irt/docker_kaspersky
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

KESL 12.1.0-1297 image, Ubuntu 24.04 base, transparent UX

Browse Source 
- Pinned download URL for KESL 12.1.0-1297 (public Kaspersky CDN, 2024-07).
- answer.txt updated to v12 autoinstall format: GROUP_CLEAN required,
  LOCALE=en_US.utf8 (en_US alone is rejected), INTERCEPTOR_MODE.
- start.sh detects v10 (/etc/init.d/kesl-supervisor) vs v12
  (/etc/init.d/kesl) and polls kesl-control until the daemon answers,
  because v12's first start runs an integrity check (~30s).
- Modes (shell/version/scan/debug) and scan output format unchanged so
  existing parsers keep working.
- README + build script point to tabledevil/kaspersky12.
- test_smoke.sh validates image + version + EICAR; auto-skips on macOS
  (Rosetta blocks the daemon).

Validated end-to-end on amd64 Linux:
  - 46 known-malicious files (LS26 detections) all flagged again
  - DetectSource=Local with --network=none + USE_KSN=No, no KSN calls

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
tobias
2026-05-05 13:58:27 +02:00
parent 7f6fb49e50
commit 6357c08bf1
7 changed files with 139 additions and 102 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+20 -19
View File
@@ -1,32 +1,33 @@
FROM ubuntu:20.04 as base
#Requirements
FROM ubuntu:24.04 AS base
LABEL maintainer="tabledevil"
LABEL docker.cmd="docker run -it --rm -v /mnt/sdc1:/data tabledevil/kaspersky"
RUN apt update && apt install -y wget perl
LABEL docker.cmd="docker run -it --rm -v /mnt/sdc1:/data tabledevil/kaspersky12"
ENV DEBIAN_FRONTEND=noninteractive
ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8 TERM=screen-256color
#Fix Locale
ENV LANG en_US.UTF-8
ENV LANGUAGE en_US:en
ENV LC_ALL en_US.UTF-8
ENV TERM=screen-256color
RUN apt-get update \
&& apt-get install -yq locales \
&& locale-gen en_US.UTF-8 \
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
&& apt-get install -y --no-install-recommends \
wget perl ca-certificates locales procps libcap2-bin \
libfuse2t64 \
&& locale-gen en_US.UTF-8 \
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
#Download & Install Kaspersky (TODO: Update to 11)
RUN wget "https://products.s.kaspersky-labs.com/endpoints/keslinux10/10.1.1.6421/multilanguage-10.1.1.6421/babce9ef/kesl_10.1.1-6421_amd64.deb"
RUN dpkg -i kesl_10.1.1-6421_amd64.deb
RUN rm kesl_10.1.1-6421_amd64.deb
# Pinned KESL 12.1.0-1297 (released 2024-07-04, public Kaspersky CDN).
ARG KESL_DEB_URL=https://products.s.kaspersky-labs.com/endpoints/keslinux10/12.1.0.1297/multilanguage-12.1.0.1297/3837323739337c44454c7c31/kesl_12.1.0-1297_amd64.deb
RUN wget -q "$KESL_DEB_URL" -O /tmp/kesl.deb \
&& (dpkg -i /tmp/kesl.deb || (apt-get update && apt-get install -y -f && dpkg -i /tmp/kesl.deb)) \
&& rm /tmp/kesl.deb
#Copy answerfile and run setup
# Run autoinstall — UPDATE_EXECUTE=Yes pulls fresh sigs, baked into the image.
ADD answer.txt /root/answer.txt
RUN /opt/kaspersky/kesl/bin/kesl-setup.pl --autoinstall=/root/answer.txt ; true
FROM ubuntu:20.04
FROM ubuntu:24.04
ENV DEBIAN_FRONTEND=noninteractive
ENV LANG=en_US.UTF-8 LC_ALL=en_US.UTF-8 TERM=screen-256color
COPY --from=base / /
ADD start.sh /root/start.sh
ADD readme /root/readme
RUN chmod +x /root/start.sh
ENTRYPOINT ["/root/start.sh"]
CMD ["shell"]
CMD ["shell"]