Dockerfile

Dockerfile

@@ -0,0 +1,20 @@
+FROM ubuntu:16.04
+
+RUN apt-get update && \
+    apt-get install -y \
+      python \
+      python-pip \
+      libcapstone-dev \
+    && \
+    rm -fr /var/lib/apt/lists/*
+
+RUN pip install 'capstone>=3.0,<4.0'
+
+COPY . /src/github.com/xoreaxeaxeax/sandsifter
+WORKDIR /src/github.com/xoreaxeaxeax/sandsifter
+
+RUN make
+
+ENTRYPOINT ["/usr/bin/python", "/src/github.com/xoreaxeaxeax/sandsifter/sifter.py"]
+CMD ["--unk", "--dis", "--len", "--sync", "--tick", "--", "-P1", "-t"]
+ENV TERM=xterm-256color

README.md

@@ -216,6 +216,36 @@ in seconds), it is typically because these flags are required for the processor
 you are scanning.
 
 
+### Docker
+
+A docker image may be built and used:
+
+```
+docker build -t sandsifter .
+docker run -it --rm --privileged \
+  -v $(pwd)/data:/src/github.com/xoreaxeaxeax/sandsifter/data \
+  sandsifter
+```
+
+It must be run with `--privileged`.
+
+You may change the arguments to the `./sifter.py` by passing additional args:
+
+```
+docker run -it --rm --privileged \
+  -v $(pwd)/data:/src/github.com/xoreaxeaxeax/sandsifter/data \
+  sandsifter --unk --dis --len --sync --tick --low-mem -- -P1 -t -N
+```
+
+After completion you can run the summarize script with:
+
+```
+docker run -ti --rm \
+  -v $(pwd)/data:/src/github.com/xoreaxeaxeax/sandsifter/data \
+  --entrypoint=/src/github.com/xoreaxeaxeax/sandsifter/summarize.py \
+  sandsifter data/log
+```
+
 ### README TODO
 
 * algorithms: random tunneling brute driven/mutator