Bare 'FROM ubuntu' was floating; recent rollover (ubuntu:latest = 25.04
'resolute') dropped libpcre3 in favour of libpcre2 and broke the build
with E: Unable to locate package libpcre3.
Pin to 24.04 (same as docker_kaspersky and docker_sep) so the build is
reproducible across rollovers.
test-data/ is 255 MB of public corpora (Yamato hayabusa-sample-evtx +
local run outputs) — too large to track. fetch-test-data.sh clones the
upstream on demand.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Upstream renamed release assets (linux-intel → lin-x64-gnu,
linux-arm → lin-aarch64-gnu); updated accordingly.
Takajo was silently failing because start.sh invoked it from
WORKDIR=/data — takajo checks for companion files in CWD and
exits with "The Takajo executable does not exist in the current
directory." Wrap the call in (cd /opt/hayabusa && ./takajo ...)
so automagic reports actually land in /output/takajo/.
Also add .dockerignore to keep test-data/ and .git/ out of the
build context.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
tobias