carbonetes/lite-carbonetes-engine

!Carbonetes

Carbonetes Lite引擎 - Carbonetes Lite应用的后端API服务

镜像概述

Carbonetes Lite引擎是Carbonetes Lite应用的核心后端服务，旨在集成Jacked、Diggity、BrainIaC等开源工具，帮助用户简化工作流、提升生产力、加强团队协作，并实现容器漏洞扫描、敏感信息保护与合规检查，保障系统安全。

核心功能

工具集成

• https://github.com/carbonetes/jacked
• https://github.com/carbonetes/diggity
• https://github.com/carbonetes/brainiac

主要功能

• 许可证管理
• 容器Registry管理
• 策略配置
• 仪表盘监控
• 通知提醒

使用场景

1. 企业内部容器镜像的漏洞扫描与安全评估
2. 开发团队协作中的合规检查与敏感信息防护
3. 容器化应用的工作流优化与生产力提升
4. 系统安全状态的实时监控与告警

配置说明

前置条件

确保系统已安装以下软件：

• Docker：https://docs.docker.com/get-docker/
• Docker Compose：https://docs.docker.com/compose/install/

部署示例

1. 创建docker-compose.yaml文件
2. 复制以下配置到文件中：

yaml
version: '3.8'
services:
  db:
    image: postgres:alpine3.17
    volumes:
      - "/Users/Shared/postgresql/data/db:/var/lib/postgresql/data"
    ports:
      - "5432:5432"
    environment:
      - POSTGRES_USER=username
      - POSTGRES_PASSWORD=password
      - POSTGRES_DB=lite
    healthcheck:
        test: ["CMD", "pg_isready", "-d", "lite", "-U", "username"]
        interval: 5s
        timeout: 10s
        retries: 5
    networks:
      - internal  
  carbonetes-engine:
    image: carbonetes/lite-carbonetes-engine
    restart: always
    depends_on:
      db:
        condition: service_healthy
    environment:
      - PORT=3001 # HTTPS使用8443
      - HOST=localhost
      - USERNAME=username
      - PASSWORD=password
      - DBNAME=lite
      - DBPORT=5432
      - DBHOST=db
      - DEBUG=true
      - DB_LOG=false
    ports:
      - "3001:3001"
      # - "8443:8443"
    healthcheck:
      # HTTPS时取消注释
      # test: ["CMD", "wget", "--no-verbose","--tries=1", "--spider", "--no-check-certificate", "https://host.docker.internal:8443/healthcheck"]
      test: ["CMD", "wget", "--no-verbose","--tries=1", "--spider", "http://host.docker.internal:3001/healthcheck"]
      interval: 5s
      timeout: 10s
      retries: 5  
    networks:
      - internal 
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /Users/Shared/Carbonetes-lite/brainiac:/app/brainiac # 替换为实际路径
      # HTTPS时取消注释并绑定证书和私钥
      # - type: bind
      #   source: ./certificate.pem
      #   target: /tls/certificate.pem
      # - type: bind
      #   source: ./private-key.pem
      #   target: /tls/private-key.pem  
  web:
    image: carbonetes/lite-web
    ports:
    - "80:80"
    restart: always
    depends_on:
      carbonetes-engine:
        condition: service_healthy
    networks:
    - internal
networks:
  internal:
    driver: bridge          

3. （可选）修改配置参数（如卷路径、环境变量）以适配需求
4. 运行命令启动服务：docker compose up 或 docker-compose up
5. 服务启动后，访问 http://localhost 进入应用页面