index bbe88c9d..00000000 --- a/docker/Dockerfile +++ /dev/null @@ -1,41 +0,0 @@ -FROM alpine:3.7 - -ENV LANG=en_US.UTF-8 - -ARG WHEEL_MITMPROXY -ARG WHEEL_BASENAME_MITMPROXY - -COPY $WHEEL_MITMPROXY /home/mitmproxy/ - -# Add our user first to make sure the ID get assigned consistently, -# regardless of whatever dependencies get added. -RUN addgroup -S mitmproxy && adduser -S -G mitmproxy mitmproxy \ - && apk add --no-cache \ - su-exec \ - git \ - g++ \ - libffi \ - libffi-dev \ - libstdc++ \ - openssl \ - openssl-dev \ - python3 \ - python3-dev \ - && python3 -m ensurepip \ - && LDFLAGS=-L/lib pip3 install -U /home/mitmproxy/${WHEEL_BASENAME_MITMPROXY} \ - && apk del --purge \ - git \ - g++ \ - libffi-dev \ - openssl-dev \ - python3-dev \ - && rm -rf ~/.cache/pip /home/mitmproxy/${WHEEL_BASENAME_MITMPROXY} - -VOLUME /home/mitmproxy/.mitmproxy - -COPY docker/docker-entrypoint.sh /usr/local/bin/ -ENTRYPOINT ["docker-entrypoint.sh"] - -EXPOSE 8080 8081 - -CMD ["mitmproxy"] diff --git a/docker/DockerfileARMv7 b/docker/DockerfileARMv7 deleted file mode 100644 index 2988b5e4..00000000 --- a/docker/DockerfileARMv7 +++ /dev/null @@ -1,45 +0,0 @@ -FROM resin/raspberrypi3-alpine:3.7 - -ENV LANG=en_US.UTF-8 - -ARG WHEEL_MITMPROXY -ARG WHEEL_BASENAME_MITMPROXY - -COPY $WHEEL_MITMPROXY /home/mitmproxy/ - -RUN [ "cross-build-start" ] - -# Add our user first to make sure the ID get assigned consistently, -# regardless of whatever dependencies get added. -RUN addgroup -S mitmproxy && adduser -S -G mitmproxy mitmproxy \ - && apk add --no-cache \ - su-exec \ - git \ - g++ \ - libffi \ - libffi-dev \ - libstdc++ \ - openssl \ - openssl-dev \ - python3 \ - python3-dev \ - && python3 -m ensurepip \ - && LDFLAGS=-L/lib pip3 install -U /home/mitmproxy/${WHEEL_BASENAME_MITMPROXY} \ - && apk del --purge \ - git \ - g++ \ - libffi-dev \ - openssl-dev \ - python3-dev \ - && rm -rf ~/.cache/pip /home/mitmproxy/${WHEEL_BASENAME_MITMPROXY} - -RUN [ "cross-build-end" ] - -VOLUME /home/mitmproxy/.mitmproxy - -COPY docker/docker-entrypoint.sh /usr/local/bin/ -ENTRYPOINT ["docker-entrypoint.sh"] - -EXPOSE 8080 8081 - -CMD ["mitmproxy"] diff --git a/docker/README.md b/docker/README.md deleted file mode 100644 index 6693de45..00000000 --- a/docker/README.md +++ /dev/null @@ -1,38 +0,0 @@ -# mitmproxy - -Containerized version of [mitmproxy](https://mitmproxy.org/), an interactive SSL-capable intercepting HTTP proxy. - -# Usage - -```sh -$ docker run --rm -it [-v ~/.mitmproxy:/home/mitmproxy/.mitmproxy] -p 8080:8080 mitmproxy/mitmproxy -``` -The *volume mount* is optional: It's to store the generated CA certificates. - -Once started, mitmproxy listens as a HTTP proxy on `localhost:8080`: -```sh -$ http_proxy=http://localhost:8080/ curl http://example.com/ -$ https_proxy=http://localhost:8080/ curl -k https://example.com/ -``` - -You can also start `mitmdump` by just adding that to the end of the command-line: -```sh -$ docker run --rm -it -p 8080:8080 mitmproxy/mitmproxy mitmdump -``` - -For `mitmweb`, you also need to expose port 8081: -```sh -# this makes :8081 accessible to the local machine only -$ docker run --rm -it -p 8080:8080 -p 127.0.0.1:8081:8081 mitmproxy/mitmproxy mitmweb --web-iface 0.0.0.0 -``` - -You can also pass options directly via the CLI: -```sh -$ docker run --rm -it -p 8080:8080 mitmproxy/mitmproxy mitmdump --set ssl_insecure=true -``` - -For further details, please consult the mitmproxy [documentation](http://docs.mitmproxy.org/en/stable/). - -# Tags - -The available release tags can be seen [here](https://hub.docker.com/r/mitmproxy/mitmproxy/tags/). diff --git a/docker/docker-entrypoint.sh b/docker/docker-entrypoint.sh deleted file mode 100755 index a4abe4ce..00000000 --- a/docker/docker-entrypoint.sh +++ /dev/null @@ -1,13 +0,0 @@ -#!/bin/sh -set -e - -MITMPROXY_PATH="/home/mitmproxy/.mitmproxy" - -if [[ "$1" = "mitmdump" || "$1" = "mitmproxy" || "$1" = "mitmweb" ]]; then - mkdir -p "$MITMPROXY_PATH" - chown -R mitmproxy:mitmproxy "$MITMPROXY_PATH" - - su-exec mitmproxy "$@" -else - exec "$@" -fi |