Skip to main content

cnspec shell container

Connect to a container, image, or registry.

Synopsis​

Connect to a container, container image, or container registry. By default cnspec tries to auto-detect the container or image from the provided ID, even if it's not the full ID:

cnspec shell container b62b276baab6
cnspec shell container b62
cnspec shell container ubuntu:latest

You can also explicitly connect to an image or a container registry:

cnspec shell container image ubuntu:20.04
cnspec shell container registry harbor.lunalectric.com/project/repository
cnspec shell container ID [flags]

Options​

      --ask-pass                         Prompt for connection password
  -c, --command string                   MQL query to execute in the shell
      --discover string                  Enable the discovery of nested assets. Supported: 'all|auto|instances|host-instances|host-machines|container|container-images|pods|cronjobs|statefulsets|deployments|jobs|replicasets|daemonsets' (default "auto")
      --discover-filter stringToString   Additional filter for asset discovery. (default [])
  -h, --help                             help for container
      --host-machines                    Also scan host machines like ESXi server.
  -i, --identity-file string             Select a file from which to read the identity (private key) for public key authentication.
      --insecure                         Disable TLS/SSL checks or SSH hostkey config.
      --instances                        Also scan instances. This only applies to API targets like AWS, Azure or GCP.
      --option --option key=value        Additional connection options. You can pass multiple options using --option key=value. (default [])
  -p, --password string                  Set the connection password, such as for SSH/WinRM.
      --path string                      Path to a local file or directory for the connection to use.
      --platform-id string               Select an specific target asset by providing its platform ID.
      --sudo                             Elevate privileges with sudo.

Options inherited from parent commands​

      --config string      Set config file path (default $HOME/.config/mondoo/mondoo.yml)
      --log-level string   Set log level: error, warn, info, debug, trace (default "info")
  -v, --verbose            Enable verbose output

SEE ALSO​