Package: anchore
.. image:: https://anchore.io/service/badges/image/f017354b717234ebfe1cf1c5d538ddc8618f3ab0d8c67e290cf37f578093d121:target: https://anchore.io/image/dockerhub/anchore%2Fcli%3AlatestAnchore=======Anchore is a set of tools that provides visibility, transparency, andcontrol of your container environment.  With anchore, users cananalyze, inspect, perform security scans, and apply custom policies tocontainer images within a CI/CD build system, or used/integrateddirectly into your container environment.This repository contains the anchore analysis scanner tool (with abasic CLI interface), which can be appropriate for lower-levelintegrations - for new users and current users who have been lookingto deploy Anchore as a centralized service with an API, an open sourceproject called the Anchore Engine has been released (with its ownlight-weight client CLI) which extends the capabilities of anchorebeyond what usage of this scanner tool alone can provide.  The projectpage links are below, which include installation/quickstartinstructions, API documents and usage guides.`Anchore Engine <https://github.com/anchore/anchore-engine>`_`Anchore Engine CLI <https://github.com/anchore/anchore-cli>`_If you would like to deploy Anchore as an API accessible servicewithin your environment, you should visit the `Anchore Engine<https://github.com/anchore/anchore-engine>`_ project page to getstarted - note that the anchore-engine uses the anchore analysisscanner code from this repository as a dependency - if you're usingthe anchore engine you will not need to install the software from thisrepository manually.  If you are a current user of anchore and are notready to try the anchore-engine yet, or you are interested in the coreanchore container analysis scanner open source software itself, thisis the code you're looking for.Using Anchore Scanner via Docker================================Anchore is available as a `Docker image <https://hub.docker.com/r/anchore/cli/>`_.1. ``docker pull anchore/cli``2. ``docker run -d -v /var/run/docker.sock:/var/run/docker.sock --name anchore anchore/cli:latest``3. ``docker exec anchore anchore feeds sync``4. Use docker exec to run anchore commands in the container, such as: ``docker exec anchore anchore analyze --image <myimage> --dockerfile </path/to/Dockerfile>``The general model is to run the container in detached mode to providethe environment and use 'docker exec' to execute anchore commandswithin the container. See the above link on how to use the containerspecifically and options that are container specific.Using Anchore Scanner Installed Directly on Host========================================To get started on CentOS 7 as root:1) install docker (see docker documentation for CentOS 7 install instructions)``https://docs.docker.com/engine/installation/linux/centos/``2) install some packages that full functionality of anchore will require (run as root or with sudo)``yum install epel-release````yum install python-pip rpm-python dpkg``To get started on Ubuntu >= 15.10  as root:1) install docker engine >= 1.10 (see docker documentation for Ubuntu >= 15.10 install instructions)``https://docs.docker.com/engine/installation/linux/ubuntulinux/``2) install some packages that full functionality of anchore will require (run as root or with sudo)``apt-get install python-pip python-rpm yum``Next, on either distro:3) install Anchore to ~/.local/``cd <where you checked out anchore>````pip install --upgrade --user .````export PATH=~/.local/bin:$PATH``4) run anchore!  Here is a quick sequence of commands to help get going``anchore --help````docker pull nginx:latest````anchore feeds list````anchore feeds sync````anchore analyze --image nginx:latest --imagetype base````anchore audit --image nginx:latest report````anchore query --image nginx:latest has-package curl wget````anchore query --image nginx:latest list-files-detail all````anchore query --image nginx:latest cve-scan all````anchore toolbox --image nginx:latest show``For more information, to learn about how to analyze your ownapplication containers, and how to customize/extend Anchore, pleasevisit our github page wiki at https://github.com/anchoreJenkins=======If you are a Jenkins user, please visit our github wiki installationdocumentation athttps://github.com/anchore/anchore/wiki/Anchore-and-Jenkins-Integrationto learn more about using the Jenkins Anchore build-step plugin.Vagrant=======* Install Vagrant and Virtualbox* Download the Vagrantfile* ``vagrant up``* ``vagrant ssh``* ``sudo -i``* Continue with step 4)Manual Pages============Man pages for most of the anchore commands are available in:$anchore/doc/man, where $anchore is the install location of the pythoncode for your distro(e.g. /usr/local/lib/python2.7/dist-packages/anchore for ubuntu).  Toinstall them, copy them to the appropriate location for yourdistro. The man pages are generated from --help and --extended-helpoptions to anchore commands, so similar content is available direcltyfrom the CLI as well.