Requirements

Before Dagda usage, you must have installed the next requirements:

• Python 3.8.X or later
• MongoDB 3.6 or later
• Docker
• Pip3
  • PyMongo
  • Requests
  • Python-dateutil
  • Joblib
  • Docker
  • Flask
  • Flask-cors
  • PyYAML
  • Defusedxml
  • Waitress

The requirements can be installed with pip:

    sudo pip3 install -r requirements.txt

Installation of Docker

You must have installed Docker for using Dagda. If you need instructions for Docker installation, see the How-to install Docker page.

In order to avoid having to use sudo when you use the docker command, create a Unix group called docker and add users to it. When the docker daemon starts, it makes the ownership of the Unix socket read/writable by the docker group.

Installation of MongoDB

You must have installed MongoDB 3.6 or later for using Dagda because in MongoDB are stored both the vulnerabilities/exploits and the analysis results.

If you need instructions for MongoDB installation, see the How-to install MongoDB Community Edition page.

You can also run MongoDB using docker:

    docker pull mongo
    docker run -d -p 27017:27017 mongo

Installation of kernel headers in the host OS

You must have installed the kernel headers in the host OS because Dagda is integrated with Falco for monitoring runtime docker containers to detect anomalous activities.

This can usually be done on Debian-like distributions with: apt-get -y install linux-headers-$(uname -r)

Or, on RHEL-like distributions: yum -y install kernel-devel-$(uname -r)

After that, run the command /usr/lib/dkms/dkms_autoinstaller start is recommended for avoiding the next Falco error trace:

rmmod: ERROR: Module sysdig_probe is not currently loaded

Important to note: In some distributions it has been detected that Sysdig installation is required, so if you need instructions for Sysdig installation, see the How-to install Sysdig for Linux page.