Specify minimum Software requirements

[AlyaGomaa]

• Run Slips with RPI 5
  • Docker or natively?
  • build the slips docker image in rpi?
  • emulation? how slow is it?
  • decide whether benchmarks should be done using emulation or done once the ready-to-use ARM slips image is published
• Note what is not working
• test iptables
• Note if ML modules are working

[AlyaGomaa]

Running slips in docker in rpi [using emulation]

• https://docs.docker.com/engine/install/debian/ [careful which rpi arch ure using]
• Then https://docs.docker.com/engine/install/linux-postinstall/
• Then https://docs.docker.com/engine/logging/drivers/json-file/
• Then restart docker
  • sudo systemctl enable docker.service
  • sudo systemctl enable containerd.service
• Enable emulation:
  • docker run --privileged --rm tonistiigi/binfmt --install amd64
  • to confirm that it's working
    • docker run --rm --platform linux/amd64 alpine uname -a
    • should print: ... x86_64 Linux
• docker run -it --rm -d --platform linux/amd64 stratosphereips/slips
• ./slips.py -e 1 -f dataset/test8-malicious.pcap
  (fails with "failed to map segment from shared object" error)

[AlyaGomaa]

Running Slips natively: slips uses python3.10, rpi5's bookworm come with 3.11

• Ubuntu has deadsnake’s PPA, which allows us to install multiple Python versions on an Ubuntu machine. Although we can install it on our Debian 12 machine using the same Deadsnake’s PPA with a little modification, it is not recommended. So, to install another version of Python 3 on a Debian 12 system, we need to install it from the source. We will show you how to install it. https://linuxhostsupport.com/blog/how-to-install-python-on-debian-12/
• Had to compile python3.10 https://www.python.org/downloads/release/python-31016/ and set it as default
  working fine on files and interface

[AlyaGomaa]

The goal of this trial is to be able to run slips on docker in rpi without emulation

building and publishing slips image for ARM

git clone --recurse-submodules --remote-submodules https://github.com/stratosphereips/StratosphereLinuxIPS -j4 slips && cd slips
docker buildx create --name slips_builder_by_alya
docker buildx use slips_builder_by_alya
docker buildx inspect --bootstrap      
# Enabling the containerd image store allows Docker to natively support multi-platform images
export BUILDKIT_CONTAINERD=1
docker buildx build --platform linux/amd64,linux/arm64 -t stratosphereips/slips:latest -f docker/Dockerfile --push .