Skip to main content

mondoo shell container

Connect to a container, an image, or a registry


Connect to a container, a container image, or a container registry. By default we will try to auto-detect the container or image from the provided ID, even if it's not the full ID:

mondoo shell container b62b276baab6
mondoo shell container b62
mondoo shell container ubuntu:latest

You can also explicitly connect to an image or a container registry:

mondoo shell container image ubuntu:20.04
mondoo shell container registry
mondoo shell container ID [flags]


      --ask-pass                         ask for connection password
-c, --command string a command to run in the shell
-t, --connection string The connection is the identifier a way to reach the asset. Supported connections are 'local://', 'docker://' and 'ssh://'
--discover string enables the discovery of nested assets. Supported are 'all|auto|instances|host-instances|host-machines|container|container-images' (default "auto")
--discover-filter stringToString additional filter for asset discovery (default [])
-h, --help help for container
--host-machines also scan host machines like ESXi server
-i, --identity-file string Selects a file from which the identity (private key) for public key authentication is read.
--insecure disables TLS/SSL checks or SSH hostkey config
--instances also scan instances (only applies to api targets like aws, azure or gcp)
--option stringToString addition connection options, multiple options can be passed in via --option key=value (default [])
-p, --password string connection password e.g. for ssh/winrm
--path string path to a local file or directory that the connection should use
--platform-id string select an specific asset by providing the platform id for the target
--sudo runs with sudo

Options inherited from parent commands

      --config string      config file (default is $HOME/.config/mondoo/mondoo.yml)
--log-level string set log-level: error, warn, info, debug, trace (default "info")
-v, --verbose verbose output