florian0/ghidra-headless repository overview

I made a Dockerfile with Ghidra⁠ and justfoxings ghidra_bridge⁠ scripts (❤️ it).

A bullet list of things:

• The image is built on officially released versions published on Github.
• Entrypoint is /bin/bash
• Ghidra is available in /opt/ghidra/ with no versioned-subfolder.
• Ghidra Bridge Server is available in /opt/script/
  • bridge_server_foreground.py accepts SERVER_HOST and SERVER_PORT environment variable to declare listen IP and port.

https://github.com/NationalSecurityAgency/⁠

https://github.com/justfoxing/ghidra_bridge⁠

⁠Example docker-compose for headless bridge-support

My 'app' is a discord bot that interacts with ghidra. That's what token and guild is for.

version: '3'
services:
  app:
    build: .
    depends_on:
      - ghidra
    environment:
      DISCORD_TOKEN: "${DISCORD_TOKEN}"
      GUILD: "${GUILD}"
      GHIDRA_HOST: "ghidra"

  ghidra:
    image: florian0/ghidra-headless:10.2.1
    environment:
      SERVER_HOST: "ghidra"
    volumes:
      - ./project:/data
    expose:
      - 4768
    entrypoint: ["/opt/support/analyzeHeadless", "/project/", "project", "-import", "/data/export.gzf", "-scriptPath", "/opt/script", "-postscript", "bridge_server_foreground.py"]

⁠Update cycle

All images will update when a new Ghidra version is released. This ensures that all images have a decently recent eclipse-temurin base image. I will not update all versions forever. Versions older than a year or two will not be updated anymore (Mainly when my patch files dont work anymore).

⁠Versioning

Major.Minor.Patch Tags will always match the exact version.

Major.Minor Tags will automatically update when a patch is released.

Major Tags will automatically update when a minor or patch is released.

Latest will always be the latest version available.

⁠Dockerfile

https://gitlab.com/florian0/ghidra-docker/-/tree/main/ghidra-headless⁠