Working docker builds

Author: bytehow

Dockerfile

@@ -1,10 +1,11 @@
 FROM openjdk:11-jdk-slim
 
-ENV VERSION 9.1.2
+ENV VERSION 9.1.2_PUBLIC
+ENV DL https://www.ghidra-sre.org/ghidra_${VERSION}_20200212.zip
 ENV GHIDRA_SHA ebe3fa4e1afd7d97650990b27777bb78bd0427e8e70c1d0ee042aeb52decac61
 
-RUN apt-get update && apt-get install -y fontconfig libxrender1 libxtst6 libxi6 wget unzip --no-install-recommends \
-    && wget --progress=bar:force -O /tmp/ghidra.zip https://www.ghidra-sre.org/ghidra_9.1.2_PUBLIC_20200212.zip \
+RUN apt-get update && apt-get install -y wget unzip dnsutils --no-install-recommends \
+    && wget --progress=bar:force -O /tmp/ghidra.zip ${DL} \
     && echo "$GHIDRA_SHA /tmp/ghidra.zip" | sha256sum -c - \
     && unzip /tmp/ghidra.zip \
     && mv ghidra_${VERSION} /ghidra \
@@ -20,6 +21,8 @@ COPY entrypoint.sh /entrypoint.sh
 COPY server.conf /ghidra/server/server.conf
 
 EXPOSE 13100 13101 13102
+
 RUN mkdir /repos
+
 ENTRYPOINT ["/entrypoint.sh"]
-CMD [ "client" ]
+CMD ["server"]

Dockerfile.beta

@@ -0,0 +1,50 @@
+FROM gradle:jdk11 as builder
+
+ENV GITHUB_URL https://github.com/NationalSecurityAgency/ghidra.git
+
+RUN apt-get update && apt-get install -y curl git bison flex build-essential unzip
+
+RUN echo "[+] Cloning Ghidra..." \
+    && git clone ${GITHUB_URL} /root/git/ghidra
+
+WORKDIR /root/git/ghidra
+
+RUN echo "[+] Downloading dependencies..." \
+    && gradle --init-script gradle/support/fetchDependencies.gradle init
+
+RUN echo "[+] Building Ghidra..." \
+    && gradle buildNatives_linux64 \
+    && gradle sleighCompile \
+    && gradle buildGhidra
+
+WORKDIR /ghidra
+
+RUN echo "[+] Unzip Ghidra..." \
+    && unzip /root/git/ghidra/build/dist/ghidra_*_linux64.zip -d /tmp \
+    && mv /tmp/ghidra_*/* /ghidra \
+    && chmod +x /ghidra/ghidraRun \
+    && rm -rf /ghidra/docs /ghidra/Extensions/Eclipse /ghidra/licenses
+
+##########################################################################################
+FROM openjdk:11-jdk-slim
+
+LABEL maintainer "https://github.com/blacktop"
+
+COPY --from=builder /ghidra /ghidra
+
+RUN apt-get update && apt-get install -y fontconfig libxrender1 libxtst6 libxi6 dnsutils --no-install-recommends \
+    && echo "===> Clean up unnecessary files..." \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/* /var/cache/apt/archives /tmp/* /var/tmp/*
+
+WORKDIR /ghidra
+
+COPY entrypoint.sh /entrypoint.sh
+COPY server.conf /ghidra/server/server.conf
+
+RUN mkdir /repos
+
+EXPOSE 13100 13101 13102
+
+ENTRYPOINT ["/entrypoint.sh"]
+CMD [ "server" ]

entrypoint.sh

@@ -4,6 +4,9 @@ set -e
 
 if [ "$1" = 'server' ]; then
   shift
+  # Figure out public address
+  export GHIDRA_PUBLIC_HOSTNAME=${GHIDRA_PUBLIC_HOSTNAME:-$(dig +short myip.opendns.com @resolver1.opendns.com)}
+
   # Add users
   GHIDRA_USERS=${GHIDRA_USERS:-admin}
   if [ ! -e "/repos/users" ] && [ ! -z "${GHIDRA_USERS}" ]; then
@@ -13,23 +16,8 @@ if [ "$1" = 'server' ]; then
       echo "-add ${user}" >> /repos/~admin/adm.cmd
     done
   fi
-  #----------------------------------------
-  # Ghidra Server launch
-  #----------------------------------------
-  exec "/ghidra/server/ghidraSvr" console
 
-elif [ "$1" = 'client' ]; then
-  shift
-  #----------------------------------------
-  # Ghidra launch
-  #----------------------------------------
-  SCRIPT_DIR=/ghidra
-  SCRIPT_FILE=/ghidra/ghidraRun
-  # Maximum heap memory may be changed if default is inadequate. This will generally be up to 1/4 of
-  # the physical memory available to the OS. Uncomment MAXMEM setting if non-default value is needed.
-  MAXMEM=${MAXMEM:-768M}
-  # Launch Ghidra
-  exec "${SCRIPT_DIR}"/support/launch.sh fg Ghidra $MAXMEM "" ghidra.GhidraRun "$@"
+  exec "/ghidra/server/ghidraSvr" console
 fi
 
-exec "$@"
+exec "$@"

server.conf

@@ -123,7 +123,9 @@ ghidra.repositories.dir=/repos
 #                       used to store repositories.  Use of this variable to define the
 #                       repositories directory must be retained.
 wrapper.app.parameter.1=-a0
-wrapper.app.parameter.2=${ghidra.repositories.dir}
+wrapper.app.parameter.2=-u
+wrapper.app.parameter.3=-ip${GHIDRA_PUBLIC_HOSTNAME}
+wrapper.app.parameter.4=${ghidra.repositories.dir}
 
 # Establish server process owner
 # This should only be used when installing as a service using a nologin