tengine203-modsecurity303+luajit2
545
&& { git checkout -b v3/master origin/v3/master }|| {echo 'None git check'} \configure.ac: installing './ylwrap'
5585Loaded plugins: fastestmirror, ovl
5586Cannot open: https://archives.fedoraproject.org/pub/archive/fedora/linux/updates/23/x86_64/b/bison-3.0.4-3.fc23.x86_64.rpm. Skipping.
5587Error: Nothing to do
5588The command '/bin/sh -c cd ${DEPLOY_PATH} && /bin/bash build_modsecurity.sh' returned a non-zero code: 1
5589{"exitCode":8, "message":"docker build failed or timeout "}
docker run -itd -p 32180:80 -p 35280:8080 \
-v /spool/log/:/spool/log/ \
-v /etc/localtime:/etc/localtime:ro \
-v $(pwd)/nginx.conf.d/nginx.conf:/etc/nginx.conf \
-v $(pwd)/nginx.conf.d/help.conf:/etc/nginx/help.conf \
-v $(pwd)/nginx.conf.d/vhosts:/etc/nginx/vhosts \
-v $(pwd)/nginx.conf.d/modsecurity.conf:/etc/nginx/modsecurity.conf \
--restart=always --name=waf \
registry.cn-hangzhou.aliyuncs.com/xxzhang/tengine-with-modsecurity:v0.1 \
supervisord -c /etc/supervisord.conf
# 对于已经部署过tengine/waf/nginx的宿主机可以使用这个
docker run -itd -p 32180:80 -p 35280:8080 \
-v /spool/log/:/spool/log/ \
-v /etc/localtime:/etc/localtime:ro \
-v /etc/nginx:/etc/nginx \
--restart=always --name=waf \
registry.cn-hangzhou.aliyuncs.com/xxzhang/tengine-with-modsecurity:v0.1 \
supervisord -c /etc/supervisord.conf
xx-scan 即可。由于需要对接WAF平台到管控设备,所以修改了WAF相关配置策略。
SecAuditLogFormat JSON 这个设置没有用。Content type
Image
Digest
Size
1 GB
Last updated
almost 7 years ago
docker pull actanble/modsecurity