# IRIS Source Code

# Copyright (C) 2021 - Airbus CyberSecurity (SAS)

# ir@cyberactionlab.net

#

# This program is free software; you can redistribute it and/or

# modify it under the terms of the GNU Lesser General Public

# License as published by the Free Software Foundation; either

# version 3 of the License, or (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU

# Lesser General Public License for more details.

#

# You should have received a copy of the GNU Lesser General Public License

# along with this program; if not, write to the Free Software Foundation,

# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

#################

# COMPILE IMAGE #

#################

FROM python:3.9 AS compile-image

RUN apt-get update

RUN python -m venv /opt/venv

# Make sure we use the virtualenv:

ENV PATH="/opt/venv/bin:$PATH"

COPY source/dependencies /dependencies

COPY source/requirements.txt /

RUN pip3 install -r requirements.txt

###############

# BUILD IMAGE #

###############

FROM python:3.9 as iriswebapp

ENV PYTHONUNBUFFERED=1

COPY --from=compile-image /opt/venv /opt/venv

# Make sure we use the virtualenv:

ENV PATH="/opt/venv/bin:$PATH"

# Define specific admin password at creation

#ENV IRIS_ADM_PASSWORD="MySuperFirstPasswordIWant"

RUN apt update

RUN apt install -y p7zip-full pgp rsync postgresql-client

RUN mkdir /iriswebapp/

RUN mkdir -p /home/iris/certificates

RUN mkdir -p /home/iris/user_templates

RUN mkdir -p /home/iris/server_data

RUN mkdir -p /home/iris/server_data/backup

RUN mkdir -p /home/iris/server_data/updates

RUN mkdir -p /home/iris/server_data/custom_assets

RUN mkdir -p /home/iris/server_data/datastore

WORKDIR /iriswebapp

COPY docker/webApp/iris-entrypoint.sh .

COPY docker/webApp/wait-for-iriswebapp.sh .

COPY ./source .

# Add execution right to binaries needed by evtx2splunk for iris_evtx module

RUN chmod +x /iriswebapp/dependencies/evtxdump_binaries/linux/x64/fd

RUN chmod +x /iriswebapp/dependencies/evtxdump_binaries/linux/x64/evtx_dump

RUN chmod +x iris-entrypoint.sh

RUN chmod +x wait-for-iriswebapp.sh

#ENTRYPOINT [ "./iris-entrypoint.sh" ]