Merge pull request #7926 from Security-Onion-Solutions/kilo

Add support for analyzers in airgapped environments

salt/sensoroni/files/analyzers/build.sh

@@ -1,6 +1,7 @@
 #!/bin/bash
 
 COMMAND=$1
+SENSORONI_CONTAINER=${SENSORONI_CONTAINER:-so-sensoroni}
 
 function ci() {
     HOME_DIR=$(dirname "$0")
@@ -24,7 +25,10 @@ function download() {
         ANALYZERS="*/"
     fi
     for ANALYZER in $ANALYZERS; do
-        docker exec -it so-sensoroni pip download -r /opt/sensoroni/analyzers/$ANALYZER/requirements.txt -d /opt/sensoroni/analyzers/$ANALYZER/source-packages
+        rm -fr $ANALYZER/site-packages
+        mkdir -p $ANALYZER/source-packages
+        rm -fr $ANALYZER/source-packages/*
+        docker exec -it $SENSORONI_CONTAINER pip download -r /opt/sensoroni/analyzers/$ANALYZER/requirements.txt -d /opt/sensoroni/analyzers/$ANALYZER/source-packages
     done
 }