borrougagnou/spectre-updated repository overview

⁠Updated Spectre Dockerfile (formely known as ghostbin)

This is a fork of dexafree/ghostbin Dockerfile but include recent package and security update for spectre (formely known as ghostbin)

the original ghostbin/spectre project is also forked to fix some bug with "login/password"

the project can be downloaded here: https://github.com/borrougagnou/docker-spectre-updated⁠

Run this command to launch spectre on the port 8619

docker run -it -d --name="spectre-updated" -p 8619:8619 -v /var/log/spectre-updated:/logs -v /var/data/spectre updated:/data borrougagnou/spectre-updated

⁠Migration

If you provisionned with "ghostbin" before you need to:

• rename every "ghostbin" folder by "spectre-updated" from now on, it mean if you data folder is "/var/data/ghostbin" you should rename it: "/var/data/spectre-updated"

⁠Changelog (YYYYMMDD)

⁠20250221

• Begin to rename all "ghostbin" by "spectre"/"spectre-updated"
• Dockerfile :
  • golang : 1.21.0 -> 1.24.0
  • alpine : 3.18 -> 3.21
  • Fixed the entrypoint for docker⁠
• Spectre (formely known as Ghostbin):
  • use the latest version of the spectre-updated repository

ghostbin/spectre - NPM MODULE :

• grunt : 1.6.1
• grunt-cli : 1.4.3 -> 1.5.0
• grunt-contrib-clean : 2.0.1
• grunt-contrib-concat : 2.1.0
• grunt-contrib-copy : 1.0.0
• grunt-contrib-cssmin : 5.0.0
• grunt-contrib-less : 3.0.0
• grunt-contrib-uglify : 5.2.2
• grunt-filerev : 2.3.1
• load-grunt-tasks : 5.1.0

ghostbin/spectre - GO MODULE :

• github.com/DHowett/go-xattr : v0.0.0-20181227225257-7d72f4cdfe6d
• github.com/DHowett/gotimeout : v0.0.0-20161206082608-24e8dccd7474
• github.com/golang/glog : v1.2.0 -> v1.2.4
• github.com/golang/groupcache : v0.0.0-20210331224755-41bb18bfe9da -> v0.0.0-20241129210726-2c02b8208cf8
• github.com/gorilla/mux : v1.8.1
• github.com/gorilla/securecookie : v1.1.2
• github.com/gorilla/sessions : v1.2.2 -> v1.4.0
• github.com/microcosm-cc/bluemonday : v1.0.26 -> v1.0.27
• github.com/russross/blackfriday : v1.6.0
• golang.org/x/crypto : v0.16.0 -> v0.33.0
• gopkg.in/yaml.v2 : v2.4.0

⁠20231129

Dockerfile :

• golang : 1.17.7 -> 1.21.0
• alpine : 3.15 -> 3.18
• Ghostbin/spectre :
  • use the latest version

ghostbin/spectre - NPM MODULE :

• grunt : 1.4.1 -> 1.6.1
• grunt-cli : 1.4.3
• grunt-contrib-clean : 2.0.0 -> 2.0.1
• grunt-contrib-concat : 2.0.0 -> 2.1.0
• grunt-contrib-copy : 1.0.0
• grunt-contrib-cssmin : 4.0.0 -> 5.0.0
• grunt-contrib-less : 3.0.0
• grunt-contrib-uglify : 5.0.1 -> 5.2.2
• grunt-filerev : 2.3.1
• load-grunt-tasks : 5.1.0

ghostbin/spectre - GO MODULE :

• github.com/DHowett/go-xattr : v0.0.0-20181227225257-7d72f4cdfe6d
• github.com/DHowett/gotimeout : v0.0.0-20161206082608-24e8dccd7474
• github.com/golang/glog : v1.0.0 -> v1.2.0
• github.com/golang/groupcache : v0.0.0-20210331224755-41bb18bfe9da
• github.com/gorilla/mux : v1.8.0 -> v1.8.1
• github.com/gorilla/securecookie : v1.1.1 -> v1.1.2
• github.com/gorilla/sessions : v1.2.1 -> v1.2.2
• github.com/microcosm-cc/bluemonday : v1.0.18 -> v1.0.26
• github.com/russross/blackfriday : v1.6.0
• github.com/shurcooL/sanitized_anchor_name : v1.0.0
• golang.org/x/crypto : v0.0.0-20220209195652-db638375bc3a -> v0.16.0
• gopkg.in/yaml.v2 : v2.4.0

⁠20220211

Dockerfile :

• golang : 1.8.3 -> 1.17.7
• alpine : 3.06 -> 3.15

ghostbin/spectre - NPM MODULE :

• grunt : 1.0.1 -> 1.4.1
• grunt-cli : 1.2.0 -> 1.4.3
• grunt-contrib-clean : 1.1.0 -> 2.0.0
• grunt-contrib-concat : 1.0.1 -> 2.0.0
• grunt-contrib-copy : 1.0.0
• grunt-contrib-cssmin : 2.2.1 -> 4.0.0
• grunt-contrib-less : 1.4.1 -> 3.0.0
• grunt-contrib-uglify : 3.1.0 -> 5.0.1
• grunt-filerev : 2.3.1
• grunt-usemin : 3.1.1 -> REMOVED unmaintained + critical security
• load-grunt-tasks : 3.5.2 -> 5.1.0

ghostbin/spectre - GO MODULE :

• github.com/DHowett/go-xattr : v0.0.0-20181227225257-7d72f4cdfe6d
• github.com/DHowett/gotimeout : v0.0.0-20161206082608-24e8dccd7474
• github.com/golang/glog : v0.0.0-20160126235308-23def4e6c14b -> v1.0.0
• github.com/golang/groupcache : v0.0.0-20181024230925-c65c006176ff -> v0.0.0-20210331224755-41bb18bfe9da
• github.com/gorilla/mux : v1.6.2 -> v1.8.0
• github.com/gorilla/securecookie : v1.1.1
• github.com/gorilla/sessions : v1.1.3 -> v1.2.1
• github.com/microcosm-cc/bluemonday : v1.0.2 -> v1.0.18
• github.com/russross/blackfriday : v1.5.2 -> v1.6.0
• github.com/shurcooL/sanitized_anchor_name : v1.0.0
• golang.org/x/crypto : v0.0.0-20190103213133-ff983b9c42bc -> v0.0.0-20220209195652-db638375bc3a
• gopkg.in/yaml.v2 : v2.2.2 -> v2.4.0

⁠author readme:

This is a repository I've created in order to have a Docker image for running Spectre/Ghostbin⁠ in a private server.

It allows you to run it in your own computer, internally in your company, or host it in a public server.

The Spectre/Ghostbin project⁠ is also Open Source, but due to its hard setup, I thought that creating a Dockerfile and a Docker image would be helpful for people like me who want to host it on their own hardware.

⁠Base image

The base image used for this Dockerfile is golang:1.8.3-alpine3.6:

• Golang as Spectre is written in Go, an thus is needed to compile it.
• Alpine as it provides a smaller base image, and therefore the resulting image will also be smaller.

⁠Limitations

In order for expiration, encryption and syntax highlighting to work, you need to be using Docker in a Linux system.

This is due to a difference in the internal Filesystem Docker for Linux uses: The FS driver used on Docker for macOS and Docker for Windows does not support the use of xattrs (extended attributes: saving metadata for a file in the filesystem), and Spectre relies on those attributes for saving the paste properties, such as the language, the encryption password and the expiration (if any of those is set).

So, you will need to run it on a host using Docker for Linux in order for them to work.

⁠Notes

As the master branch of the Spectre project⁠ (link to the latest master commit at the time of writing this readme) is not stable right now (it has mixed namespaces and is in the middle of a refactor), this Dockerfile uses the latest commit in the stable branch, so it will probably not be running the exact same Spectre version the production server is running.

I spoke to the author and he told me he is working in making it stable, so in the future this image should adapt to the latest version.

⁠Usage

In order to run the image, you need to know three things:

1. Ports: This image exposes the 8619 port for serving the Spectre site.
2. Logs volume: This image exposes a logs volume, so you are able to read the logs that Spectre outputs. The path inside the container will be /logs
3. Data volume: This image exposes a data volume, so you are able to access and persist things like pastes, session keys and accounts through containers (and survive restarts).

So, a way to run this container exposing all 3 things would be:

docker run -it -d --name="spectre-updated" -p 8619:8619 -v /var/log/spectre-updated:/logs -v /var/data/spectre updated:/data borrougagnou/spectre-updated

It would expose the 8619 port of the host machine, mount the logs volume at the local path /var/log/spectre-updated and mount the data volume at the local path /var/data/spectre-updated. You can adapt it to any use you need.