ReaperC2/Dockerfile at main · BuildAndDestroy/ReaperC2 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
# syntax=docker/dockerfile:1.7
# Compile inside Docker. Prefer a host-prepared vendor/ tree (`make vendor`) for offline
# builds; if vendor/ is missing (typical CI), go mod download runs during the image build.
# On Apple Silicon, prefer `make build` (cross-compiles on the host, then Dockerfile.pack).
#
# Runtime stays on golang so Scythe.embedded can `go build` at request time, but we only
# ship the binary + Scythe sources + Operator AI skill files (not the full vendor/ source tree).
FROM golang:1.25.13-bookworm AS builder

ARG TARGETOS=linux
ARG TARGETARCH
ARG SCYTHE_GIT_REF=main
ARG SCYTHE_REPO=https://github.com/BuildAndDestroy/Scythe.git

ENV CGO_ENABLED=0 \
    GOTELEMETRY=off

WORKDIR /src

RUN apt-get update \
  && apt-get install -y --no-install-recommends git ca-certificates \
  && rm -rf /var/lib/apt/lists/*

COPY go.mod go.sum ./
COPY . .

RUN set -eux; \
  if [ ! -f third_party/Scythe/go.mod ]; then \
    mkdir -p third_party; \
    rm -rf third_party/Scythe; \
    git clone --depth 1 --branch "${SCYTHE_GIT_REF}" "${SCYTHE_REPO}" third_party/Scythe; \
  fi; \
  test -f third_party/Scythe/go.mod

WORKDIR /src/cmd
RUN --mount=type=cache,target=/root/.cache/go-build \
    --mount=type=cache,target=/go/pkg/mod \
    set -eux; \
    if [ -d /src/vendor ] && [ -f /src/vendor/modules.txt ]; then \
      GOOS="${TARGETOS}" GOARCH="${TARGETARCH}" \
        go build -mod=vendor -trimpath -ldflags="-s -w" -o /out/ReaperC2 .; \
    else \
      (cd /src && go mod download); \
      GOOS="${TARGETOS}" GOARCH="${TARGETARCH}" \
        go build -mod=mod -trimpath -ldflags="-s -w" -o /out/ReaperC2 .; \
    fi

FROM golang:1.25.13-bookworm

# Refresh OS packages to pick up Debian security updates in the golang base image.
RUN apt-get update \
  && apt-get upgrade -y --no-install-recommends \
  && rm -rf /var/lib/apt/lists/*

WORKDIR /root

COPY --from=builder /out/ReaperC2 /root/cmd/ReaperC2
COPY --from=builder /src/third_party/Scythe /root/third_party/Scythe
COPY --from=builder /src/SKILLS.md /root/SKILLS.md
COPY --from=builder /src/.cursor/skills/reaper-red-team-operator /root/.cursor/skills/reaper-red-team-operator

ARG DEPLOY_ENV=ONPREM
ENV DEPLOY_ENV=${DEPLOY_ENV} \
    REAPERC2_ROOT=/root

EXPOSE 8080 8443
ENTRYPOINT ["/root/cmd/ReaperC2"]