IMAGE                                                                     CREATED         CREATED BY                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    SIZE      COMMENT
sha256:d5c817895ad61d42df871b71456d5209f08b9bc1bc62ddb1c14b4eb7685baf98   8 minutes ago   CMD ["/usr/sbin/init"]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        0B        buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   0B        buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   VOLUME [/var/log /home]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       0B        buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   EXPOSE [22/tcp]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               0B        buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c systemctl enable lab-install.service # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   20.5kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   COPY --chmod=644 workstation/lab-install.service /etc/systemd/system/ # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              20.5kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c chmod 755 /opt/purple-team/scripts/install-all.sh # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                      20.5kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   COPY workstation/install-all.sh /opt/purple-team/scripts/ # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          20.5kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c chmod 755 /opt/purple-team/scripts/install-falco.sh # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                    20.5kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   COPY workstation/install-falco.sh /opt/purple-team/scripts/ # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        20.5kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c chmod 755 /opt/purple-team/scripts/install-wazuh.sh # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                    24.6kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   COPY workstation/install-wazuh.sh /opt/purple-team/scripts/ # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        24.6kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c chmod 755 /usr/local/bin/entrypoint.sh # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 20.5kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   COPY workstation/entrypoint.sh /usr/local/bin/ # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     20.5kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c /opt/purple-team/scripts/setup-workstation.sh # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                          69.6kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c chmod 755 /opt/purple-team/scripts/setup-workstation.sh # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                24.6kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   COPY workstation/setup-workstation.sh /opt/purple-team/scripts/ # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    24.6kB    buildkit.dockerfile.v0
<missing>                                                                 8 minutes ago   RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c rpm --import https://falco.org/repo/falcosecurity-packages.asc &&     printf '[falco]\nname=Falco repository\nbaseurl=https://download.falco.org/packages/rpm\ngpgcheck=1\ngpgkey=https://falco.org/repo/falcosecurity-packages.asc\nenabled=1\n'     > /etc/yum.repos.d/falco.repo &&     dnf install -y falco-0.44.1-1 &&     dnf clean all # buildkit                                                                                                                                                                          191MB     buildkit.dockerfile.v0
<missing>                                                                 9 minutes ago   RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c rpm --import https://packages.wazuh.com/key/GPG-KEY-WAZUH &&     printf '[wazuh]\ngpgcheck=1\ngpgkey=https://packages.wazuh.com/key/GPG-KEY-WAZUH\nenabled=1\nname=EL-$releasever - Wazuh\nbaseurl=https://packages.wazuh.com/4.x/yum/\npriority=1\n'     > /etc/yum.repos.d/wazuh.repo &&     dnf install -y wazuh-agent-4.12.0 &&     dnf clean all &&     killall wazuh-execd wazuh-agentd wazuh-syscheckd wazuh-logcollector wazuh-modulesd 2>/dev/null || true &&     rm -f /var/ossec/var/run/*.pid # buildkit              51.9MB    buildkit.dockerfile.v0
<missing>                                                                 9 minutes ago   COPY --chmod=644 base/falco_custom.yaml /etc/falco/config.d/ # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       20.5kB    buildkit.dockerfile.v0
<missing>                                                                 9 minutes ago   RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c mkdir -p /etc/falco/config.d # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           16.4kB    buildkit.dockerfile.v0
<missing>                                                                 9 minutes ago   COPY --chmod=644 base/scripts/ossec.conf.template /opt/purple-team/scripts/ # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        20.5kB    buildkit.dockerfile.v0
<missing>                                                                 9 minutes ago   RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c chmod 755 /opt/purple-team/scripts/entrypoint-base.sh # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                  24.6kB    buildkit.dockerfile.v0
<missing>                                                                 12 hours ago    COPY base/scripts/entrypoint-base.sh /opt/purple-team/scripts/ # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     24.6kB    buildkit.dockerfile.v0
<missing>                                                                 3 days ago      RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c mkdir -p /opt/purple-team/scripts /etc/rsyslog.d # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                       16.4kB    buildkit.dockerfile.v0
<missing>                                                                 3 days ago      RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c useradd -m -s /bin/bash dev-user &&     echo "dev-user:Summer2024" | chpasswd &&     usermod -aG wheel dev-user &&     echo "dev-user ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/dev-user &&     chmod 440 /etc/sudoers.d/dev-user # buildkit                                                                                                                                                                                                                                                                                       397kB     buildkit.dockerfile.v0
<missing>                                                                 3 days ago      RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c mkdir -p /home/labadmin/.ssh &&     chmod 700 /home/labadmin/.ssh &&     chown -R labadmin:labadmin /home/labadmin/.ssh # buildkit                                                                                                                                                                                                                                                                                                                                                                                                16.4kB    buildkit.dockerfile.v0
<missing>                                                                 3 days ago      RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c useradd -m -s /bin/bash labadmin &&     usermod -aG wheel labadmin &&     echo "labadmin ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/labadmin &&     chmod 440 /etc/sudoers.d/labadmin # buildkit                                                                                                                                                                                                                                                                                                                                    389kB     buildkit.dockerfile.v0
<missing>                                                                 3 days ago      RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c mkdir /var/run/sshd &&     ssh-keygen -A &&     sed -i 's/#PermitRootLogin.*/PermitRootLogin no/' /etc/ssh/sshd_config &&     sed -i 's/#PasswordAuthentication.*/PasswordAuthentication yes/' /etc/ssh/sshd_config &&     sed -i 's/#PubkeyAuthentication.*/PubkeyAuthentication yes/' /etc/ssh/sshd_config # buildkit                                                                                                                                                                                                           49.2kB    buildkit.dockerfile.v0
<missing>                                                                 3 days ago      RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c systemctl enable rsyslog sshd systemd-user-sessions &&     systemctl enable systemd-user-sessions.service &&     ln -sf /usr/lib/systemd/system/systemd-user-sessions.service /etc/systemd/system/multi-user.target.wants/ # buildkit                                                                                                                                                                                                                                                                                             20.5kB    buildkit.dockerfile.v0
<missing>                                                                 3 days ago      RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c systemctl set-default multi-user.target # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                16.4kB    buildkit.dockerfile.v0
<missing>                                                                 3 days ago      RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c (cd /lib/systemd/system/sysinit.target.wants/; for i in *; do [ $i == systemd-tmpfiles-setup.service ] || rm -f $i; done);     rm -f /lib/systemd/system/multi-user.target.wants/*;    rm -f /etc/systemd/system/*.wants/*;    rm -f /lib/systemd/system/local-fs.target.wants/*;     rm -f /lib/systemd/system/sockets.target.wants/*udev*;     rm -f /lib/systemd/system/sockets.target.wants/*initctl*;     rm -f /lib/systemd/system/basic.target.wants/*;    rm -f /lib/systemd/system/anaconda.target.wants/*; # buildkit   65.5kB    buildkit.dockerfile.v0
<missing>                                                                 3 days ago      RUN |3 INSTALL_WAZUH=true INSTALL_FALCO=true INSTALL_XSIAM=false /bin/sh -c dnf install -y epel-release &&     dnf update -y &&     dnf module reset -y postgresql &&     dnf module enable -y postgresql:16 &&     dnf install -y     rsyslog     openssh-server     sudo     systemd     systemd-sysv     iproute     iproute-tc     hostname     procps-ng     openssh-clients     net-tools     gnupg     git     postgresql     && dnf clean all # buildkit                                                                                                                                              318MB     buildkit.dockerfile.v0
<missing>                                                                 3 days ago      ENV INSTALL_XSIAM=false                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       0B        buildkit.dockerfile.v0
<missing>                                                                 3 days ago      ENV INSTALL_FALCO=true                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        0B        buildkit.dockerfile.v0
<missing>                                                                 3 days ago      ENV INSTALL_WAZUH=true                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        0B        buildkit.dockerfile.v0
<missing>                                                                 3 days ago      ARG INSTALL_XSIAM=false                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       0B        buildkit.dockerfile.v0
<missing>                                                                 3 days ago      ARG INSTALL_FALCO=true                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        0B        buildkit.dockerfile.v0
<missing>                                                                 3 days ago      ARG INSTALL_WAZUH=true                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        0B        buildkit.dockerfile.v0
<missing>                                                                 2 years ago     CMD ["/bin/bash"]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             0B        buildkit.dockerfile.v0
<missing>                                                                 2 years ago     ADD layer.tar.xz / # buildkit                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 195MB     buildkit.dockerfile.v0
