一、环境搭建
1、win10
2、docker 20.10.14 版本以上
3、docker-compose 2.0.0 版本以上
3.1 小于可以通过https://github.com/docker/compose/releases/download/v2.36.0/docker-compose-windows-x86_64.exe下载后
3.1 docker-compose-windows-x86_64.exe修改为docker-compose.exe
3.2 查看docker-compose变量路径,替换原docker-compose.exe
二、拉取雷池waf所需镜像(实际这步可以跳过,docker-compose.yaml文件里已经包含了)
docker pull swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-mgt
docker pull swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-chaos
docker pull swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-tengine
docker pull swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-fvm
docker pull swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-detector
docker pull swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-luigi
三、建立文件目录(我是:G:\safeline)
四、修改官网原docker-compose.yaml,修改过后为:(根据个人路径,全局替换g/safeline)
networks:
safeline-ce:
name: safeline-ce
driver: bridge
ipam:
driver: default
config:
- gateway: 172.22.222.1
subnet: 172.22.222.0/24
driver_opts:
com.docker.network.bridge.name: safeline-ce
services:
postgres:
container_name: safeline-pg
restart: always
image: swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-postgres:15.2
volumes:
- //g/safeline/resources/postgres/data:/var/lib/postgresql/data
- /etc/localtime:/etc/localtime:ro
environment:
- POSTGRES_USER=safeline-ce
- POSTGRES_PASSWORD=123456
networks:
safeline-ce:
ipv4_address: 172.22.222.2
command: [postgres, -c, max_connections=600]
healthcheck:
test: pg_isready -U safeline-ce -d safeline-ce
mgt:
container_name: safeline-mgt
restart: always
image: swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-mgt:latest
volumes:
- /etc/localtime:/etc/localtime:ro
- //g/safeline/resources/mgt:/app/data
- //g/safeline/logs/nginx:/app/log/nginx:z
- //g/safeline/resources/sock:/app/sock
- /var/run:/app/run
ports:
- ${MGT_PORT:-9443}:1443
healthcheck:
test: curl -k -f https://localhost:1443/api/open/health
environment:
- MGT_PG=postgres://safeline-ce:zy123456@safeline-pg/safeline-ce?sslmode=disable
depends_on:
- postgres
- fvm
logging:
driver: "json-file"
options:
max-size: "100m"
max-file: "5"
networks:
safeline-ce:
ipv4_address: 172.22.222.4
detect:
container_name: safeline-detector
restart: always
image: swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-detector:latest
volumes:
- //g/safeline/resources/detector:/resources/detector
- //g/safeline/logs/detector:/logs/detector
- /etc/localtime:/etc/localtime:ro
environment:
- LOG_DIR=/logs/detector
networks:
safeline-ce:
ipv4_address: 172.22.222.5
tengine:
container_name: safeline-tengine
restart: always
image: swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-tengine:latest
volumes:
- /etc/localtime:/etc/localtime:ro
- /etc/resolv.conf:/etc/resolv.conf:ro
- //g/safeline/resources/nginx:/etc/nginx
- //g/safeline/resources/detector:/resources/detector
- //g/safeline/resources/chaos:/resources/chaos
- //g/safeline/logs/nginx:/var/log/nginx:z
- //g/safeline/resources/cache:/usr/local/nginx/cache
- //g/safeline/resources/sock:/app/sock
environment:
- TCD_MGT_API=https://172.22.222.4:1443/api/open/publish/server
- TCD_SNSERVER=172.22.222.5:8000
# deprecated
- SNSERVER_ADDR=172.22.222.5:8000
- CHAOS_ADDR=172.22.222.10
ulimits:
nofile: 131072
network_mode: host
luigi:
container_name: safeline-luigi
restart: always
image: swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-luigi:latest
environment:
- MGT_IP=172.22.222.4
- LUIGI_PG=postgres://safeline-ce:zy123456@safeline-pg/safeline-ce?sslmode=disable
volumes:
- /etc/localtime:/etc/localtime:ro
- //g/safeline/resources/luigi:/app/data
logging:
driver: "json-file"
options:
max-size: "100m"
max-file: "5"
depends_on:
- detect
- mgt
networks:
safeline-ce:
ipv4_address: 172.22.222.7
fvm:
container_name: safeline-fvm
restart: always
image: swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-fvm:latest
volumes:
- /etc/localtime:/etc/localtime:ro
logging:
driver: "json-file"
options:
max-size: "100m"
max-file: "5"
networks:
safeline-ce:
ipv4_address: 172.22.222.8
chaos:
container_name: safeline-chaos
restart: always
image: swr.cn-east-3.myhuaweicloud.com/chaitin-safeline/safeline-chaos:latest
logging:
driver: "json-file"
options:
max-size: "100m"
max-file: "10"
environment:
- DB_ADDR=postgres://safeline-ce:zy123456@safeline-pg/safeline-ce?sslmode=disable
volumes:
- //g/safeline/resources/sock:/app/sock
- //g/safeline/resources/chaos:/app/chaos
networks:
safeline-ce:
ipv4_address: 172.22.222.10
五、安装雷池waf容器(大约等待2分钟左右)
docker-compose up
六、新开一个cmd窗口,重置密码(执行:docker exec safeline-mgt resetadmin)
六、访问http://127.0.0.1:9443,登录
创作不易,感谢支持