1

This clair documentation indicates that a number of tools should be able to scan images:

  • clair-scanner
  • reg
  • klar
  • clairctl

analyze-local-images

All of them have been tried, but none of them seems to work. All kind of issues occurred, including this:

2017-09-19 11:11:23.022625 I | Analyzing faild: Could not analyze layer: 
Got response 400 with message {"Error":{"Message":"could not find layer"}}

Another issue that occurred using clairctl:

panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x518490]

does this happen with all images including official like ubuntu, alpine, tomcat?

Using clairctl it was possible to scan postgres an other images that are available on dockerhub, but scanning local images failed

2
  • 1
    does this happen with all images including official like ubuntu, alpine, tomcat? Sep 19 '17 at 9:27
  • Using clairctl it was possible to scan postgres an other images that are available on dockerhub, but scanning local images failed
    – 030
    Sep 19 '17 at 10:12
0

Clair-scanner is able to scan the images locally.

https://github.com/arminc/clair-scanner/issues/13

docker run --net=host -d --name db arminc/clair-db:2017-09-18
docker run --net=host --add-host postgres:127.0.0.1 -d --name clair --net=host arminc/clair-local-scan:v2.0.1
./clair-scanner nginx:1.11.6-alpine example-nginx.yaml http://127.0.0.1:6060 127.0.0.1

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.