feat: vulnz Docker

[derhecht]

Add Docker support for vulnz based on @stevespringett https://github.com/stevespringett/nist-data-mirror

[jellisgwn]

is this step still required? in 5.0.3 the output is produced already gzip'ed.

[derhecht]

if so, of course not. i will update.

[jeremylong]

this PR is part of the plan - I just want to stabilize things before merging this one.

[EugenMayer]

Jumping in to help with the review. Thank you for putting all the hard work into dockerizing it.

I would love to build a helm chart out of this similar to the one i published for the old nist json api over at https://github.com/EugenMayer/helm-charts/tree/main/charts/nist-data-mirror

The docker container looks fine, nearly rootless and AFAICS the NVD_API_KEY is already ENV based - so it is all set to go.
I would tend to use a

• non privileged port for apache, but well, since it drops the permission, but well, we could go full rootless by just doing that or maybe just using nginx which supports rootless officially.
• add a VOLUME /usr/local/apache2/htdocs statement since we want a little more 'persistence' out of it

Anyway, for me those are minors, the PR looks good already.

I would add the usage on how to start the docker container in the README and including the hint with the ENV based API key

For example

docker run -v cache:/usr/local/apache2/htdocs -e NVD_API_KEY=myapikey ghcr.io/jeremylong/vuln
# run the update manually
docker run -v cache:/usr/local/apache2/htdocs -e NVD_API_KEY=myapikey ghcr.io/jeremylong/vuln java -jar /usr/local/bin/vulnz cve --cache --directory /usr/local/apache2/htdocs

[EugenMayer]

created #114 to adjust, upstream merge, add docs (since i cannot contribute on this PR). Used this PR as the base.

[jeremylong]

@derhecht thank you for the PR. I'm sorry this has taken me so long to get to. We will be continuing with #114.