{"id":2131,"date":"2016-08-17T21:30:00","date_gmt":"2016-08-17T20:30:00","guid":{"rendered":"https:\/\/ulrichard.ch\/blog\/?p=2131"},"modified":"2016-08-17T21:30:00","modified_gmt":"2016-08-17T20:30:00","slug":"running-hostile-software-in-a-container","status":"publish","type":"post","link":"https:\/\/ulrichard.ch\/blog\/?p=2131","title":{"rendered":"Running hostile software in a container"},"content":{"rendered":"

Remember Skype, the once popular phone software? I used it a lot when we were traveling in South America, and international calls were insanely expensive. But I stopped using it when it was acquired by Microsoft, and they switched from a P2P model to centralized servers. From what I could observe, it gradually worsened from there, and I really thought I wouldn’t have to use it ever again. That was until somebody decided that we had to use Skype for Business instead of XMPP at work. There are a plethora of better alternatives. The one I use the most these days is Tox<\/a>.<\/p>\n

I use the Windows Workstation only for things that I can’t do on Linux. There is not much that falls into this category, besides VisualStudio compiling projects that involve MFC. There is Skype<\/a> for Linux, but there is no official Skype for Business for Linux. So for a moment it looked like the Windows machine got a second task. But running an obfuscated<\/a> malicious<\/a> binary blob from Microsoft with known backdoors<\/a>, that is online all the time on an operating system<\/a> that can not be secured<\/a> makes me uneasy. So I looked for a way to run it securely on Linux. The first thing I found was an open source implementation of the reverse engineered proprietary protocol as a plugin for Pidgin. That sounded good, but it didn’t work unfortunately. The second option was a closed source clone from tel.red<\/a>. They provide their own apt repository with regular updates. That’s quite good actually, if you don’t care about closed source software, and the security of your device and data in general.<\/p>\n

I learned about docker a while back, but only used it marginally so far. This was the first real use I had for it, so I started learning more about it. Copying and adapting a docker file is a lot easier than the articles I read so far made me believe. I found a couple of sites<\/a> about<\/a> packing<\/a> Skype<\/a> into<\/a> a docker container, but none for Skype for Business. So I took one of the former ones<\/a> and adapted it. To use my container, just follow these easy steps:<\/p>\n

git clone https:\/\/github.com:ulrichard\/docker-skype-business\ncd docker-skype-business\nsudo docker build -t skype .\nsudo docker run -d -p 55555:22 --name skype_container<\/code> skype\nssh-copy-id -p 55555 docker@localhost\nssh -X -p 55555 docker@localhost sky<\/pre>\n
The password for ssh-copy-id is “docker”.<\/p>\n
Then log into sky with your credentials. You can do this every time, or you can store a configured copy of the container as follows:<\/p>\n
docker commit skype_container skype_business<\/code><\/p>\n
The next time, you just run it with:<\/p>\n
sudo docker run -d -p 55555:22 skype_business<\/code>\nssh -X -p 55555 docker@localhost sky<\/pre>\n
I left some pulseaudio stuff from the original container at least in the README file. I don’t intend to use it for anything but receiving chat messages. But if you want to, feel free to experiment and report back.<\/p>\n","protected":false},"excerpt":{"rendered":"
Remember Skype, the once popular phone software? I used it a lot when we were traveling in South America, and international calls were insanely expensive. But I stopped using it when it was acquired by Microsoft, and they switched from a P2P model to centralized servers. From what I could observe, it gradually worsened from […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,1,10],"tags":[204,247],"class_list":["post-2131","post","type-post","status-publish","format-standard","hentry","category-software","category-uncategorized","category-work","tag-skype","tag-windows"],"_links":{"self":[{"href":"https:\/\/ulrichard.ch\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2131","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ulrichard.ch\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ulrichard.ch\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ulrichard.ch\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ulrichard.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2131"}],"version-history":[{"count":0,"href":"https:\/\/ulrichard.ch\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2131\/revisions"}],"wp:attachment":[{"href":"https:\/\/ulrichard.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2131"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ulrichard.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2131"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ulrichard.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}