Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
This commit is contained in:
Thomas Sjögren 2017-01-20 12:16:50 +01:00
parent b3cd7a1755
commit d617e9ba57

View file

@ -15,6 +15,7 @@ The easiest way to run your hosts against the Docker Bench for Security is by ru
```sh ```sh
docker run -it --net host --pid host --cap-add audit_control \ docker run -it --net host --pid host --cap-add audit_control \
-e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \
-v /var/lib:/var/lib \ -v /var/lib:/var/lib \
-v /var/run/docker.sock:/var/run/docker.sock \ -v /var/run/docker.sock:/var/run/docker.sock \
-v /usr/lib/systemd:/usr/lib/systemd \ -v /usr/lib/systemd:/usr/lib/systemd \
@ -37,6 +38,7 @@ git clone https://github.com/docker/docker-bench-security.git
cd docker-bench-security cd docker-bench-security
docker build -t docker-bench-security . docker build -t docker-bench-security .
docker run -it --net host --pid host --cap-add audit_control \ docker run -it --net host --pid host --cap-add audit_control \
-e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \
-v /var/lib:/var/lib \ -v /var/lib:/var/lib \
-v /var/run/docker.sock:/var/run/docker.sock \ -v /var/run/docker.sock:/var/run/docker.sock \
-v /usr/lib/systemd:/usr/lib/systemd \ -v /usr/lib/systemd:/usr/lib/systemd \