8.10. Assessing Configuration Compliance of a Container or a Container Image with a Specific Baseline

Procedure

1. Find the ID of a container or a container image, for example:

   ~]# docker images
   REPOSITORY                            TAG      IMAGE ID       CREATED       SIZE
   registry.access.redhat.com/ubi7/ubi   latest   096cae65a207   7 weeks ago   239 MB

   Copy to Clipboard
2. Evaluate the compliance of the container image with the OSPP profile and save scan results in the report.html HTML file.

   ~]$ sudo oscap-docker 096cae65a207 xccdf eval --report report.html --profile ospp /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml

   Copy to Clipboard
   Replace 096cae65a207 with the ID of your container image and the ospp value with pci-dss if you assess configuration compliance with the PCI-DSS baseline.

Verification

1. Check the results in a browser of your choice, for example:

   ~]$ firefox report.html &

   Copy to Clipboard