如何在 Alpine 容器中安装 Zed Attack Proxy

Question

I have this Dockerfile which is an alpine image and I need to install zaproxy , I tried RUN apk add zaproxy but it gives the following error:

ERROR: unsatisfiable constraints:

This is the Dockerfile :

FROM docker:18.09

RUN apk update

RUN wget https://releases.hashicorp.com/terraform/0.12.21/terraform_0.12.21_linux_amd64.zip
RUN unzip terraform_0.12.21_linux_amd64.zip && rm terraform_0.12.21_linux_amd64.zip
RUN mv terraform /usr/bin/terraform

RUN apk add zaproxy

Is there a way I can download the binary and put it somewhere without using apk package manager?

Answer 1

We have a variety of official ZAP ones as per https://www.zaproxy.org/docs/docker/about/ , the stable Docker file is https://github.com/zaproxy/zaproxy/blob/main/docker/Dockerfile-stable

Answer 2

The official "bare" image uses alpine, check out the details here: https://github.com/zaproxy/zaproxy/blob/main/docker/Dockerfile-bare

In particular to specifically answer your question:

Is there a way I can download the binary and put it somewhere without using apk package manager?

# Download and expand the latest stable release 
RUN curl -s https://raw.githubusercontent.com/zaproxy/zap-admin/master/ZapVersions.xml | xmlstarlet sel -t -v //url |grep -i Linux | wget --content-disposition -i - -O - | tar zxv && \
    mv ZAP*/* . &&  \
    rm -R ZAP* 

As for actual use:

• Getting Started Guide
• CLI Details
• API/Automation Docs