TheHive-Project / TheHive-Project/Cortex-Analyzers
[FR] Allow to mount a file/directory inside a dockerize analyzer container
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 490
- Forks
- 405
- Avg merge
- 2d 43m
- Merged PRs (30d)
- 8
Description
Feature description
I'm trying to dockerize my custom analyzers. I can see that the path /tmp/cortex-<job_id> is mounted as /job inside de container to get the observable. Is there a way to mount another volume ? Because some of my analyzers are using a file certificate which is not in the build context (I don't want to add it in the context because some certificates are shared between different analyzers).
Describe the solution you'd like
Add an options (maybe in the analyzer configuration JSON file) to create a volume when the container is started.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the analyzer configuration and the Docker container startup path, then compare them with the existing /tmp/cortex-<job_id> mount exposed as /job. Determine how an additional file or directory volume should be specified for custom analyzers, and verify that a configured certificate is available inside the running container.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, python
- Domain
- devops, infrastructure
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100