Dockerfile

###
## This Dockerfile provides an easy way to try mercury.
#
# Run this once:
#   docker build -t mercury:default .
#
# Run mercury:
#   docker run --rm -i --entrypoint /usr/local/bin/mercury \
#       --volume .:/root mercury:default <args> <for> <mercury>
#
# You can then set this as a bash alias in your .bashrc:
#   alias mercury='docker run --rm -i --entrypoint /usr/local/bin/mercury --volume .:/root mercury:default'
#
# In each of the commands above, feel free to replace name of the docker image
# (mercury:default) with a different name/tag of your choosing, as long as it
# remains consistent across the commands.
#
# The host's current working directory (.) will be mounted as the container's
# current working directory (/root).  This provides mercury some read and write
# access to the host filesystem, such as a pcap file in your current directory.

FROM debian:12-slim
RUN apt-get update \
    && apt-get install -y git build-essential \
        pkg-config wget jq tcpreplay iproute2 sudo debconf \
        zlib1g-dev libssl-dev libgmp-dev --no-install-recommends \
    && rm -rf /var/lib/apt/lists/*

COPY . /src
WORKDIR /src
RUN ./configure \
    && make V=s \
    && make batch_gcd --dir=src \
    && make tls_scanner --dir=src \
    && make install-nonroot \
    && make install-certtools

FROM debian:12-slim
WORKDIR /root/
COPY --from=0 /usr/local /usr/local
RUN apt-get update \
    && apt-get install -y libgmp10 libssl3 \
    && rm -rf /var/lib/apt/lists/*

RUN addgroup --system mercury && adduser --system --group mercury \
    && mkdir -p /usr/local/share/mercury \
    && mkdir -p /usr/local/var/mercury \
    && chown -R mercury:mercury /usr/local/share/mercury /usr/local/var/mercury/

# Default entrypoint for "docker run" on this image
ENTRYPOINT ["/usr/local/bin/mercury"]

# Other possibilities (edit this file or specify via --entrypoint at run time)
# ENTRYPOINT ["/usr/local/bin/mercury", "-u", "mercury", "-c", "eth0"]
# ENTRYPOINT ["/usr/local/bin/batch_gcd"]
# ENTRYPOINT ["/usr/local/bin/cert_analyze"]
# ENTRYPOINT ["/usr/local/bin/tls_scanner"]
# ENTRYPOINT ["/bin/bash"]