Dockerfile

################################################################################
# PLATFORM #
################################################################################
FROM ubuntu:24.04 AS platform
ARG http_proxy
ARG https_proxy

ENV http_proxy=$http_proxy
ENV https_proxy=$https_proxy
RUN echo "export http_proxy=$http_proxy" >> /etc/environment
RUN echo "export https_proxy=$https_proxy" >> /etc/environment

ENV DEBIAN_FRONTEND=noninteractive
RUN dpkg --add-architecture i386
RUN apt-get update && \
 apt-get install -y \
 bc \
 bison \
 bzip2 \
 cmake \
 cpio \
 flex \
 g++ \
 g++-aarch64-linux-gnu \
 g++-arm-linux-gnueabihf \
 g++-i686-linux-gnu \
 gcc \
 gcc-aarch64-linux-gnu \
 gcc-arm-linux-gnueabihf \
 gcc-i686-linux-gnu \
 gawk \
 gcc \
 git \
 git \
 less \
 libc6-dev:i386 \
 libelf-dev \
 libgcc-12-dev:i386 \
 libssl-dev \
 m4 \
 make \
 patch \
 perl \
 python3-dev \
 python3-pip \
 qemu-system \
 qemu-system-arm \
 texinfo \
 vim \
 wget \
 xz-utils

RUN wget \
 -O /tmp/node.sh \
 https://deb.nodesource.com/setup_20.x
RUN bash /tmp/node.sh
RUN apt-get install -y nodejs

################################################################################
# KERNEL-SOURCE #
################################################################################
FROM platform AS kernel-source
WORKDIR /root/
RUN wget https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.15.2.tar.xz

################################################################################
# KERNEL-ARM64 #
################################################################################
FROM platform AS kernel-arm64
WORKDIR /root/
COPY --from=kernel-source /root/linux-6.15.2.tar.xz /root/linux-6.15.2.tar.xz
RUN tar xf linux-6.15.2.tar.xz && \
 cd /root/linux-6.15.2 && \
 mkdir build && \
 ARCH=arm64 make O=/root/linux-6.15.2/build/ defconfig && \
 echo "CONFIG_COMPAT=y" >> /root/linux-6.15.2/build/.config && \
 cd /root/linux-6.15.2/build/ && \
 ARCH=arm64 \
 CROSS_COMPILE=aarch64-linux-gnu- \
 CFLAGS="-march=armv8-a" \
 make \
 -j8 \
 Image.gz && \
 cp /root/linux-6.15.2/build/arch/arm64/boot/Image.gz /root/zImage-arm64 \
 && rm -rf /root/linux-6.15.2

################################################################################
# KERNEL-ARM64BE #
################################################################################
FROM platform AS kernel-arm64be
COPY --from=ghcr.io/frida/x-tools-linux-be-target /root/Image.gz /root/zImage-arm64be

################################################################################
# KERNEL-x64 #
################################################################################
FROM platform AS kernel-x64
WORKDIR /root/
COPY --from=kernel-source /root/linux-6.15.2.tar.xz /root/linux-6.15.2.tar.xz
RUN tar xf linux-6.15.2.tar.xz && \
 cd /root/linux-6.15.2 && \
 mkdir build && \
 make O=/root/linux-6.15.2/build/ defconfig && \
 cd /root/linux-6.15.2/build/ && \
 make \
 -j8 \
 bzImage && \
 cp /root/linux-6.15.2/build/arch/x86_64/boot/bzImage /root/bzImage-x64 \
 && rm -rf /root/linux-6.15.2

################################################################################
# BUSYBOX SOURCE #
################################################################################
FROM platform AS busybox-source
RUN wget \
 -O /tmp/busybox-1.36.1.tar.bz2 \
 https://busybox.net/downloads/busybox-1.36.1.tar.bz2

################################################################################
# BUSYBOX-ARM64 #
################################################################################
FROM platform AS busybox-arm64
COPY --from=busybox-source /tmp/busybox-1.36.1.tar.bz2 /tmp/busybox-1.36.1.tar.bz2
RUN tar -C /root/ -j -x -v -f /tmp/busybox-1.36.1.tar.bz2 && \
 cd /root/busybox-1.36.1 && \
 mkdir /root/busybox/ && \
 make \
 O=/root/busybox/ \
 CROSS_COMPILE=aarch64-linux-gnu- \
 CFLAGS="-march=armv8-a" \
 defconfig && \
 echo "CONFIG_STATIC=y" >> /root/busybox/.config && \
 sed -i "s/CONFIG_TC=y/CONFIG_TC=n/g" /root/busybox/.config && \
 make \
 O=/root/busybox/ \
 CROSS_COMPILE=aarch64-linux-gnu- \
 CFLAGS="-march=armv8-a" \
 -j8 \
 install && \
 rm -rf /root/busybox-1.36.1

################################################################################
# BUSYBOX-x64 #
################################################################################
FROM platform AS busybox-x64
COPY --from=busybox-source /tmp/busybox-1.36.1.tar.bz2 /tmp/busybox-1.36.1.tar.bz2

RUN tar -C /root/ -j -x -v -f /tmp/busybox-1.36.1.tar.bz2 && \
 cd /root/busybox-1.36.1 && \
 mkdir /root/busybox/ && \
 make \
 O=/root/busybox/ \
 defconfig && \ 
 echo "CONFIG_STATIC=y" >> /root/busybox/.config && \
 sed -i "s/CONFIG_TC=y/CONFIG_TC=n/g" /root/busybox/.config && \
 make \
 O=/root/busybox/ \
 -j8 \
 install && \
 rm -rf /root/busybox-1.36.1

################################################################################
# INITRD-BASE #
################################################################################
FROM platform AS initrd-base
WORKDIR /root/
RUN mkdir /root/initramfs/
WORKDIR /root/initramfs/
RUN mkdir /root/initramfs/devtmpfs/
RUN mkdir -p /root/initramfs/home/share
RUN mkdir -p /root/initramfs/home/ws
RUN mkdir /root/initramfs/proc/
RUN mkdir /root/initramfs/root/
RUN mkdir /root/initramfs/sys/
RUN mkdir /root/initramfs/tmp/
RUN mkdir /root/initramfs/var/
RUN mkdir /root/initramfs/var/log/
RUN touch /root/initramfs/var/log/lastlog
COPY assets/initrd/group /root/initramfs/etc/group
COPY assets/initrd/passwd /root/initramfs/etc/passwd
COPY assets/initrd/motd /root/initramfs/etc/motd
COPY assets/initrd/.profile /root/initramfs/.profile
COPY assets/initrd/.cshellrc /root/initramfs/.cshellrc
COPY assets/initrd/entropy.c /root/entropy.c

################################################################################
# INITRD-ARM64 #
################################################################################
FROM initrd-base AS initrd-arm64
COPY --from=busybox-arm64 /root/busybox/_install/bin /root/initramfs/bin/
COPY --from=busybox-arm64 /root/busybox/_install/sbin /root/initramfs/sbin/
COPY --from=busybox-arm64 /root/busybox/_install/usr /root/initramfs/usr/
COPY --from=busybox-arm64 /root/busybox/_install/linuxrc /root/initramfs/linuxrc
RUN aarch64-linux-gnu-gcc \
 -march=armv8-a \
 -static \
 -o /root/initramfs/sbin/entropy \
 /root/entropy.c
RUN cp -av /usr/arm-linux-gnueabihf/lib/ /root/initramfs/lib
RUN cp -av /usr/aarch64-linux-gnu/lib/ /root/initramfs/lib64
RUN ln -s /lib64/ld-linux-aarch64.so.1 /root/initramfs/lib/ld-linux-aarch64.so.1
RUN wget -qO- https://github.com/frida/frida/releases/download/17.1.4/frida-inject-17.1.4-linux-arm64.xz | xz -d > /root/initramfs/bin/frida-inject-64
RUN chmod +x /root/initramfs/bin/frida-inject-64
RUN wget -qO- https://github.com/frida/frida/releases/download/17.1.4/frida-inject-17.1.4-linux-armhf.xz | xz -d > /root/initramfs/bin/frida-inject-32
RUN chmod +x /root/initramfs/bin/frida-inject-32
COPY assets/target/target.c /root/target.c
COPY assets/target/module.c /root/module.c
RUN aarch64-linux-gnu-gcc \
 -Wall \
 -Werror \
 -no-pie \
 -shared \
 -fPIC \
 -march=armv8-a \
 -o /root/initramfs/bin/module64.so \
 /root/module.c
RUN aarch64-linux-gnu-gcc \
 -g \
 -Wall \
 -Werror \
 -no-pie \
 -march=armv8-a \
 -D_GNU_SOURCE \
 -lpthread \
 -o /root/initramfs/bin/target64 \
 /root/target.c
RUN arm-linux-gnueabihf-gcc \
 -Wall \
 -Werror \
 -no-pie \
 -shared \
 -fPIC \
 -marm \
 -o /root/initramfs/bin/module32.so \
 /root/module.c
RUN arm-linux-gnueabihf-gcc \
 -g \
 -Wall \
 -Werror \
 -no-pie \
 -marm \
 -D_GNU_SOURCE \
 -lpthread \
 -o /root/initramfs/bin/target32 \
 /root/target.c 
COPY assets/cshell/test.js /root/initramfs/root/
COPY assets/initrd/init-arm64 /root/initramfs/init
RUN find . | cpio -o --format=newc -R root:root > /root/initramfs-arm64.img

################################################################################
# INITRD-ARM64BE #
################################################################################
FROM platform AS initrd-arm64be
COPY --from=ghcr.io/frida/x-tools-linux-be-target /root/initramfs.img /root/initramfs.img
COPY --from=ghcr.io/frida/x-tools-linux-armbe8 /opt/x-tools /opt/x-tools
COPY --from=ghcr.io/frida/x-tools-linux-arm64be /opt/x-tools /opt/x-tools
ENV PATH="/opt/x-tools/armeb-linux-gnueabi/bin:$PATH"
ENV PATH="/opt/x-tools/aarch64_be-linux-gnu/bin:$PATH"
RUN mkdir /root/initramfs/
WORKDIR /root/initramfs/
RUN cat /root/initramfs.img | cpio --extract
RUN mkdir -p /root/initramfs/home/ws
COPY assets/initrd/group /root/initramfs/etc/group
COPY assets/initrd/passwd /root/initramfs/etc/passwd
COPY assets/initrd/motd /root/initramfs/etc/motd
COPY assets/initrd/.profile /root/initramfs/.profile
COPY assets/initrd/.cshellrc /root/initramfs/.cshellrc
RUN wget -qO- https://github.com/frida/frida/releases/download/17.1.4/frida-inject-17.1.4-linux-arm64be.xz | xz -d > /root/initramfs/bin/frida-inject-64
RUN chmod +x /root/initramfs/bin/frida-inject-64
RUN wget -qO- https://github.com/frida/frida/releases/download/17.1.4/frida-inject-17.1.4-linux-armbe8.xz | xz -d > /root/initramfs/bin/frida-inject-32
RUN chmod +x /root/initramfs/bin/frida-inject-32
COPY assets/target/target.c /root/target.c
COPY assets/target/module.c /root/module.c
RUN aarch64_be-linux-gnu-gcc \
 -Wall \
 -Werror \
 -no-pie \
 -shared \
 -fPIC \
 -march=armv8-a \
 -o /root/initramfs/bin/module64.so \
 /root/module.c
RUN aarch64_be-linux-gnu-gcc \
 -g \
 -Wall \
 -Werror \
 -no-pie \
 -march=armv8-a \
 -D_GNU_SOURCE \
 -lpthread \
 -o /root/initramfs/bin/target64 \
 /root/target.c
RUN armeb-linux-gnueabi-gcc \
 -Wall \
 -Werror \
 -no-pie \
 -shared \
 -fPIC \
 -marm \
 -o /root/initramfs/bin/module32.so \
 /root/module.c
RUN armeb-linux-gnueabi-gcc \
 -g \
 -Wall \
 -Werror \
 -no-pie \
 -marm \
 -D_GNU_SOURCE \
 -lpthread \
 -o /root/initramfs/bin/target32 \
 /root/target.c 
COPY assets/cshell/test.js /root/initramfs/root/
COPY assets/initrd/init-arm64be /root/initramfs/init
RUN find . | cpio -o --format=newc -R root:root > /root/initramfs-arm64be.img

################################################################################
# INITRD-x64 #
################################################################################
FROM initrd-base AS initrd-x64
COPY --from=busybox-x64 /root/busybox/_install/bin /root/initramfs/bin/
COPY --from=busybox-x64 /root/busybox/_install/sbin /root/initramfs/sbin/
COPY --from=busybox-x64 /root/busybox/_install/usr /root/initramfs/usr/
COPY --from=busybox-x64 /root/busybox/_install/linuxrc /root/initramfs/linuxrc
RUN gcc \
 -static \
 -o /root/initramfs/sbin/entropy \
 /root/entropy.c
RUN mkdir /root/initramfs/lib64/
RUN cp /lib64/ld-linux-x86-64.so.2 /root/initramfs/lib64/ld-linux-x86-64.so.2
RUN cp /lib/x86_64-linux-gnu/libdl.so.2 /root/initramfs/lib64/libdl.so.2
RUN cp /lib/x86_64-linux-gnu/libm.so.6 /root/initramfs/lib64/libm.so.6
RUN cp /lib/x86_64-linux-gnu/librt.so.1 /root/initramfs/lib64/librt.so.1
RUN cp /lib/x86_64-linux-gnu/libpthread.so.0 /root/initramfs/lib64/libpthread.so.0
RUN cp /lib/x86_64-linux-gnu/libc.so.6 /root/initramfs/lib64/libc.so.6
RUN mkdir /root/initramfs/lib/
RUN cp /usr/i686-linux-gnu/lib/ld-linux.so.2 /root/initramfs/lib/ld-linux.so.2
RUN cp /usr/i686-linux-gnu/lib/libdl.so.2 /root/initramfs/lib/libdl.so.2
RUN cp /usr/i686-linux-gnu/lib/libm.so.6 /root/initramfs/lib/libm.so.6
RUN cp /usr/i686-linux-gnu/lib/librt.so.1 /root/initramfs/lib/librt.so.1
RUN cp /usr/i686-linux-gnu/lib/libpthread.so.0 /root/initramfs/lib/libpthread.so.0
RUN cp /usr/i686-linux-gnu/lib/libc.so.6 /root/initramfs/lib/libc.so.6
RUN wget -qO- https://github.com/frida/frida/releases/download/17.1.4/frida-inject-17.1.4-linux-x86_64.xz | xz -d > /root/initramfs/bin/frida-inject-64
RUN chmod +x /root/initramfs/bin/frida-inject-64
RUN wget -qO- https://github.com/frida/frida/releases/download/17.1.4/frida-inject-17.1.4-linux-x86.xz | xz -d > /root/initramfs/bin/frida-inject-32
RUN chmod +x /root/initramfs/bin/frida-inject-32
COPY assets/target/target.c /root/target.c
COPY assets/target/module.c /root/module.c
RUN gcc \
 -Wall \
 -Werror \
 -no-pie \
 -shared \
 -fPIC \
 -o /root/initramfs/bin/module64.so \
 /root/module.c
RUN gcc \
 -g \
 -Wall \
 -Werror \
 -no-pie \
 -D_GNU_SOURCE \
 -lpthread \
 -o /root/initramfs/bin/target64 \
 /root/target.c
RUN i686-linux-gnu-gcc \
 -Wall \
 -Werror \
 -no-pie \
 -shared \
 -fPIC \ 
 -o /root/initramfs/bin/module32.so \
 /root/module.c
RUN i686-linux-gnu-gcc \
 -g \
 -Wall \
 -Werror \
 -no-pie \
 -D_GNU_SOURCE \
 -lpthread \
 -o /root/initramfs/bin/target32 \
 /root/target.c 
COPY assets/cshell/test.js /root/initramfs/root/
COPY assets/initrd/init-x64 /root/initramfs/init
RUN find . | cpio -o --format=newc -R root:root > /root/initramfs-x64.img

################################################################################
# FRIDA-CSHELL #
################################################################################
FROM platform AS frida-cshell
RUN apt-get update && \
 apt-get install -y \
 nano \
 psmisc \
 picocom \
 lrzsz \
 openssh-server \
 zssh

RUN ssh-keygen -f /root/.ssh/id_rsa -N ""
RUN cp /root/.ssh/id_rsa.pub /root/.ssh/authorized_keys
ENV FRIDA_INJECT=/usr/bin/frida-inject-64

COPY --from=kernel-arm64 /root/zImage-arm64 /root/zImage-arm64
COPY --from=kernel-arm64be /root/zImage-arm64be /root/zImage-arm64be
COPY --from=kernel-x64 /root/bzImage-x64 /root/bzImage-x64
COPY --from=initrd-arm64 /root/initramfs-arm64.img /root/initramfs-arm64.img
COPY --from=initrd-arm64be /root/initramfs-arm64be.img /root/initramfs-arm64be.img
COPY --from=initrd-x64 /root/initramfs-x64.img /root/initramfs-x64.img

RUN wget -qO- https://github.com/frida/frida/releases/download/17.1.4/frida-inject-17.1.4-linux-x86_64.xz | xz -d > /usr/bin/frida-inject-64
RUN chmod +x /usr/bin/frida-inject-64
RUN wget -qO- https://github.com/frida/frida/releases/download/17.1.4/frida-inject-17.1.4-linux-x86.xz | xz -d > /usr/bin/frida-inject-32
RUN chmod +x /usr/bin/frida-inject-32

COPY --from=initrd-x64 /root/initramfs/bin/target64 /usr/bin/target64
COPY --from=initrd-x64 /root/initramfs/bin/module64.so /usr/bin/module64.so
COPY --from=initrd-x64 /root/initramfs/bin/target32 /usr/bin/target32
COPY --from=initrd-x64 /root/initramfs/bin/module32.so /usr/bin/module32.so
COPY assets/cshell/test.js /root/
COPY assets/cshell/vm-arm64 /bin/vm-arm64
COPY assets/cshell/vm-arm64be /bin/vm-arm64be
COPY assets/cshell/vm-x64 /bin/vm-x64
COPY assets/cshell/vm-pty /bin/vm-pty

RUN mkdir /home/ws/
WORKDIR /root/npm-cache
COPY package.json /root/npm-cache
COPY package-lock.json /root/npm-cache
RUN npm install --ignore-scripts --no-audit --no-save --cache .
RUN rm -rf node_modules/
RUN rm package.json package-lock.json
WORKDIR /root