Dockerfile

FROM pwn.red/jail

ENV JAIL_TIME=60
ENV JAIL_CONNS_PER_IP=10
ENV JAIL_PORT=4444
ENV JAIL_SYSCALLS=accept,accept4,access,adjtimex,alarm,arch_prctl,arm_fadvise64_64,arm_sync_file_range,bind,breakpoint,brk,cacheflush,capget,capset,chdir,chmod,chown,chown32,clock_adjtime,clock_adjtime64,clock_getres,clock_getres_time64,clock_gettime,clock_gettime64,clock_nanosleep,clock_nanosleep_time64,clone,close,close_range,connect,copy_file_range,creat,dup,dup2,dup3,epoll_create,epoll_create1,epoll_ctl,epoll_ctl_old,epoll_pwait,epoll_pwait2,epoll_wait,epoll_wait_old,eventfd,eventfd2,execve,execveat,exit,exit_group,faccessat,faccessat2,fadvise64,fadvise64_64,fallocate,fanotify_mark,fchdir,fchmod,fchmodat,fchown,fchown32,fchownat,fcntl,fcntl64,fdatasync,fgetxattr,flistxattr,flock,fork,fremovexattr,fsetxattr,fstat,fstat64,fstatat64,fstatfs,fstatfs64,fsync,ftruncate,ftruncate64,futex,futex_time64,futex_waitv,futimesat,getcpu,getcwd,getdents,getdents64,getegid,getegid32,geteuid,geteuid32,getgid,getgid32,getgroups,getgroups32,getitimer,getpeername,getpgid,getpgrp,getpid,getppid,getpriority,getrandom,getresgid,getresgid32,getresuid,getresuid32,getrlimit,get_robust_list,getrusage,getsid,getsockname,getsockopt,get_thread_area,gettid,gettimeofday,getuid,getuid32,getxattr,inotify_add_watch,inotify_init,inotify_init1,inotify_rm_watch,io_cancel,ioctl,io_destroy,io_getevents,io_pgetevents,io_pgetevents_time64,ioprio_get,ioprio_set,io_setup,io_submit,io_uring_enter,io_uring_register,io_uring_setup,ipc,kill,lchown,lchown32,lgetxattr,link,linkat,listen,listxattr,llistxattr,_llseek,lremovexattr,lseek,lsetxattr,lstat,lstat64,madvise,membarrier,memfd_create,memfd_secret,mincore,mkdir,mkdirat,mknod,mknodat,mlock,mlock2,mlockall,mmap,mmap2,modify_ldt,mount,mprotect,mq_getsetattr,mq_notify,mq_open,mq_timedreceive,mq_timedreceive_time64,mq_timedsend,mq_timedsend_time64,mq_unlink,mremap,msgctl,msgget,msgrcv,msgsnd,msync,munlock,munlockall,munmap,name_to_handle_at,nanosleep,newfstatat,_newselect,open,openat,openat2,pause,pidfd_open,pidfd_send_signal,pipe,pipe2,pivot_root,pkey_alloc,pkey_free,pkey_mprotect,poll,ppoll,ppoll_time64,prctl,pread64,preadv,preadv2,prlimit64,process_mrelease,pselect6,pselect6_time64,pwrite64,pwritev,pwritev2,read,readahead,readlink,readlinkat,readv,recv,recvfrom,recvmmsg,recvmmsg_time64,recvmsg,remap_file_pages,removexattr,rename,renameat,renameat2,restart_syscall,rmdir,rseq,rt_sigaction,rt_sigpending,rt_sigprocmask,rt_sigqueueinfo,rt_sigreturn,rt_sigsuspend,rt_sigtimedwait,rt_sigtimedwait_time64,rt_tgsigqueueinfo,sched_getaffinity,sched_getattr,sched_getparam,sched_get_priority_max,sched_get_priority_min,sched_getscheduler,sched_rr_get_interval,sched_rr_get_interval_time64,sched_setaffinity,sched_setattr,sched_setparam,sched_setscheduler,sched_yield,seccomp,select,semctl,semget,semop,semtimedop,semtimedop_time64,send,sendfile,sendfile64,sendmmsg,sendmsg,sendto,setfsgid,setfsgid32,setfsuid,setfsuid32,setgid,setgid32,setgroups,setgroups32,sethostname,setitimer,setpgid,setpriority,setregid,setregid32,setresgid,setresgid32,setresuid,setresuid32,setreuid,setreuid32,setrlimit,set_robust_list,setsid,setsockopt,set_thread_area,set_tid_address,set_tls,setuid,setuid32,setxattr,shmat,shmctl,shmdt,shmget,shutdown,sigaltstack,signalfd,signalfd4,sigprocmask,sigreturn,socket,socketcall,socketpair,splice,stat,stat64,statfs,statfs64,statx,symlink,symlinkat,sync,sync_file_range,sync_file_range2,syncfs,sysinfo,tee,tgkill,time,timer_create,timer_delete,timer_getoverrun,timer_gettime,timer_gettime64,timer_settime,timer_settime64,timerfd_create,timerfd_gettime,timerfd_gettime64,timerfd_settime,timerfd_settime64,times,tkill,truncate,truncate64,ugetrlimit,umask,umount2,uname,unlink,unlinkat,utime,utimensat,utimensat_time64,utimes,vfork,vmsplice,wait4,waitid,waitpid,write,writev

COPY --from=ubuntu / /srv

COPY bookshelf /srv/app/run
COPY flag.txt /srv/app/flag.txt