From 7efdcc684e194a98aefefd6b63fc60799414fded Mon Sep 17 00:00:00 2001 From: Michael Scalzetti Date: Tue, 4 Oct 2022 20:32:04 -0400 Subject: [PATCH] pivoting project to use a privileged, airgapped container to interface with encrypted device rather than passing an unencrypted device through to the container --- Dockerfile | 3 ++- docker-compose.yaml | 15 +++++++++++++++ 2 files changed, 17 insertions(+), 1 deletion(-) create mode 100644 docker-compose.yaml diff --git a/Dockerfile b/Dockerfile index 008afdc..234b5f4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,7 +7,8 @@ WORKDIR /notes RUN ln -snf /usr/share/zoneinfo/America/New_York /etc/localtime && \ echo "America/New_York" > /etc/timezone RUN apt-get update && apt-get install -y curl vim neovim zsh git \ - python3-wheel python3-pip software-properties-common + python3-wheel python3-pip software-properties-common +RUN DEBIAN_FRONTEND=noninteractive apt-get install -y cryptsetup RUN add-apt-repository ppa:deadsnakes/ppa RUN rm -f /usr/bin/python /usr/bin/pip /usr/bin/python3 RUN ln -s /usr/bin/pip3 /usr/bin/pip diff --git a/docker-compose.yaml b/docker-compose.yaml new file mode 100644 index 0000000..5b93ba5 --- /dev/null +++ b/docker-compose.yaml @@ -0,0 +1,15 @@ +version: '3' + +services: + priv: + build: + context: . + image: docker.scalz.cloud/priv + container_name: priv + privileged: true + #tty: true + stdin_open: true + network_mode: none + + +