cnspec update

Update the cnspec binary to the latest release. cnspec downloads the release for your platform, verifies it, and replaces the binary in place. This is the same mechanism cnspec uses to update itself in the background. Running the command checks for an update immediately instead of waiting for the next refresh interval.

This command doesn't appear in the cnspec --help command list, but you can run it and view its help with cnspec update --help.

Update from your configured release channel:

cnspec update

Update from the preview channel for this one command, without changing any configuration. On a stable install, this is how you move to a release candidate without putting the machine on the preview channel permanently. To learn more, read Release channels:

cnspec update --channel preview

Without --channel, cnspec uses the update_channel configuration setting or the MONDOO_UPDATE_CHANNEL environment variable. If neither is set, it uses the channel the running build belongs to. When there's nothing newer, cnspec reports that it's already the latest version and names the channel when it isn't stable.

cnspec only ever updates to a higher version. Running cnspec update --channel stable on a preview build reports that there's nothing newer instead of rolling back. To return to the stable line, reinstall cnspec.

The command refuses to run when MONDOO_AUTO_UPDATE or MONDOO_AUTO_UPDATE_ENGINE is set to false. The auto_update configuration setting and the --auto-update flag don't block it, because they control only automatic updates.

Options

      --channel string   Release channel to update from: stable or preview (default: the configured update_channel, or the channel this build belongs to)
  -h, --help             help for update

Options inherited from parent commands

      --api-proxy string        Set the proxy for communications with Mondoo Platform API
      --auto-update             Enable automatic provider installation and update (default true)
      --config string           Set config file path (default $HOME/.config/mondoo/mondoo.yml)
      --log-level string        Set the log level: error, warn, info, debug, trace (default "info")
      --logging-config string   Path to a logging configuration file (YAML or JSON) that selects the log writer, level, and writer-specific options
      --strict                  Default MQL strict mode for policies that do not declare one: every link in an MQL chain must resolve
  -v, --verbose                 Enable verbose output

SEE ALSO

• cnspec - cnspec CLI