YaraFlux MCP Server

# Stage 0: Python base image FROM python:3.13-slim AS base # Build arguments ARG USER=yaraflux ARG UID=10001 # Install system dependencies RUN apt-get update && apt-get install -y --no-install-recommends \ gcc \ libc6-dev \ python3-dev \ libssl-dev \ yara \ libmagic-dev \ libjansson-dev \ curl \ && rm -rf /var/lib/apt/lists/* # Create non-root user RUN groupadd -g ${UID} ${USER} && \ useradd -u ${UID} -g ${USER} -s /bin/bash -m ${USER} && \ mkdir -p /app /app/data/rules/community /app/data/rules/custom /app/data/samples /app/data/results && \ chown -R ${USER}:${USER} /app # Set environment variables ENV PYTHONUNBUFFERED=1 \ PYTHONDONTWRITEBYTECODE=1 \ PYTHONPATH=/app \ DEBUG=true # Stage 1: Builder stage FROM base AS builder # Set working directory WORKDIR /app # Copy requirements file COPY requirements.txt /app/ # Install dependencies RUN pip install --no-cache-dir -U pip setuptools wheel && \ pip install --no-cache-dir -r requirements.txt # Stage 2: Test stage FROM builder AS test COPY --from=builder /usr/local/bin /usr/local/bin # Install uv RUN curl -LsSf https://astral.sh/uv/install.sh | sh && \ mv /root/.local/bin/uv /usr/local/bin/uv # Install test dependencies using uv COPY requirements.txt setup.py pyproject.toml README.md /app/ COPY src/yaraflux_mcp_server /app/src/yaraflux_mcp_server RUN uv venv && \ uv pip install -e ".[dev]" \ && uv pip install -e ".[test]" \ && uv pip install PyJWT coverage black pylint mypy pytest pytest-cov pytest-mock # Copy test files and configs COPY tests/ /app/tests/ COPY .coveragerc /app/ COPY .pylintrc /app/ COPY mypy.ini /app/ COPY pytest.ini /app/ ENTRYPOINT ["bash"] # Stage 3: Production stage FROM base AS production # Build arguments for metadata ARG BUILD_DATE ARG VERSION=1.0.0 # Add metadata LABEL org.opencontainers.image.created="${BUILD_DATE}" \ org.opencontainers.image.authors="wyatt@threatflux.ai" \ org.opencontainers.image.url="https://github.com/ThreatFlux/YaraFlux" \ org.opencontainers.image.documentation="https://github.com/ThreatFlux/YaraFlux" \ org.opencontainers.image.source="https://github.com/ThreatFlux/YaraFlux" \ org.opencontainers.image.version="${VERSION}" \ org.opencontainers.image.vendor="ThreatFlux" \ org.opencontainers.image.title="yaraflux-mcp-server" \ org.opencontainers.image.description="YaraFlux MCP Server for Claude Desktop integration" # Set working directory WORKDIR /app # Copy dependencies from builder COPY --from=builder /usr/local/lib/python3.13/site-packages /usr/local/lib/python3.13/site-packages COPY --from=builder /usr/local/bin /usr/local/bin # Copy application code COPY --chown=${USER}:${USER} src/yaraflux_mcp_server /app/yaraflux_mcp_server # Copy entrypoint script COPY entrypoint.sh /app/ RUN chmod +x /app/entrypoint.sh # Switch to non-root user USER ${USER} # Health check HEALTHCHECK --interval=5m --timeout=3s \ CMD python -c "import yaraflux_mcp_server; print('healthy')" || exit 1 # Run the server ENTRYPOINT ["/app/entrypoint.sh"] CMD ["--transport", "stdio"]