Skip to content
SethBodine edited this page Oct 20, 2023 · 25 revisions

Environment Prep

New Build (aka Podman)

Podman Install - Alternative to Docker and recommended for MACOS

MACOS install notes

xcode-select --install                                                                                           # Required
brew install podman                                                                                              # brew to the rescue

Note: See Podman Install Documentation for other OS information

podman machine init --now --cpus=4 --memory=4096 \
       --timezone $(curl https://ipapi.co/timezone) --disk-size 50     # all args are optional, but a minimum of 4GB of RAM is recommended (Prowler 3 can crash with less)
podman machine start                                                                                             # only use if --now wasn't used - podman deploys a VM that contains the containers... security through virtualisation???

Note: Drive Mapping is not supported so podman cp ${container_id}:/[path to files within container] . is used to transfer files and folders before exiting the container as storage is NOT persistant.

Environment prep

The following command will complete the following

  1. Check for Image updates
  2. Clean-up any detached images
  3. Start the Container
  4. Connect into the container
  5. Stop the container once exited

Note: The container does not contain any persistant storage - you stop it, your data will be lost, so remember to copy it out.

podman pull ghcr.io/sethbodine/audit-tools && \
podman image prune -f && \
container_id=$(podman run -it -p 9194:9194 --rm --detach --name audit-tools ghcr.io/sethbodine/audit-tools /sbin/updatetools) && \
podman exec -it --user container ${container_id} /bin/bash && \
podman stop ${container_id}

In the event that something fails, stop any running containers and execute the following

podman system prune -a -f --filter "label=audit-tools"              # use this to clean-up stale container images

If you want to transfer out everything from /output witin the container to the current folder add the following above the bottom line of the command

podman cp ${container_id}:/output .

More reading can be found https://docs.podman.io/en/latest/markdown/podman-cp.1.html regarding podman cp

Clone this wiki locally