Issue with set up Zap running in Docker

[Yitian Peng]

Hi,

I'm trying to setup zap running in docker based on this article.
https://blog.mozilla.org/webqa/2016/05/11/docker-owasp-zap-part-one/

I have zap running successfully in headless mode in docker with:

docker run -u zap -p 8090:8090 -d owasp/zap2docker-stable zap.sh -daemon -port 8090 -host 0.0.0.0 -config api.disablekey=true


But when I try to execute scans in command line, it gives me the following:

IOError: [Errno socket error] [Errno 111] Connection refused


I also tried to ran zap-cli only on command line and it gives me:

pkg_resources.DistributionNotFound: The 'python-owasp-zap-v2.4==0.0.8' distribution was not found and is required by zapcli

Even though "python-owasp-zap-v2.4-0.0.8" and "...0.0.9" are both in the %PATH%.
I wonder if any of you have encountered the similar errors before.

Thanks



[Grunny]

Hi,

Unfortunately, it looks like I released the update for zap-cli to support ZAP 2.6.0 (https://github.com/Grunny/zap-cli/pull/22 ) a few hours after the new stable docker image was created following the 2.6.0 announcement.

As a quick fix, if you run pip install -U zapcli inside the running container to upgrade the package, you should then be able to run zap-cli in the container. :)

Simon: Is it possible to regenerate the stable docker image to include the latest version of zap-cli?

Cheers,

grunny

--
You received this message because you are subscribed to the Google Groups "OWASP ZAP User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/74449f1f-98ec-4544-bf2d-5e1e749fddde%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Simon Bennetts]

Yes, regenerating it now :)

Cheers,

Simon

[psiinon]

I've pushed a new version of the stable image - Grunny can you check that this looks good for zapcli?

Many thanks,

Simon

To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/97830dd7-ab2e-438b-908a-dfde73aad52a%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--

OWASP ZAP Project leader

[Grunny]

Thanks, Simon! I've tested the image and all seems to be working. :)

Cheers,

grunny

To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/CAORxfg6Sfw7bjF2-sDpQWxW_24x_Pj3WpNa6yM3t5OPh4zMKfA%40mail.gmail.com.