Add docker image for golang based metlo agent (#194)

Co-authored-by: Akshay Shekhawat <[email protected]>

Author: AHarmlessPyro

Makefile

@@ -2,10 +2,10 @@ build-dockers:
 	docker build -f deploy/backend/Dockerfile -t metlo/backend:latest .
 	docker build -f deploy/frontend/Dockerfile -t metlo/frontend:latest .
 	docker build -f deploy/jobrunner/Dockerfile -t metlo/jobrunner:latest .
-	docker build -f deploy/suricata-daemon/Dockerfile -t metlo/suricata-daemon:latest .
+	docker build -f deploy/metlo-daemon-agent/Dockerfile -t metlo/agent:latest .
 
 push-latest-dockers:
 	docker push metlo/backend:latest
 	docker push metlo/frontend:latest
 	docker push metlo/jobrunner:latest
-	docker push metlo/suricata-daemon:latest
+	docker push metlo/agent:latest

deploy/metlo-daemon-agent/Dockerfile

@@ -0,0 +1,20 @@
+FROM --platform=linux/amd64 golang:alpine3.17 AS builder
+
+RUN apk update
+RUN apk add libpcap libpcap-dev gcc g++
+
+WORKDIR /app
+
+COPY ../../ingestors/govxlan/ govxlan
+RUN cd govxlan && go build -o metlo-pcap
+RUN mv govxlan/metlo-pcap metlo-pcap
+
+FROM --platform=linux/amd64 alpine:3.17.0
+
+RUN apk update
+RUN apk add libpcap-dev libpcap
+
+WORKDIR /app
+COPY --from=builder /app/metlo-pcap ./metlo-pcap
+
+ENTRYPOINT ["/app/metlo-pcap"]

ingestors/govxlan/metlo-pcap.go

@@ -3,8 +3,10 @@ package main
 import (
 	"fmt"
 	"log"
+	"net"
 	"os"
 	"strconv"
+	"strings"
 
 	"github.com/joho/godotenv"
 	"github.com/metlo-labs/metlo/ingestors/govxlan/metloapi"
@@ -117,6 +119,19 @@ func main() {
 			if envInterface != "" {
 				args.captureInterface = envInterface
 			} else {
+				ifaces, err := net.Interfaces()
+				if err != nil {
+					log.Println(err)
+				}
+				for _, i := range ifaces {
+					if strings.HasPrefix(i.Name, "eth") || strings.HasPrefix(i.Name, "ens") {
+						log.Printf("Found match on interface %s which matches expected pattern. Binding to it", i.Name)
+						args.captureInterface = i.Name
+						break
+					}
+				}
+			}
+			if args.captureInterface == "" {
 				log.Fatalln("Packet capture in live mode must provide an interface")
 			}
 		}

ingestors/kubernetes/metlo-daemonset.yaml

@@ -18,8 +18,8 @@ spec:
         - key: node-role.kubernetes.io/master
           effect: NoSchedule
       containers:
-        - name: suricata-daemon
-          image: metlo/suricata-daemon
+        - name: metlo-agent
+          image: metlo/agent
           resources:
             requests:
               ephemeral-storage: "32Mi"
@@ -31,7 +31,7 @@ spec:
             - mountPath: /tmp
               name: socket-volume
           env:
-            - name: METLO_ADDR
+            - name: METLO_HOST
               value: http://<METLO_HOST_URL>:8081
             - name: METLO_KEY
               value: <YOUR_METLO_API_KEY>

ingestors/kubernetes/metlo-sidecar.yaml

@@ -12,7 +12,7 @@ spec:
     - "-text=Hello World! This is a Metlo Kubernetes with kind App"
   # Metlo Sidecar
   - name: metlo-sidecar
-    image: metlo/suricata-daemon
+    image: metlo/agent
     resources:
       requests:
         ephemeral-storage: "32Mi"
@@ -24,7 +24,7 @@ spec:
       - mountPath: /tmp
         name: socket-volume
     env:
-      - name: METLO_ADDR
+      - name: METLO_HOST
         value: http://<METLO_HOST_URL>:8081
       - name: METLO_KEY
         value: <YOUR_METLO_API_KEY>

manage-deployment.py

@@ -15,7 +15,7 @@
 LICENSE_PATH = os.path.join(METLO_DIR, "LICENSE_KEY")
 FILES_TO_PULL = ["docker-compose.yaml", "init.sql", "metlo-config.yaml"]
 UPDATE_FILES_TO_PULL = ["docker-compose.yaml", "init.sql"]
-IMAGES = ["backend", "frontend", "jobrunner", "suricata-daemon"]
+IMAGES = ["backend", "frontend", "jobrunner"]
 
 
 def get_file(file_name):