README
¶
batten - Docker Audit Toolkit
About
batten down the hatches! batten is an auditing framework that
contains some tools to help audit and harden your Docker deployments.
Identify potential security issues, and harden your existing Docker containers using a configurable policy.
Docker Image
The supplied Dockerfile will help you create and run a Docker image. Build a Docker image by running following command from the source root directory:
docker build -t batten .
After you create the Docker image, you can run it by supplying volume mount to the Docker socket file:
docker run -v /var/run/docker.sock:/var/run/docker.sock batten
Running a Remote Check
Provide the '--server' flag to run a check on a remote Docker host. Note that the remote host needs to be configured with TCP/TLS connection enabled. In case you are using TLS you need to provide the certificates and key file as parameters to batten command line:
./batten --tlscacert=ca.pem --tlskey=key.pem --tlscert=cert.pem --server=tcp://<docker host>:<port> check
Documentation
¶
There is no documentation for this package.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Godeps
|
|
|
_workspace/src/github.com/alecthomas/units
Package units provides helpful unit multipliers and functions for Go.
|
Package units provides helpful unit multipliers and functions for Go. |
|
_workspace/src/github.com/docker/docker/pkg/pools
Package pools provides a collection of pools which provide various data types with buffers.
|
Package pools provides a collection of pools which provide various data types with buffers. |
|
_workspace/src/github.com/fsouza/go-dockerclient
Package docker provides a client for the Docker remote API.
|
Package docker provides a client for the Docker remote API. |
|
_workspace/src/github.com/fsouza/go-dockerclient/testing
Package testing provides a fake implementation of the Docker API, useful for testing purpose.
|
Package testing provides a fake implementation of the Docker API, useful for testing purpose. |
|
_workspace/src/github.com/jandre/procfs/limits
limits.Limits describes data in /proc/<pid>/limits.
|
limits.Limits describes data in /proc/<pid>/limits. |
|
_workspace/src/github.com/jandre/procfs/stat
stat.Stat describes data in /proc/<pid>/stat.
|
stat.Stat describes data in /proc/<pid>/stat. |
|
_workspace/src/github.com/jandre/procfs/statm
statm.Statm describes data in /proc/<pid>/statm.
|
statm.Statm describes data in /proc/<pid>/statm. |
|
_workspace/src/github.com/jandre/procfs/status
status.Status describes select data in /proc/<pid>/status.
|
status.Status describes select data in /proc/<pid>/status. |
|
_workspace/src/github.com/mgutz/ansi
Package ansi is a small, fast library to create ANSI colored strings and codes.
|
Package ansi is a small, fast library to create ANSI colored strings and codes. |
|
_workspace/src/github.com/olekukonko/tablewriter
Create & Generate text based table
|
Create & Generate text based table |
|
_workspace/src/gopkg.in/alecthomas/kingpin.v1
Package kingpin provides command line interfaces like this: $ chat usage: chat [<flags>] <command> [<flags>] [<args> ...] Flags: --debug enable debug mode --help Show help.
|
Package kingpin provides command line interfaces like this: $ chat usage: chat [<flags>] <command> [<flags>] [<args> ...] Flags: --debug enable debug mode --help Show help. |
|
_workspace/src/gopkg.in/alecthomas/kingpin.v1/examples/curl
A curl-like HTTP command-line client.
|
A curl-like HTTP command-line client. |