NUKIB/misp

Some customization options

clopmz opened this issue · 1 comments

clopmz commented

Hi all,

I am testing your current MISP image due to the problems to use PHP 7.4 under RHEL9 and it is very impressive. Congratulations and really good work. I don't know if this is the right forum, but I have a few questions regarding image customisation.

  • Is it possible to use podman as a container stack instead of docker? I am using RHEL9 as a host
  • Regarding to use crypto policies in this image. By default, my hosts are configured to use FIPS as a default policy. Can I expecto some type of problem?
  • What port is used for misp-modules? Default:6666?
  • Is it possible to setup a supervisor's user with password?
  • Regarding conainer volumes: how can I backup some important files and dirs like for example $PATH_TO_MISP/app/webroot/img/orgs, $PATH_TO_MISP/app/webroot/img/custom, $PATH_TO_MISP/app/files dirs?
  • Backup and restore: exists some type of procedure to backup and restore all fetched feeds?

Many thanks

ondj commented

Hello and sorry for late reply:

Is it possible to use podman as a container stack instead of docker? I am using RHEL9 as a host

It should be possible, but it is not tested.

Regarding to use crypto policies in this image. By default, my hosts are configured to use FIPS as a default policy. Can I expecto some type of problem?

I think it should works. But be careful, that container itself can have different policy than host machine. You can set your custom policy for container by setting SECURITY_CRYPTO_POLICY env variable.

What port is used for misp-modules? Default:6666?

Yes

Is it possible to setup a supervisor's user with password?

Not currently, but I think I will implement it in future.

Regarding conainer volumes: how can I backup some important files and dirs like for example

I will write manual how to do backup.

Backup and restore: exists some type of procedure to backup and restore all fetched feeds?

I am not sure, please check MISP documentation.