curl -sSL https://get.daocloud.io/docker | sh

sudo yum remove docker \
                 docker-client \
                 docker-client-latest \
                 docker-common \
                 docker-latest \
                 docker-latest-logrotate \
                 docker-logrotate \
                 docker-engine

service iptables restart

service docker restart

FROM drupalci/php-5.5.38-apache:dev

# The first line: the base image, same as in point 1
FROM drupalci/php-5.5.38-apache:dev

# Put your name/nickname here
MAINTAINER unc1e

# Put the build date here
ENV REFRESHED_AT 2020年8月1日

# Use UTF-8 encoding
ENV LANG C.UTF-8

# First: change the package sources / update 【if necessary】
# Replace the sources (use sed here, or directly COPY a full sources.list to replace it)
RUN sed -i 's/http:\/\/archive.ubuntu.com\/ubuntu\//http:\/\/mirrors.163.com\/ubuntu\//g' /etc/apt/sources.list

# Update
RUN apt-get update -y

# Set the environment variable to non-interactive 【optional, personal preference】. Especially useful when running apt-get, because it keeps prompting the user about the current step and requiring confirmation.
# Non-interactive mode picks the default options and finishes the build as fast as possible.
# Note: the ENV command takes effect for the entire lifetime of the container, which may cause problems when you interact with the container via BASH
ENV DEBIAN_FRONTEND noninteractive

# Modify some configuration
# For replacing strings in files, use the sed command a lot
# For example: remove X-Powered-By from the PHP response headers
RUN sed -i 's/expose_php = On/expose_php = Off/' /usr/local/etc/php/php.ini

# Only then copy files
# Mounting volumes is not recommended, because the image often needs to be exported as a tar archive
# ADD automatically extracts archives, while COPY does not
ADD html.tgz /var/www

# Remaining operations (keep permissions under control)
# For example: change the owner of a file
RUN chown root:root /var/www/html/x.php

# WORKDIR: sets the working directory for the command specified by CMD.
WORKDIR /var/www/html/

# Finally handle the flag and startup items
# The standard flag format is flag{uuid format} (e.g. flag{8ba868f2-71b6-477b-bc7a-255302c881e1}
# If there are special circumstances, explain them, but the flag format must at least be flag{}; other formats are not accepted.
# By default the flag value is stored in flag.txt.
# If the flag is in a database, remember to set the length of the field holding the flag to greater than 42
# Copy flag.txt to /root/flag.txt
COPY flag.txt /root/flag.txt

# start.sh is the startup script, containing the commands to run after the container starts
COPY start.sh /root/start.sh

# Add execute permission
RUN chmod +x /root/start.sh

# ENTRYPOINT: configures the command executed when the container starts (it will not be ignored and will definitely run)
# Using ENTRYPOINT instead of CMD is recommended, because CMD is easily affected by the last RUN command
ENTRYPOINT cd /root; ./start.sh

# The exposed WEB port defaults to 80, usually just one; if there are special circumstances, state them explicitly
# One article points out: the EXPOSE instruction declares the ports the container serves at runtime. It is only a declaration — at runtime the application will not open a service on the port just because of this declaration. Source: https://www.jianshu.com/p/78f4591b7ff0
EXPOSE 80

#!/bin/bash
# Default to bash on the first line
# Sleep at least 1 second, but not too long
sleep 1

# Start the services, e.g. apache2
# The exact startup command depends on the system environment
# Typical apache2
/etc/init.d/apache2 start
# Typical nginx
# To fit most environments, tweak the nginx config
sed -i 's/listen 80 default_server;/listen 80;/' /etc/nginx/sites-enabled/default
sed -i 's/listen \[::\]:80.*;/#\0/' /etc/nginx/sites-enabled/default
nginx -c /etc/nginx/nginx.conf
/etc/init.d/nginx start
# To accommodate various docker versions, the mysql startup command is recommended as follows (except for mysqld)
find /var/lib/mysql -type f -exec touch {} \; && service mysql start

# ctf.sql is the database SQL file; import it only after mysql has started.
# If the flag is not stored in the database, put the file that holds the flag here instead (e.g. flag.php)
# The flag value in the flag file should be written as flag{xxxxxx} (this is set up for dynamic replacement)
flagfile=/var/www/html/ctf.sql
if [ -f $flagfile ]; then
#   This replaces the flag value with the value from /root/flag.txt (/root/flag.txt is where the dynamic flag gets delivered automatically)
#   flag{x*} here corresponds to flag{xxxxxx}, because sed does not support extended regex syntax
#   If the flag value in the original file is not flag{xxxxxx}, rewrite the line below yourself
    sed -i "s/flag{x*}/$(cat /root/flag.txt)/" $flagfile
#   Change the mysql root password (if mysql is used and it must be changed)
    mysqladmin -u root password "newpasswd"
#   Import the sql file into mysql (newwpasswd is just an example password)
    mysql -uroot -pnewpasswd < $flagfile
#   Delete the sql file (usually it should be deleted) / if it is not an sql file, no need to delete it here
    rm -f $flagfile
fi
/bin/bash

version: "2"# Indicates that this Docker-Compose file uses the Version 2 file format

services:

  web:
    build: .
    image: ctftraining/bytectf_2019_babyblog
    restart: always
    ports:
      - "127.0.0.1:8302:80"
    environment:
      - FLAG=flag{glzjin_wants_a_girl_firend}

FROM orsolin/docker-php-5.3-apache

LABEL Author="glzjin <i@zhaoj.in>" Blog="https://www.zhaoj.in"

COPY ./files /tmp/files

RUN mv -f /tmp/files/sources.list /etc/apt/sources.list \
    && rm -rf /var/www/html/* \
    && mv -f /tmp/files/init.sql /tmp/db.sql \
    && mv -f /tmp/files/html/* /var/www/html/ \
    && apt update \
    && echo "debconf mysql-server/root_password password root\ndebconf mysql-server/root_password_again password root" >> /tmp/mysql-passwd \
    && debconf-set-selections /tmp/mysql-passwd && apt install mysql-server -y && rm -rf /tmp/mysql-passwd \
    && mysql_install_db --user=mysql --datadir=/var/lib/mysql \
    && sh -c 'mysqld_safe &' \
    && sleep 5s \
    && mysql -e "source /tmp/db.sql;" -uroot -proot \
    && echo "magic_quotes_gpc = Off\nopen_basedir = /var/www/html/:/tmp/:/proc/\ndisable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,ini_set,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,system,exec,shell_exec,popen,proc_open,passthru,symlink,link,syslog,imap_open,dl,mail	" >> /etc/php5/apache2/php.ini && \
    touch /flag && \
    mv /tmp/files/readflag /readflag && \
    chmod 555 /readflag && \
    chmod u+s /readflag && \
    chmod 500 /flag

WORKDIR /var/www/html/

CMD echo $FLAG >> /flag && export FLAG=not_flag && FLAG=not_flag && find /var/lib/mysql -type f -exec touch {} \; && service mysql start && apache2-foreground

# docker-compose operations commands

# Start all services defined in the docker-compose.yml in the current directory
$ docker-compose up

# Start all services defined in the docker-compose.yml in the current directory and 【run in the background】
$ docker-compose up -d

# Stop all services
$ docker-compose stop

# Build the image
docker build -t web_ctf_puzzle:test1 .

# Export the tar archive
docker save web_xxx_name  > web_xxx_name.tar

$ docker run -p 6379:6379  --name="redis"  -d docker.io/redis:3-alpine

$ docker container run -p 80:80  --name="web" --link redis:aliasredis  -d  uploadtest
	-p port	
	-name the 【container】's name		
  --link link the container named redis, and give it the alias aliasredis
  -d run in the background
  uploadtest the 【image】's name	
  

172.17.0.2 redis

version: "2"
services:
  web:
    container_name: web
    image: php/5.6-fpm-alpine
    restart: always
    build:
      dockerfile: Dockerfile
    ports:
      - "80:80"
    environment:
      - FLAG=flag{Upload_Really_Good}

  redis:
    container_name: redis
    links:
     - web
    image: redis/redis:3-alpine
    restart: always
    ports:
    	- "6379:6379"

$ docker run -p 8088:80 --name="web_ctf_puzzle_docler" -d web_ctf_puzzle
# Options you may use, and their meanings:
  # -d: run the container in the background and return the container ID;
  # -P: random port mapping
  # -h: specify the container's hostname
  # --name: specify the container's name
  # -p: specify a port mapping, format: host port:container port 
  # -v: bind a volume (--volume), e.g. -v /opt/ctf/src:/var/www/html/ maps the host directory /opt/ctf/src to the container's /var/www/html/

# Enter the docker's bash shell; if bash won't start, try sh
docker exec  -it  019dfb3e357b  bash