From 3e383e46e8da28beee5b107378320e4519a610a3 Mon Sep 17 00:00:00 2001 From: ffredhenry Date: Sat, 23 Mar 2024 15:18:20 -0500 Subject: added initial code, dockerfile does work --- Dockerfile | 19 +++++++++++++++++++ README.md | 1 + commands.info | 6 ++++++ 3 files changed, 26 insertions(+) create mode 100644 Dockerfile create mode 100644 README.md create mode 100644 commands.info diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..29b2224 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,19 @@ +# linux mint volatility +FROM linuxmintd/mint20.3-amd64 +RUN apt update -y && apt upgrade -y +RUN apt install python2 python2-dev wget git -y + +# install pip2 from pypa +RUN wget https://bootstrap.pypa.io/pip/2.7/get-pip.py +RUN python2 get-pip.py + +# pip2 setup of prereqs +RUN pip2 install --upgrade setuptools +RUN pip2 install pycrypto distorm3 + +# volatility install +RUN git clone https://github.com/volatilityfoundation/volatility +WORKDIR volatility +RUN python2 setup.py install + +WORKDIR /userspace diff --git a/README.md b/README.md new file mode 100644 index 0000000..8f873d8 --- /dev/null +++ b/README.md @@ -0,0 +1 @@ +# volatility2docker diff --git a/commands.info b/commands.info new file mode 100644 index 0000000..f0a818f --- /dev/null +++ b/commands.info @@ -0,0 +1,6 @@ +# to build the container from the same directory as the Dockerfile +docker build -t volatility2mint . + +# to run the container from a host directory with memory images present +docker run -it --mount type=bind,source=.,target=/userspace volatility2mint + -- cgit v1.2.3