Release MISP 2.5 and PHP 8.2

Author: ostefano

.gitignore

@@ -6,3 +6,4 @@
 .env
 env.hcl
 rootca.crt
+cert.pem

README.md

@@ -134,6 +134,7 @@ Custom root CA certificates can be mounted under `/usr/local/share/ca-certificat
 
 -   Make sure you run a fairly recent version of Docker and Docker Compose (if in doubt, update following the steps outlined in https://docs.docker.com/engine/install/ubuntu/)
 -   Make sure you are not running an old image or container; when in doubt run `docker system prune --volumes` and clone this repository into an empty directory
+-   If you receive an error that the 'start_interval' does not match any of the regexes, update Docker following the steps outlined in https://docs.docker.com/engine/install/ubuntu/)
 
 ## Versioning
 

core/Dockerfile

@@ -5,17 +5,13 @@ FROM "${DOCKER_HUB_PROXY}python:3.12-slim-bookworm" AS php-base
     ENV DEBIAN_FRONTEND noninteractive
 
     # Uncomment when building in corporate environments
-    # COPY ./rootca.crt /usr/local/share/ca-certificates/rootca.pem
-    # COPY ./rootca.crt /usr/lib/ssl/cert.pem
+    # COPY ./cert.pem /usr/local/share/ca-certificates/rootca.pem
+    # COPY ./cert.pem /usr/lib/ssl/cert.pem
 
     RUN apt-get update; apt-get install -y --no-install-recommends \
         lsb-release \
         ca-certificates \
         curl
-    RUN curl -sSLo /tmp/debsuryorg-archive-keyring.deb https://packages.sury.org/debsuryorg-archive-keyring.deb
-    RUN dpkg -i /tmp/debsuryorg-archive-keyring.deb
-    RUN echo "deb [signed-by=/usr/share/keyrings/deb.sury.org-php.gpg] https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/php.list
-    RUN apt-get update
 
 
 FROM php-base AS composer-build
@@ -25,33 +21,27 @@ FROM php-base AS composer-build
     ARG CORE_COMMIT
 
     RUN apt-get install -y --no-install-recommends \
-        php7.4 \
-        php7.4-apcu \
-        php7.4-curl \
-        php7.4-xml \
-        php7.4-intl \
-        php7.4-bcmath \
-        php7.4-mbstring \
-        php7.4-mysql \
-        php7.4-redis \
-        php7.4-gd \
-        php7.4-fpm \
-        php7.4-zip \
+        php8.2 \
+        php8.2-apcu \
+        php8.2-curl \
+        php8.2-xml \
+        php8.2-intl \
+        php8.2-bcmath \
+        php8.2-mbstring \
+        php8.2-mysql \
+        php8.2-redis \
+        php8.2-gd \
+        php8.2-fpm \
+        php8.2-zip \
         unzip \
         && apt-get autoremove -y && apt-get clean -y && rm -rf /var/lib/apt/lists/*
 
     WORKDIR /tmp
-    ADD https://raw.githubusercontent.com/MISP/MISP/${CORE_COMMIT:-${CORE_TAG}}/app/composer.json /tmp
+    RUN curl -o /tmp/composer.json https://raw.githubusercontent.com/MISP/MISP/${CORE_COMMIT:-${CORE_TAG}}/app/composer.json
     COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
     RUN composer config --no-interaction allow-plugins.composer/installers true
     RUN composer install
     RUN composer require --with-all-dependencies --no-interaction \
-        supervisorphp/supervisor:^4.0 \
-        guzzlehttp/guzzle:^7.4.5 \
-        lstrojny/fxmlrpc \
-        php-http/message \
-        php-http/message-factory \
-        # docker image specific dependencies
         elasticsearch/elasticsearch:^8.7.0 \
         jakub-onderka/openid-connect-php:^1.0.0 \
         aws/aws-sdk-php
@@ -64,10 +54,11 @@ FROM php-base AS php-build
     RUN apt-get install -y --no-install-recommends \
         gcc \
         g++ \
+        git \
         make \
-        php7.4 \
-        php7.4-dev \
-        php7.4-xml \
+        php8.2 \
+        php8.2-dev \
+        php8.2-xml \
         php-pear \
         libbrotli-dev \
         libfuzzy-dev \
@@ -76,18 +67,20 @@ FROM php-base AS php-build
         libzstd-dev \
         && apt-get autoremove -y && apt-get clean -y && rm -rf /var/lib/apt/lists/*
 
-    RUN update-alternatives --set php /usr/bin/php7.4
-    RUN update-alternatives --set php-config /usr/bin/php-config7.4
-    RUN update-alternatives --set phpize /usr/bin/phpize7.4
+    RUN update-alternatives --set php /usr/bin/php8.2
+    RUN update-alternatives --set php-config /usr/bin/php-config8.2
+    RUN update-alternatives --set phpize /usr/bin/phpize8.2
 
     RUN cp "/usr/lib/$(gcc -dumpmachine)"/libfuzzy.* /usr/lib
     RUN pecl channel-update pecl.php.net && \
-        pecl install ssdeep && \
         pecl install rdkafka && \
         pecl install simdjson && \
         pecl install zstd && \
         pecl install brotli
 
+    # install pect-text-ssdeep 1.2
+    RUN git clone --recursive --depth=1 https://github.com/JakubOnderka/pecl-text-ssdeep.git /tmp/pecl-text-ssdeep
+    RUN cd /tmp/pecl-text-ssdeep && phpize && ./configure && make && make install
 
 FROM php-base AS python-build
     ENV DEBIAN_FRONTEND noninteractive   
@@ -186,19 +179,19 @@ FROM php-base
         mariadb-client \
         rsync \
         # PHP Requirements
-        php7.4 \
-        php7.4-apcu \
-        php7.4-curl \
-        php7.4-xml \
-        php7.4-intl \
-        php7.4-bcmath \
-        php7.4-mbstring \
-        php7.4-mysql \
-        php7.4-redis \
-        php7.4-gd \
-        php7.4-fpm \
-        php7.4-zip \
-        php7.4-ldap \
+        php8.2 \
+        php8.2-apcu \
+        php8.2-curl \
+        php8.2-xml \
+        php8.2-intl \
+        php8.2-bcmath \
+        php8.2-mbstring \
+        php8.2-mysql \
+        php8.2-redis \
+        php8.2-gd \
+        php8.2-fpm \
+        php8.2-zip \
+        php8.2-ldap \
         libmagic1 \
         libldap-common \
         librdkafka1 \
@@ -213,7 +206,7 @@ FROM php-base
         curl jq \
         && apt-get autoremove -y && apt-get clean -y && rm -rf /var/lib/apt/lists/*
 
-    RUN update-alternatives --set php /usr/bin/php7.4
+    RUN update-alternatives --set php /usr/bin/php8.2
 
     # Install python modules
     COPY --from=python-build /wheels /wheels

core/files/entrypoint_fpm.sh

@@ -33,7 +33,7 @@ change_php_vars() {
 echo "Configure PHP | Change PHP values ..." && change_php_vars
 
 echo "Configure PHP | Starting PHP FPM"
-/usr/sbin/php-fpm7.4 -R -F & master_pid=$!
+/usr/sbin/php-fpm8.2 -R -F & master_pid=$!
 
 # Wait for it
 wait "$master_pid"

core/files/etc/nginx/includes/misp

@@ -24,7 +24,7 @@ location / {
 
 location ~ ^/[^/]+\.php(/|$) {
     include snippets/fastcgi-php.conf;
-    fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
+    fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
     fastcgi_read_timeout 300s;
     fastcgi_send_timeout 300s;
     fastcgi_connect_timeout 300s;

modules/Dockerfile

@@ -6,7 +6,12 @@ FROM "${DOCKER_HUB_PROXY}python:3.12-slim-bookworm" AS python-build
     ARG MODULES_COMMIT
     ARG LIBFAUP_COMMIT
 
+    # Uncomment when building in corporate environments
+    # COPY ./cert.pem /usr/local/share/ca-certificates/rootca.pem
+    # COPY ./cert.pem /usr/lib/ssl/cert.pem
+
     RUN apt-get update && apt-get install -y --no-install-recommends \
+        ca-certificates \
         cmake \
         git \
         build-essential \

template.env

@@ -2,9 +2,9 @@
 # Build-time variables
 ##
 
-CORE_TAG=v2.4.198
+CORE_TAG=v2.5.0
 MODULES_TAG=v2.4.197
-PHP_VER=20190902
+PHP_VER=20220829
 LIBFAUP_COMMIT=3a26d0a
 
 # PYPY_* vars take precedence over MISP's
@@ -20,7 +20,7 @@ LIBFAUP_COMMIT=3a26d0a
 # PYPI_MISP_STIX_VERSION"==2.4.194"
 
 # CORE_COMMIT takes precedence over CORE_TAG
-# CORE_COMMIT=c56d537
+# CORE_COMMIT=0bba3f5
 # MODULES_COMMIT takes precedence over MODULES_TAG
 # MODULES_COMMIT=de69ae3