This script will install T-Pot 16.03 on a fresh Ubuntu 14.04.x LTS (64bit).
It is intended to be used on hosted servers, where an Ubuntu base image is given and there is no ability to install custom ISO images. Successfully tested on Amazon's EC2 Ubuntu 14.04.4 x64 as well as on vanilla Ubuntu 14.04.4 in VMware.
Choose Ubuntu 14.04.x as operating system. Make sure you have your SSH key added to your account (~/.ssh/authorized_keys). and meet the system requirements (>=4GB RAM, 64GB disk, network exposure) for a full T-Pot instance. The system requirements depend on the flavour of T-Pot you intend to run.
During setup, you can choose from four different configurations: T-Pot's standard installation, industrial edition, full installation and, in case you have limited ressources, you can opt for a "honeypot only"-mode during install, which will install T-Pot without suricata and ELK dashboard (>=3GB RAM required).
So, clone the repository. Run as root. Enjoy.
git clone https://github.com/dtag-dev-sec/t-pot-autoinstall.git
cd t-pot-autoinstall/
sudo su
./install.sh
The docker container status is periodically written to ~/docker-status, so you can check if everything is running.
If you run into problems during installation it might be related to your hoster's custom Ubuntu update repositories. So far, we do not have a solution for this.
In case you have very limited resources, you can still run last year's “honeypot-only”-version, which lacks the suricata and kibana dashboard (ELK) component but runs just fine on lower equipped machines with just 1GB of RAM. Therefore, select last year's version by using the branch 15.03. Just add a -b 15.03 to the git clone command. More info here. But of course you will miss the aweseome new features of T-Pot 16.03.