通过 podman 安装 MobSF

• repository

https://github.com/MobSF/Mobile-Security-Framework-MobSF

• 镜像安装 mobsf

安装好 podman 之后，搜索镜像；回显连接拒绝

# podman search mobsf
ERRO[0001] error getting search results from v2 endpoint "docker.m.daocloud.io": unsupported 
Error: 2 errors occurred:
        * couldn't search registry "docker.m.daocloud.io": unsupported
        * couldn't search registry "docker.io": pinging container registry index.docker.io: Get "https://index.docker.io/v2/": dial tcp 93.179.102.140:443: connect: connection refused

# podman search mobile-security-framework-mobsf
ERRO[0001] error getting search results from v2 endpoint "docker.m.daocloud.io": unsupported 
Error: 2 errors occurred:
        * couldn't search registry "docker.m.daocloud.io": unsupported
        * couldn't search registry "docker.io": pinging container registry index.docker.io: Get "https://index.docker.io/v2/": dial tcp 31.13.76.65:443: connect: connection refused

• 拉取镜像

选 redhat.io 错误

# podman pull opensecurity/mobile-security-framework-mobsf:latest
✔ registry.redhat.io/opensecurity/mobile-security-framework-mobsf:latest
Trying to pull registry.redhat.io/opensecurity/mobile-security-framework-mobsf:latest...
Error: unable to copy from source docker://registry.redhat.io/opensecurity/mobile-security-framework-mobsf:latest: initializing source docker://registry.redhat.io/opensecurity/mobile-security-framework-mobsf:latest: unable to retrieve auth token: invalid username/password: unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: https://access.redhat.com/RegistryAuthentication

换 docker.io ，成功

# podman pull opensecurity/mobile-security-framework-mobsf:latest
✔ docker.io/opensecurity/mobile-security-framework-mobsf:latest
Trying to pull docker.io/opensecurity/mobile-security-framework-mobsf:latest...
Getting image source signatures
Copying blob a8fcdeed176a done   | 
Copying blob 5c32499ab806 done   | 
Copying blob 79dc17963468 done   | 
Copying blob 5c36186b8d84 done   | 
Copying blob 4ce903582132 done   | 
Copying blob b67c14c4cb36 done   | 
Copying blob eea4a8cb9854 done   | 
Copying blob 766c8d81d8d6 done   | 
Copying blob c7f485e0fb3a done   | 
Copying blob 1a7eb413d886 done   | 
Copying blob abd4d6a2494e done   | 
Copying blob 71539e3eaca9 done   | 
Copying blob 80e04984abca done   | 
Copying config 12bdbbe8f4 done   | 
Writing manifest to image destination
12bdbbe8f4b616db6a53ae11d29e35a3ae0bd655f1b35d41b7ec18d7d2c61e1e

查看镜像和容器

# podman images                                                  
REPOSITORY                                              TAG         IMAGE ID      CREATED      SIZE
docker.io/opensecurity/mobile-security-framework-mobsf  latest      12bdbbe8f4b6  7 weeks ago  2.63 GB

# podman ps -a
CONTAINER ID  IMAGE       COMMAND     CREATED     STATUS      PORTS       NAMES

开启容器

# podman run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest
[INFO] 26/Nov/2025 23:30:05 - Loading User config from: /home/mobsf/.MobSF/config.py
[INFO] 26/Nov/2025 23:30:05 - JADX is already installed at /home/mobsf/.MobSF/tools/jadx/jadx-1.5.0
[INFO] 26/Nov/2025 23:30:14 - 
  __  __       _    ____  _____       _  _   _  _                                                                            
 |  \/  | ___ | |__/ ___||  ___|_   _| || | | || |                                                                           
 | |\/| |/ _ \| '_ \___ \| |_  \ \ / / || |_| || |_                                                                          
 | |  | | (_) | |_) |__) |  _|  \ V /|__   _|__   _|                                                                         
 |_|  |_|\___/|_.__/____/|_|     \_/    |_|(_) |_|                                                                           

[INFO] 26/Nov/2025 23:30:14 - Author: Ajin Abraham | opensecurity.in
[INFO] 26/Nov/2025 23:30:14 - Mobile Security Framework v4.4.3
REST API Key: e3975c5621208a261e43802f62291fd8e06b7bdddcef2c858a613d9a53fcff60
Default Credentials: mobsf/mobsf
[INFO] 26/Nov/2025 23:30:14 - OS Environment: Linux (debian 12 bookworm) Linux-6.12.38+kali-amd64-x86_64-with-glibc2.36
[INFO] 26/Nov/2025 23:30:14 - Python Version: 3.13.7
[INFO] 26/Nov/2025 23:30:14 - CPU Cores: 1, Threads: 1, RAM: 7.76 GB
[INFO] 26/Nov/2025 23:30:14 - MobSF Basic Environment Check
No changes detected
[INFO] 26/Nov/2025 23:30:20 - Checking for Update.
[ERROR] 26/Nov/2025 23:32:54 - Cannot Check for updates.
...
requests.exceptions.ConnectTimeout: HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /MobSF/Mobile-Security-Framework-MobSF/releases/latest (Caused by ConnectTimeoutError(<urllib3.connection.HTTPSConnection object at 0x7f4ebdd15090>, 'Connection to github.com timed out. (connect timeout=5)'))

容器启动，虽然更新检查有错误，但是不影响

• 安装 chromium

下载安装包；在 debian/pool/main/c/ 目录下寻找 chromium

$ wget https://mirrors.tuna.tsinghua.edu.cn/debian/pool/main/c/chromium/chromium_142.0.7444.175-1_amd64.deb
--2025-11-27 09:32:33--  https://mirrors.tuna.tsinghua.edu.cn/debian/pool/main/c/chromium/chromium_142.0.7444.175-1_amd64.deb
正在解析主机 mirrors.tuna.tsinghua.edu.cn (mirrors.tuna.tsinghua.edu.cn)... 101.6.15.130, 2402:f000:1:400::2
正在连接 mirrors.tuna.tsinghua.edu.cn (mirrors.tuna.tsinghua.edu.cn)|101.6.15.130|:443... 已连接。
已发出 HTTP 请求，正在等待回应... 200 OK
长度：80066112 (76M) [application/octet-stream]
正在保存至: “chromium_142.0.7444.175-1_amd64.deb”

chromium_142.0.7444.175-1_amd64 100%[====================================================>]  76.36M  10.4MB/s  用时 7.0s    

2025-11-27 09:32:41 (10.8 MB/s) - 已保存 “chromium_142.0.7444.175-1_amd64.deb” [80066112/80066112])

安装有错误

# dpkg -i chromium_142.0.7444.175-1_amd64.deb 
(正在读取数据库 ... 系统当前共安装有 417441 个文件和目录。)
准备解压 chromium_142.0.7444.175-1_amd64.deb  ...
正在解压 chromium (142.0.7444.175-1) 并覆盖 (139.0.7258.154-1) ...
dpkg: 依赖关系问题使得 chromium 的配置工作不能继续：
 chromium 依赖于 chromium-common (= 142.0.7444.175-1)；然而：
  系统中 chromium-common 的版本为 139.0.7258.154-1。

dpkg: 处理软件包 chromium (--install)时出错：
 依赖关系问题 - 仍未被配置
正在处理用于 kali-menu (2025.3.2) 的触发器 ...
正在处理用于 desktop-file-utils (0.28-1) 的触发器 ...
正在处理用于 hicolor-icon-theme (0.18-2) 的触发器 ...
正在处理用于 man-db (2.13.1-1) 的触发器 ...
在处理时有错误发生：
 chromium

使用 apt-get 安装

# apt-get install chromium
正在读取软件包列表... 完成
正在分析软件包的依赖关系树... 完成
正在读取状态信息... 完成                 
chromium 已经是最新版 (142.0.7444.175-1)。
chromium 已设置为手动安装。
您也许需要运行“apt --fix-broken install”来修正上面的错误。
下列软件包有未满足的依赖关系：
 chromium : 依赖: chromium-common (= 142.0.7444.175-1) 但是 139.0.7258.154-1 正要被安装
E: 有未能满足的依赖关系。请尝试不指明软件包的名字来运行“apt --fix-broken install”(也可以指定一个解决办法)。
E: The following information from --solver 3.0 may provide additional context:
   有未能满足的依赖关系。请尝试不指明软件包的名字来运行“apt --fix-broken install”(也可以指定一个解决办法)。

# apt --fix-broken install
正在修复依赖关系... 完成                       
将被升级：
  chromium-common

摘要：
  升级：1，安装：0，卸载：0，不升级：1203
  有 1 个软件包没有被完全安装或卸载。
  下载大小：22.7 MB
  所需的空间：1,599 kB / 57.0 GB 可用

是否继续？ [Y/n] y

根据提示修复依赖关系，成功

使用 chromium 浏览器打开 mobsf 并登录，成功