From 1594696dfad1cc41799a3a244e00034d5a6746ea Mon Sep 17 00:00:00 2001 From: weslambert Date: Tue, 14 Nov 2023 10:50:21 -0500 Subject: [PATCH 01/14] 0.23.11.10 --- so-strelka-filestream/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/so-strelka-filestream/Dockerfile b/so-strelka-filestream/Dockerfile index fa0c2dc5..f4ee11fb 100644 --- a/so-strelka-filestream/Dockerfile +++ b/so-strelka-filestream/Dockerfile @@ -1,6 +1,6 @@ FROM ghcr.io/security-onion-solutions/golang:alpine AS build LABEL maintainer "Security Onion Solutions, LLC" -ARG STRELKA_RELEASE_VERSION=0.23.07.10 +ARG STRELKA_RELEASE_VERSION=0.23.11.10 RUN CGO_ENABLED=0 go install github.com/target/strelka/src/go/cmd/strelka-filestream@$STRELKA_RELEASE_VERSION From 1d8fa1545fcc2e279eb60f653d2708b4933cde03 Mon Sep 17 00:00:00 2001 From: weslambert Date: Tue, 14 Nov 2023 10:50:36 -0500 Subject: [PATCH 02/14] 0.23.11.10 --- so-strelka-frontend/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/so-strelka-frontend/Dockerfile b/so-strelka-frontend/Dockerfile index adad66c7..f62bc7f8 100644 --- a/so-strelka-frontend/Dockerfile +++ b/so-strelka-frontend/Dockerfile @@ -1,6 +1,6 @@ FROM ghcr.io/security-onion-solutions/golang AS build LABEL maintainer "Security Onion Solutions, LLC" -ARG STRELKA_RELEASE_VERSION=0.23.07.10 +ARG STRELKA_RELEASE_VERSION=0.23.11.10 RUN CGO_ENABLED=0 go install github.com/target/strelka/src/go/cmd/strelka-frontend@$STRELKA_RELEASE_VERSION From a1788b590040a18966694e22996b0dc51429b9b1 Mon Sep 17 00:00:00 2001 From: weslambert Date: Tue, 14 Nov 2023 10:50:52 -0500 Subject: [PATCH 03/14] 0.23.11.10 --- so-strelka-manager/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/so-strelka-manager/Dockerfile b/so-strelka-manager/Dockerfile index 0a818b3a..97004de9 100644 --- a/so-strelka-manager/Dockerfile +++ b/so-strelka-manager/Dockerfile @@ -1,6 +1,6 @@ FROM ghcr.io/security-onion-solutions/golang AS build LABEL maintainer "Security Onion Solutions, LLC" -ARG STRELKA_RELEASE_VERSION=0.23.07.10 +ARG STRELKA_RELEASE_VERSION=0.23.11.10 RUN CGO_ENABLED=0 go install github.com/target/strelka/src/go/cmd/strelka-manager@$STRELKA_RELEASE_VERSION From c0911562548bdefd81c12650618c2ed5da84da69 Mon Sep 17 00:00:00 2001 From: weslambert Date: Tue, 14 Nov 2023 10:51:43 -0500 Subject: [PATCH 04/14] 0.23.11.10 --- so-strelka-backend/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/so-strelka-backend/Dockerfile b/so-strelka-backend/Dockerfile index 53aadb48..4ebfe14f 100644 --- a/so-strelka-backend/Dockerfile +++ b/so-strelka-backend/Dockerfile @@ -25,7 +25,7 @@ ARG EXIFTOOL_VERSION=12.52 RUN rm -f /etc/apt/apt.conf.d/docker-clean; echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' > /etc/apt/apt.conf.d/keep-cache # SO - Pin to release tag, download from GitHub, and prepare container dirs -ARG STRELKA_RELEASE_VERSION=0.23.09.12 +ARG STRELKA_RELEASE_VERSION=0.23.11.10 RUN mkdir /strelka && \ mkdir /etc/strelka && \ mkdir /tmp/strelka && \ From e3ad66cbaece229656760f4731fd33aba6888800 Mon Sep 17 00:00:00 2001 From: weslambert Date: Tue, 14 Nov 2023 14:58:00 -0500 Subject: [PATCH 05/14] Update Dockerfile --- so-strelka-backend/Dockerfile | 69 +++++++++++++++++++++-------------- 1 file changed, 42 insertions(+), 27 deletions(-) diff --git a/so-strelka-backend/Dockerfile b/so-strelka-backend/Dockerfile index 4ebfe14f..3de737a3 100644 --- a/so-strelka-backend/Dockerfile +++ b/so-strelka-backend/Dockerfile @@ -1,26 +1,30 @@ -FROM ghcr.io/security-onion-solutions/ubuntu:23.04 +FROM ghcr.io/security-onion-solutions/ubuntu:22.04 LABEL maintainer "Security Onion Solutions, LLC" ARG DEBIAN_FRONTEND=noninteractive +# Test configuration ARG CONFIG_TESTS=false -ARG USERNAME=strelka -ARG USER_UID=1001 -ARG USER_GID=$USER_UID +ARG YARA_VERSION=4.3.1 +ARG CAPA_VERSION=6.1.0 +ARG EXIFTOOL_VERSION=12.60 -ENV PYTHONUNBUFFERED 1 +# Environment variables ENV PYTHONDONTWRITEBYTECODE 1 -ENV PIP_BREAK_SYSTEM_PACKAGES 1 +ENV PYTHONFAULTHANDLER 1 +ENV PYTHONUNBUFFERED 1 -# Create the user +# User configuration +ARG USERNAME=strelka +ARG USER_UID=1001 +ARG USER_GID=$USER_UID RUN groupadd --gid $USER_GID $USERNAME \ && useradd --uid $USER_UID --gid $USER_GID --create-home --shell /bin/bash $USERNAME -ARG YARA_VERSION=4.3.0 -ARG YARA_PYTHON_VERSION=4.3.0 -ARG CAPA_VERSION=5.0.0 -ARG EXIFTOOL_VERSION=12.52 +# Set up package pinning for release (mantic 23.10, 7zip 23.01+dfsg-2) +COPY ./build/python/backend/pin.pref /etc/apt/preferences.d/pin.pref +COPY ./build/python/backend/mantic.list /etc/apt/sources.list.d/mantic.list RUN rm -f /etc/apt/apt.conf.d/docker-clean; echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' > /etc/apt/apt.conf.d/keep-cache @@ -40,9 +44,8 @@ RUN mkdir /strelka && \ rm -fr /tmp/strelka && \ chown -R ${USER_UID}:${USER_GID} /var/log/strelka/ -# Update packages -RUN apt-get -q update && \ # Install build packages +RUN apt-get -q update && \ apt-get install -q -y --no-install-recommends \ automake \ build-essential \ @@ -50,6 +53,8 @@ RUN apt-get -q update && \ curl \ gcc \ git \ + dirmngr \ + gnupg \ gpg \ libglu1-mesa \ libtool \ @@ -59,8 +64,10 @@ RUN apt-get -q update && \ python3-pip \ python3-wheel \ python-is-python3 \ - pkg-config - + pkg-config \ + supervisor \ + ncat + # Install runtime packages RUN apt-get -q update && \ apt-get install -q -y --no-install-recommends \ @@ -68,8 +75,6 @@ RUN apt-get -q update && \ antiword \ binwalk \ libarchive-dev \ - # 7z2john.pl - libcompress-raw-lzma-perl \ libfuzzy-dev \ libjansson-dev \ libmagic-dev \ @@ -83,14 +88,7 @@ RUN apt-get -q update && \ unzip \ upx \ jq && \ -# Download and compile Archive library, needed for exiftool to work best - cd /tmp/ && \ - curl -OL https://cpan.metacpan.org/authors/id/P/PH/PHRED/Archive-Zip-1.68.tar.gz && \ - tar -xzf Archive-Zip-1.68.tar.gz && \ - cd Archive-Zip-1.68/ && \ - perl Makefile.PL && \ - make && \ - make install && \ + # Download and compile exiftool cd /tmp/ && \ curl -OL https://github.com/exiftool/exiftool/archive/refs/tags/$EXIFTOOL_VERSION.tar.gz && \ @@ -159,6 +157,21 @@ RUN mkdir jtr && cd jtr && git init && git remote add origin https://github.com/ RUN pip3 install --no-cache-dir -r /strelka/requirements.txt && \ pip3 install --index-url https://lief-project.github.io/packages --trusted-host lief.quarkslab.com lief +# Set the working directory and copy the project files +WORKDIR /strelka/ +COPY pyproject.toml poetry.lock ./ + +# Use Poetry to install the project dependencies globally +# This step is after the COPY step because it is more likely to change, +# and therefore should not be included in earlier layers that can be cached. +RUN poetry config virtualenvs.create false && \ + poetry install --no-dev && \ + rm -rf /root/.cache/pypoetry + +# Copy Strelka files +COPY ./src/python/ /strelka/ +COPY ./configs/python/backend/ /etc/strelka/ + # Install Strelka RUN cd /strelka/ && \ python3 setup.py -q build && \ @@ -195,9 +208,11 @@ RUN echo '[+] Run build checks' && \ USER root -# Remove python build directory +# Remove build directories and unused files RUN cd /strelka/ && \ - rm -rf /strelka/ + rm -rf /strelka/ && \ + rm -rf /root/.cache && \ + rm -rf /tmp/* # Remove config directory (will bind mount once built) RUN rm -rf /etc/strelka/ From 138e3dfa2eb3b848fd1f9bb0f1c8c18e2a56e38d Mon Sep 17 00:00:00 2001 From: weslambert Date: Tue, 14 Nov 2023 15:01:12 -0500 Subject: [PATCH 06/14] Update Dockerfile --- so-strelka-backend/Dockerfile | 4 ---- 1 file changed, 4 deletions(-) diff --git a/so-strelka-backend/Dockerfile b/so-strelka-backend/Dockerfile index 3de737a3..c7244bda 100644 --- a/so-strelka-backend/Dockerfile +++ b/so-strelka-backend/Dockerfile @@ -168,10 +168,6 @@ RUN poetry config virtualenvs.create false && \ poetry install --no-dev && \ rm -rf /root/.cache/pypoetry -# Copy Strelka files -COPY ./src/python/ /strelka/ -COPY ./configs/python/backend/ /etc/strelka/ - # Install Strelka RUN cd /strelka/ && \ python3 setup.py -q build && \ From 52d038eb74759eca3cdde41697dd84d7edbe70e9 Mon Sep 17 00:00:00 2001 From: Wes Date: Tue, 14 Nov 2023 21:06:11 +0000 Subject: [PATCH 07/14] Remove lunar.list and add mantic.list --- so-strelka-backend/lunar.list | 2 -- so-strelka-backend/mantic.list | 2 ++ 2 files changed, 2 insertions(+), 2 deletions(-) delete mode 100644 so-strelka-backend/lunar.list create mode 100644 so-strelka-backend/mantic.list diff --git a/so-strelka-backend/lunar.list b/so-strelka-backend/lunar.list deleted file mode 100644 index baaa3ea9..00000000 --- a/so-strelka-backend/lunar.list +++ /dev/null @@ -1,2 +0,0 @@ -deb [arch=amd64] http://archive.ubuntu.com/ubuntu lunar main restricted universe multiverse -deb [arch=arm64] http://ports.ubuntu.com/ lunar main restricted universe multiverse diff --git a/so-strelka-backend/mantic.list b/so-strelka-backend/mantic.list new file mode 100644 index 00000000..1f1622e4 --- /dev/null +++ b/so-strelka-backend/mantic.list @@ -0,0 +1,2 @@ +deb [arch=amd64] http://archive.ubuntu.com/ubuntu mantic main restricted universe multiverse +deb [arch=arm64] http://ports.ubuntu.com/ mantic main restricted universe multiverse From 54343bb00ff0d994d357e9a29858b8f2b03eafa6 Mon Sep 17 00:00:00 2001 From: weslambert Date: Tue, 14 Nov 2023 16:17:10 -0500 Subject: [PATCH 08/14] Update Dockerfile --- so-strelka-backend/Dockerfile | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/so-strelka-backend/Dockerfile b/so-strelka-backend/Dockerfile index c7244bda..c510b35a 100644 --- a/so-strelka-backend/Dockerfile +++ b/so-strelka-backend/Dockerfile @@ -22,10 +22,6 @@ ARG USER_GID=$USER_UID RUN groupadd --gid $USER_GID $USERNAME \ && useradd --uid $USER_UID --gid $USER_GID --create-home --shell /bin/bash $USERNAME -# Set up package pinning for release (mantic 23.10, 7zip 23.01+dfsg-2) -COPY ./build/python/backend/pin.pref /etc/apt/preferences.d/pin.pref -COPY ./build/python/backend/mantic.list /etc/apt/sources.list.d/mantic.list - RUN rm -f /etc/apt/apt.conf.d/docker-clean; echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' > /etc/apt/apt.conf.d/keep-cache # SO - Pin to release tag, download from GitHub, and prepare container dirs @@ -37,10 +33,12 @@ RUN mkdir /strelka && \ apt -y update && \ apt install git -y && \ git clone -b $STRELKA_RELEASE_VERSION https://github.com/target/strelka /tmp/strelka && \ + cp -fr /tmp/strelka/pyproject.toml /strelka/ && \ + cp -fr /tmp/strelka/poetry.lock /strelka/ && \ cp -fr /tmp/strelka/src/python/* /strelka/ && \ cp -fr /tmp/strelka/configs/python/backend/* /etc/strelka/ && \ cp -fr /tmp/strelka/build/python/backend/pin.pref /etc/apt/preferences.d/ && \ - cp -fr /tmp/strelka/build/python/backend/lunar.list /etc/apt/sources.list.d/ && \ + cp -fr /tmp/strelka/build/python/backend/mantic.list /etc/apt/sources.list.d/ && \ rm -fr /tmp/strelka && \ chown -R ${USER_UID}:${USER_GID} /var/log/strelka/ @@ -157,9 +155,8 @@ RUN mkdir jtr && cd jtr && git init && git remote add origin https://github.com/ RUN pip3 install --no-cache-dir -r /strelka/requirements.txt && \ pip3 install --index-url https://lief-project.github.io/packages --trusted-host lief.quarkslab.com lief -# Set the working directory and copy the project files +# Set the working directory WORKDIR /strelka/ -COPY pyproject.toml poetry.lock ./ # Use Poetry to install the project dependencies globally # This step is after the COPY step because it is more likely to change, From d280cf7517d7619f13c8b229621d7357a5211bf8 Mon Sep 17 00:00:00 2001 From: weslambert Date: Tue, 14 Nov 2023 17:18:27 -0500 Subject: [PATCH 09/14] Update Dockerfile --- so-strelka-backend/Dockerfile | 42 ++++++++++++++++++++--------------- 1 file changed, 24 insertions(+), 18 deletions(-) diff --git a/so-strelka-backend/Dockerfile b/so-strelka-backend/Dockerfile index c510b35a..15ceb1da 100644 --- a/so-strelka-backend/Dockerfile +++ b/so-strelka-backend/Dockerfile @@ -128,32 +128,38 @@ RUN apt-get -q update && \ python3 setup.py install # Install JTR -RUN apt-get -q update \ - && apt-get install -q -y --no-install-recommends \ +RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \ + --mount=type=cache,target=/var/lib/apt,sharing=locked \ + apt-get update -qq && \ + apt-get install -qq -y --no-install-recommends \ ca-certificates \ - libssl-dev \ zlib1g-dev \ yasm \ libgmp-dev \ + liblzma-dev \ libpcap-dev \ libbz2-dev \ - libgomp1 + libgomp1 && \ + cpan -i Compress::Raw::Lzma # The maintainer isn't big on releases or tags so grab an arbitrary, but consistent, commit. # Additionally jump through some extra hoops to get the single commit to save some download time. -RUN mkdir jtr && cd jtr && git init && git remote add origin https://github.com/openwall/john.git && git fetch --depth 1 origin b5c10480f56ff1b5d76c6cbdaf9c817582ee2228 && git reset --hard FETCH_HEAD \ - && rm -rf /jtr/.git \ - && cd /jtr/src \ - && ./configure \ - && make -s clean \ - && make -sj4 \ - && make install \ - && cp -Tr /jtr/run/ /jtr && rm -rf /jtr/run \ - && chmod -R 777 /jtr \ - && chown -R 1001:1001 /jtr - -# Install Python packages -RUN pip3 install --no-cache-dir -r /strelka/requirements.txt && \ - pip3 install --index-url https://lief-project.github.io/packages --trusted-host lief.quarkslab.com lief +RUN mkdir jtr && cd jtr && git init && git remote add origin https://github.com/openwall/john.git && \ + git fetch --depth 1 origin b5c10480f56ff1b5d76c6cbdaf9c817582ee2228 && \ + git reset --hard FETCH_HEAD && \ + rm -rf /jtr/.git && \ + cd /jtr/src && \ + ./configure && \ + make -s clean && \ + make -sj4 && \ + make install && \ + cp -Tr /jtr/run/ /jtr && rm -rf /jtr/run && \ + chmod -R 777 /jtr && \ + chown -R $USER_UID:$USER_UID /jtr + +# Install Poetry globally and copy project files +RUN python3 -m pip install -U pip setuptools && \ + python3 -m pip install poetry && \ + rm -rf /root/.cache/pip # Set the working directory WORKDIR /strelka/ From 814348e7e87e8964bafb80f04e63ac9c91f5a0dd Mon Sep 17 00:00:00 2001 From: weslambert Date: Tue, 14 Nov 2023 19:14:57 -0500 Subject: [PATCH 10/14] Update Dockerfile --- so-strelka-backend/Dockerfile | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/so-strelka-backend/Dockerfile b/so-strelka-backend/Dockerfile index 15ceb1da..2769ef43 100644 --- a/so-strelka-backend/Dockerfile +++ b/so-strelka-backend/Dockerfile @@ -99,7 +99,7 @@ RUN apt-get -q update && \ mkdir -p /etc/capa/rules/ && \ curl -OL https://github.com/mandiant/capa-rules/archive/refs/tags/v$CAPA_VERSION.zip && \ unzip v$CAPA_VERSION.zip -d /etc/capa/rules/ && \ - rm v$CAPA_VERSION.zip && \ + rm -rf v$CAPA_VERSION.zip && \ mkdir -p /etc/capa/signatures/ && \ cd /etc/capa/signatures/ && \ curl -OL https://github.com/mandiant/capa/raw/master/sigs/1_flare_msvc_rtf_32_64.sig && \ @@ -111,6 +111,7 @@ RUN apt-get -q update && \ cd /tmp/ && \ curl -OL https://s3.amazonaws.com/build-artifacts.floss.flare.fireeye.com/travis/linux/dist/floss && \ chmod +x /tmp/floss && \ + mv /tmp/floss /bin/floss && \ # Install YARA cd /tmp/ && \ curl -OL https://github.com/VirusTotal/yara/archive/v$YARA_VERSION.tar.gz && \ @@ -118,12 +119,12 @@ RUN apt-get -q update && \ cd yara-$YARA_VERSION/ && \ ./bootstrap.sh && \ ./configure --with-crypto --enable-magic --enable-cuckoo && \ - make && make install && make check && \ + make -s && make -s install && make -s check && \ # Install yara-python cd /tmp/ && \ - curl -OL https://github.com/VirusTotal/yara-python/archive/v$YARA_PYTHON_VERSION.tar.gz && \ - tar -zxvf v$YARA_PYTHON_VERSION.tar.gz && \ - cd yara-python-$YARA_PYTHON_VERSION/ && \ + curl -OL https://github.com/VirusTotal/yara-python/archive/v$YARA_VERSION.tar.gz && \ + tar -zxvf v$YARA_VERSION.tar.gz && \ + cd yara-python-$YARA_VERSION/ && \ python3 setup.py build --dynamic-linking && \ python3 setup.py install From a27c2dd5ec0182ada3fca18ce7131811c1642c77 Mon Sep 17 00:00:00 2001 From: weslambert Date: Fri, 1 Dec 2023 12:29:52 -0500 Subject: [PATCH 11/14] 0.23.12.01 --- so-strelka-backend/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/so-strelka-backend/Dockerfile b/so-strelka-backend/Dockerfile index 2769ef43..c5ec8bcb 100644 --- a/so-strelka-backend/Dockerfile +++ b/so-strelka-backend/Dockerfile @@ -25,7 +25,7 @@ RUN groupadd --gid $USER_GID $USERNAME \ RUN rm -f /etc/apt/apt.conf.d/docker-clean; echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' > /etc/apt/apt.conf.d/keep-cache # SO - Pin to release tag, download from GitHub, and prepare container dirs -ARG STRELKA_RELEASE_VERSION=0.23.11.10 +ARG STRELKA_RELEASE_VERSION=0.23.12.01 RUN mkdir /strelka && \ mkdir /etc/strelka && \ mkdir /tmp/strelka && \ From a8479b91f2685ff73ca601492d29ed3b3e5da737 Mon Sep 17 00:00:00 2001 From: weslambert Date: Mon, 4 Dec 2023 10:23:52 -0500 Subject: [PATCH 12/14] 0.23.12.01 --- so-strelka-filestream/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/so-strelka-filestream/Dockerfile b/so-strelka-filestream/Dockerfile index f4ee11fb..c5315a6f 100644 --- a/so-strelka-filestream/Dockerfile +++ b/so-strelka-filestream/Dockerfile @@ -1,6 +1,6 @@ FROM ghcr.io/security-onion-solutions/golang:alpine AS build LABEL maintainer "Security Onion Solutions, LLC" -ARG STRELKA_RELEASE_VERSION=0.23.11.10 +ARG STRELKA_RELEASE_VERSION=0.23.12.01 RUN CGO_ENABLED=0 go install github.com/target/strelka/src/go/cmd/strelka-filestream@$STRELKA_RELEASE_VERSION From e7cc69bcf19b915e88702a2858ea8d05fee9df97 Mon Sep 17 00:00:00 2001 From: weslambert Date: Mon, 4 Dec 2023 10:24:21 -0500 Subject: [PATCH 13/14] 0.23.12.01 --- so-strelka-frontend/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/so-strelka-frontend/Dockerfile b/so-strelka-frontend/Dockerfile index f62bc7f8..5f4282c3 100644 --- a/so-strelka-frontend/Dockerfile +++ b/so-strelka-frontend/Dockerfile @@ -1,6 +1,6 @@ FROM ghcr.io/security-onion-solutions/golang AS build LABEL maintainer "Security Onion Solutions, LLC" -ARG STRELKA_RELEASE_VERSION=0.23.11.10 +ARG STRELKA_RELEASE_VERSION=0.23.12.01 RUN CGO_ENABLED=0 go install github.com/target/strelka/src/go/cmd/strelka-frontend@$STRELKA_RELEASE_VERSION From fce17eb9c6455ad61c5299fb16f7bc021817733c Mon Sep 17 00:00:00 2001 From: weslambert Date: Mon, 4 Dec 2023 10:24:46 -0500 Subject: [PATCH 14/14] 0.23.12.01 --- so-strelka-manager/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/so-strelka-manager/Dockerfile b/so-strelka-manager/Dockerfile index 97004de9..702aae02 100644 --- a/so-strelka-manager/Dockerfile +++ b/so-strelka-manager/Dockerfile @@ -1,6 +1,6 @@ FROM ghcr.io/security-onion-solutions/golang AS build LABEL maintainer "Security Onion Solutions, LLC" -ARG STRELKA_RELEASE_VERSION=0.23.11.10 +ARG STRELKA_RELEASE_VERSION=0.23.12.01 RUN CGO_ENABLED=0 go install github.com/target/strelka/src/go/cmd/strelka-manager@$STRELKA_RELEASE_VERSION