6ed4994b0d
As more scanners besides openscap become available, atomic can now begin to leverage them. The new scan function has been broken out into its on file (scan.py). The scan command itself now defaults to openscap but can also be switched to blackduck with --scanner. Atomic now can use a configuration file which is stored in /etc/atomic.conf. The location of the atomic conf file can be overriden with the environment variable 'ATOMIC_CONF'. In the case of the scan function, we need the scanner defined in the configuration file as well as the fully qualified image name and the scan arguments. Optionally, you can provide additional custom docker arguments for the scanner as well
1.8 KiB
% ATOMIC(1) Atomic Man Pages % Dan Walsh % January 2015
NAME
atomic - Atomic Management Tool
SYNOPSIS
atomic [OPTIONS] COMMAND [arg...] {diff,host,images,info,install,mount,run,scan,stop,uninstall,unmount,update,upload,verify,version} [-h|-help]
DESCRIPTION
Atomic Management Tool
OPTIONS
-h --help Print usage statement
ENVIRONMENT VARIABLES
ATOMIC_CONF The location of the atomic configuration file (normally /etc/atomic.conf) can be overridden with the ATOMIC_CONF environment variable
ATOMIC_CONFD The location of the atomic configuration directory (normally /etc/atomic.d/) can be overridden with the ATOMIC_CONFD environment variable.
COMMANDS
atomic-diff(1) show the differences between two images|containers' RPMs
atomic-help(1) show help associated with a container or image
atomic-host(1) execute Atomic commands
atomic-images(1) list locally installed container images
atomic-info(1) execute Atomic commands
atomic-install(1) execute image install method
atomic-mount(1) mount image or container to filesystem
atomic-run(1) execute image run method (default)
atomic-scan(1) scan an image or container for CVEs
atomic-stop(1) execute container image stop method
atomic-top(1) display a top-like list of container processes
atomic-uninstall(1) uninstall container from system
atomic-unmount(1) unmount previously mounted image or container
atomic-update(1) pull latest image from repository
atomic-upload(1) upload container image to the repository
atomic-verify(1) verify image is fully updated
atomic-version(1) display image 'Name Version Release' label
HISTORY
January 2015, Originally compiled by Daniel Walsh (dwalsh at redhat dot com) November, 2015 Addition of scan and diff by Brent Baude (bbaude at dot com)