Skip to content

[FR] Dockerfile and container releases #1452

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
operatorequals opened this issue Aug 25, 2021 · 0 comments
Closed

[FR] Dockerfile and container releases #1452

operatorequals opened this issue Aug 25, 2021 · 0 comments
Labels
enhancement New feature or request

Comments

@operatorequals
Copy link

Is your feature request related to a problem? Please describe.
Recently, I have been working with detection_rules CLI tool and different versions of ES stack.
It became a struggle to me to realize that rules change upon versions (as rule schemas change), and that main branch does not work for everything ever (which makes sense).
Yet, I needed to use mainly 7.12.1 version and also other stuff from other versions to get going with my work. But this needed me to joggle between tags and branches.

Describe the solution you'd like
What I did in my organization to tackle this issue was to create a Dockerfile and use a Github Worfklow to git checkout between tags and create Images for all versions supported.
Then I could call any detection_rules version with : docker run -ti detection_rules:7.12.1 kibana upload-rules ... (for 7.12.1) and work with the project without needing to handle git refs all the time.
Bonus 1: Now all security team can use the CLI tool without setting up Python3.8, or switch venvs.
Bonus 2: Images can be used in CI/CD for rule uploads without setting up Python3.8 to CI/CD workers.

Describe alternatives you've considered
There was no developed alternative, but what I was doing was to checkout to a git tag, pick a homemade commit that was fixing #634, and then run the detection_rules CLI. Then go to a different tag and do that again.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants