Image size improvements and pinned Netexec version

[kaisersource]

Description

This PR introduces a multi-stage Docker build for latest version of NetExec, using the latest python:3.13-slim-bookworm as the base image. The multi-stage setup optimizes the final image size by separating the build environment from the runtime environment.
Summary of Changes

Adds a builder stage that Installs necessary build dependencies The final stage:

• Copies only the required Python site-packages and binaries from the builder
• Minimizes runtime dependencies

Issue Fixed / Enhancement
This results in a smaller, cleaner final image suitable for deployment and CI/CD

Type of change

• New feature (non-breaking change which adds functionality)

Ensure Docker is installed on your machine. No external dependencies are required beyond Docker itself.

Checklist:

• I have tested the Docker build and run locally
• I have performed a self-review of my own code

[NeffIsBack]

Thanks for the PR!
Wondering if it wouldn't be best to just use the latest version of the repo instead of checking out the v1.4.0 build. What's the reason for that change?

[kaisersource]

I always prefer using the latest release tag to ensure traceability and reproducibility, especially because it triggers my CI/CD pipelines. Moreover, relying on main which evolves continuously, might lead to potential breakages or unexpected changes

[Marshall-Hallenbeck]

I always prefer using the latest release tag to ensure traceability and reproducibility, especially because it triggers my CI/CD pipelines. Moreover, relying on main which evolves continuously, might lead to potential breakages or unexpected changes

We only do tagged releases once every few months, but each commit updates the hash that is displayed when running --version, so you can know exactly which commit you are on from the main branch. If you solely rely on the latest tagged version, you are going to be running an older version and missing out on lots of features and more importantly bug fixes that we push very often.

[kaisersource]

Got it, thanks. I've switched to cloning from main branch

[NeffIsBack]

@kaisersource while we are at it, could you add entry points for "NetExec" and the "nxcdb" as well?

[NeffIsBack]

LGTM:

[NeffIsBack]

For others in the future, old build had 2.21GB (see in the screenshot), new build has 351MB 🚀