The following steps are required in order to run the Docker Compose scripts.
docker network create honeytrap
When working with the pre-built Docker Compose setup, it’s necessary to set up the following data infra.
mkdir -p /data/elasticsearch chown -R 1000:1000 /data/elasticsearch
Note: If you’re running MacOS, make sure to share
/data/elasticsearch in Docker preferences.
Issue the following commands to download the configuration files. The former is the configuration file for setting up the HoneyTrap Server infrastructure, the latter is for configuring the HoneyTrap Agent.
wget https://gist.githubusercontent.com/Coen-Schuijt/0600aca75dc99f6c2ce2c260ad00f0ab/raw/docker-compose-honeytrap.yml wget https://gist.githubusercontent.com/Coen-Schuijt/0600aca75dc99f6c2ce2c260ad00f0ab/raw/config-docker.toml
Note: If you are running Linux, you need to add the following line to /etc/sysctl.conf, and reload using
sysctl -p /etc/sysctl.conf.
vm.max_map_count = 262144
This will use the config-docker.toml file in the current directory and forward ports 5900 and 8022 to the Docker instance. If you want to store data into Elasticsearch and analyze with Kibana, it will be easiest to use the Docker Compose script.