AR2000/crowdsec-legacy-firewall-bouncer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Releases Activity

add jq to container

Browse Source
This commit is contained in:
AR2000
2025-01-16 15:33:16 +01:00
parent 79352ec046
commit ad482533fa
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
Dockerfile
View File

@@ -1,20 +1,20 @@
ARG IPTABLES_MODE=nft ARG IPTABLES_MODE=nft
#install iptables #install iptables
FROM ubuntu:noble AS iptables FROM ubuntu:noble AS apt
RUN --mount=type=cache,target=/var/lib/apt/lists,sharing=locked --mount=type=cache,target=/var/cache/apt,sharing=locked <<EOF RUN --mount=type=cache,target=/var/lib/apt/lists,sharing=locked --mount=type=cache,target=/var/cache/apt,sharing=locked <<EOF
apt update apt update
apt upgrade -y apt upgrade -y
apt install iptables -y apt install iptables jq -y
EOF EOF
#set alternative to use iptables-legacy #set alternative to use iptables-legacy
FROM iptables AS iptables-legacy FROM apt AS iptables-legacy
RUN update-alternatives --set iptables /usr/sbin/iptables-legacy RUN update-alternatives --set iptables /usr/sbin/iptables-legacy
RUN update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy RUN update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
#set alternative to use iptables-nft #set alternative to use iptables-nft
FROM iptables AS iptables-nft FROM apt AS iptables-nft
RUN update-alternatives --set iptables /usr/sbin/iptables-nft RUN update-alternatives --set iptables /usr/sbin/iptables-nft
RUN update-alternatives --set ip6tables /usr/sbin/ip6tables-nft RUN update-alternatives --set ip6tables /usr/sbin/ip6tables-nft

4
bouncer.sh
View File

@@ -63,7 +63,7 @@ function processAction() {
} }
while read line; do while read line; do
echo "$line" echo processAction $(echo "$line" | jq -r .action) $(echo "$line" | jq -r .value) $(echo "$line" | jq -r .duration) $(echo "$line" | jq -r .scenario) | tee bouncer.sh.out
processAction "$(echo "$line" | jq -r .action)" "$(echo "$line" | jq -r .value)" "$(echo "$line" | jq -r .duration)" "$(echo "$line" | jq -r .scenario)" processAction $(echo "$line" | jq -r .action) $(echo "$line" | jq -r .value) $(echo "$line" | jq -r .duration) $(echo "$line" | jq -r .scenario)
done done
#{"duration":"-1h1m9s","origin":"CAPI","scenario":"crowdsecurity/ssh-bf","scope":"Ip","type":"ban","value":"122.117.32.192","id":22739513,"action":"del"} #{"duration":"-1h1m9s","origin":"CAPI","scenario":"crowdsecurity/ssh-bf","scope":"Ip","type":"ban","value":"122.117.32.192","id":22739513,"action":"del"}