ossec-hids Docker & Self-Hosted Deployment

GitHub

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection,...

5,068 stars C C 35 files · ~43,773 tokens #compliance#file-integrity-management#fim#hids#intrusion-detection#loganalyzer#nist800-53#ossec
1. Pull Image (DOCKERHUB) docker pull ossec/ossec-hids:latest
2. Docker Run (1-Click Launch) docker run -d --name ossec-hids --restart always ossec/ossec-hids:latest
3. Podman Run podman run -d --name ossec-hids --restart always ossec/ossec-hids:latest
4. Skopeo Inspect (Zero-Pull Manifest) skopeo inspect docker://docker.io/ossec/ossec-hids:latest
5. ORAS Pull (OCI Artifact) oras pull ossec/ossec-hids:latest
Dockerfile 
FROM ubuntu:18.04

ENV DEBIAN_FRONTEND noninteractive
RUN apt-get update \
    && apt-get --yes install \
        sudo \
        curl \
        wget \
        git \
        build-essential \
        debhelper \
        libssl-dev \
        linux-libc-dev \
        libpcre2-dev \
        pbuilder \
        expect \
        debconf \
        qemu-user-static
COPY ./debian_files /home/ubuntu/debian_files
COPY . /home/ubuntu/ossec-hids
# `docker build` cannot handle `pbuilder create` because it uses `mount` which needs privilege
# RUN /home/ubuntu/ossec-hids/contrib/debian-packages/generate_ossec.sh -d
# RUN /home/ubuntu/ossec-hids/contrib/debian-packages/generate_ossec.sh -u
# RUN /home/ubuntu/ossec-hids/contrib/debian-packages/generate_ossec.sh -b

CMD ["/bin/sh"]