Docker containers vulnerability scan with Clair about clair-scanner HOT 4 CLOSED

found the solution at :
#28

from clair-scanner.

docker run -p 5432:5432 -d --name db arminc/clair-db:2017-10-17

docker run -p 6060:6060 --link db:postgres -d --name clair arminc/clair-local-scan:v2.0.1

docker pull alpine:3.5

wget https://github.com/arminc/clair-scanner/releases/download/v5/clair-scanner_linux_amd64 --no-check-certificate

mv clair-scanner_linux_amd64 clair-scanner

chmod +x clair-scanner
//Localhoset IP does not work
./clair-scanner --ip 127.0.0.1 alpine:3.5
2017/10/18 05:20:13 [INFO] ▶ Start clair-scanner
2017/10/18 05:20:14 [INFO] ▶ Server listening on port 9279
2017/10/18 05:20:14 [INFO] ▶ Analyzing bc87cd8a9a4a3e8ac96e5a7f8bde9fb3552dffcde5fd0ada1b3a93005a574dac
2017/10/18 05:20:14 [CRIT] ▶ Could not analyze layer: Clair responded with a failure: Got response 400 with message {"Error":{"Message":"could not find layer"}}

//pulling a vulnerable image

docker pull benhall/elasticsearch:1.4.2

//It works when you put your ip

./clair-scanner --ip 172.18.0.1 benhall/elasticsearch:1.4.2
2017/10/18 05:24:00 [INFO] ▶ Start clair-scanner
2017/10/18 05:24:07 [INFO] ▶ Server listening on port 9279
2017/10/18 05:24:07 [INFO] ▶ Analyzing c7477079c0263a083fcd80dcec5ce3943adc91a9ceee4db05fccb12391d835f7
2017/10/18 05:24:07 [INFO] ▶ Analyzing 29d2a75bb0bf116ac007814daf3fdb615c84fd6196882612a05e95bcb9c082cf
2017/10/18 05:24:07 [INFO] ▶ Analyzing 64d00ca0eb8e72539269d66b340234179c782ff5b4e73cde0c57f87f3c90aaa1
2017/10/18 05:24:07 [INFO] ▶ Analyzing 52de514e7416f53cd065fc932a9422022960485eca7145690a31328374e67e16
2017/10/18 05:24:07 [INFO] ▶ Analyzing 46614e969fbfaa174db91a2dff604bdf830a8f2a3217118112bd4df947319a3b
2017/10/18 05:24:07 [INFO] ▶ Analyzing 851ec0e3112851e4af989eddb1996afd4dc9e615d593de9cfa03c42c13f88625
2017/10/18 05:24:07 [INFO] ▶ Analyzing 11f76b2d3d4a14f0d874a85c6643b7cdb149d46dff8cacdf59ceef856f5dc250
2017/10/18 05:24:07 [INFO] ▶ Analyzing 8e32c8c11f34dc2c0c1b297769630979e3a3427a2d5637f94f3c45f2ad6be093
2017/10/18 05:24:07 [INFO] ▶ Analyzing 69007a7578547da420c79f56bd0cef245f1b1620d70ff9cf598c49eab40e044f
2017/10/18 05:24:07 [INFO] ▶ Analyzing ee80fa9515b20dfabf9e2de7a208644467d8f19146e9a91bf19a98da47403929
2017/10/18 05:24:07 [INFO] ▶ Analyzing e0c822aa81ad9985ae01fa0ca77b09dc419a9b3607716b6265b2f7ac1781fbbf
2017/10/18 05:24:07 [INFO] ▶ Analyzing 3009eba76ad6b716e8c24c665e9234fb0c6f1965fa97215d5bfdb8c66aeaf5ed
2017/10/18 05:24:08 [INFO] ▶ Analyzing 4b14f23d11750692df7b0f4e5f576fdeaeb626524fcfaf3aba5805d28195d9f7
2017/10/18 05:24:08 [INFO] ▶ Analyzing d072b07cee31a09b6271fede8e46e22b3260e3096ab66fb16f9d7d1d18380b17
2017/10/18 05:24:08 [INFO] ▶ Analyzing 442e1a10f2bd46c57565c7b4bef0f03459263a049250ba630339b5165758e618
2017/10/18 05:24:08 [INFO] ▶ Analyzing 8d3010674b1e5594afc952c1fd75ae001f4a381d519bf31875f28ca55cdf67fd
2017/10/18 05:24:08 [INFO] ▶ Unapproved vulnerabilities [[CVE-2016-4484 CVE-2016-6261 CVE-2016-6263 CVE-2015-8948 CVE-2017-14062 CVE-2015-2059 CVE-2016-9844 CVE-2014-9913 CVE-2015-5186 CVE-2016-7952 CVE-2016-7951 CVE-2016-7945 CVE-2016-7946 CVE-2014-8166 CVE-2017-1000101 CVE-2016-9586 CVE-2016-8624 CVE-2016-7141 CVE-2016-8617 CVE-2016-3739 CVE-2016-7167 CVE-2017-1000100 CVE-2016-8616 CVE-2016-8621 CVE-2016-8619 CVE-2016-5421 CVE-2017-7407 CVE-2017-1000254 CVE-2016-5419 CVE-2016-8623 CVE-2016-8618 CVE-2016-8615 CVE-2016-8622 CVE-2016-8620 CVE-2016-8625 CVE-2016-5420 CVE-2015-5218 CVE-2015-5224 CVE-2016-2779 CVE-2017-2616 CVE-2016-5011 CVE-2017-6891 CVE-2016-4008 CVE-2017-10790 CVE-2016-6313 CVE-2017-7526 CVE-2016-7950 CVE-2016-7949 CVE-2005-2541 CVE-2016-6321 CVE-2016-0634 CVE-2016-9401 CVE-2016-7543 CVE-2016-10109 CVE-2016-6489 CVE-2017-8287 CVE-2016-10244 CVE-2017-8105 CVE-2017-15232 CVE-2016-3616 CVE-2016-3189 CVE-2017-11671 CVE-2016-6252 CVE-2017-2616 CVE-2013-4235 CVE-2017-12424 CVE-2007-5686 CVE-2016-5384 CVE-2016-5300 CVE-2017-9233 CVE-2012-6702 CVE-2016-0718 CVE-2013-0340 CVE-2016-4472 CVE-2016-9063 CVE-2013-4392 CVE-2016-7796 CVE-2016-1951 CVE-2011-3374 CVE-2016-1252 CVE-2017-6519 CVE-2017-9526 CVE-2016-6313 CVE-2017-7526 CVE-2017-6512 CVE-2017-12883 CVE-2016-6185 CVE-2016-1238 CVE-2015-8853 CVE-2011-4116 CVE-2017-12837 CVE-2012-3878 CVE-2015-3276 CVE-2017-14159 CVE-2017-9287 CVE-2016-2180 CVE-2017-3735 CVE-2017-3731 CVE-2016-2181 CVE-2016-6306 CVE-2016-6304 CVE-2016-2177 CVE-2007-6755 CVE-2016-7056 CVE-2010-0928 CVE-2016-6303 CVE-2016-2178 CVE-2016-8610 CVE-2016-2179 CVE-2016-6302 CVE-2016-2182 CVE-2016-7942 CVE-2016-7943 CVE-2017-13729 CVE-2017-13730 CVE-2017-11112 CVE-2017-11113 CVE-2017-10684 CVE-2017-13732 CVE-2017-13728 CVE-2017-10685 CVE-2017-13731 CVE-2017-13733 CVE-2017-13734 CVE-2016-10087 CVE-2017-13685 CVE-2017-10989 CVE-2016-6153 CVE-2016-7444 CVE-2017-7869 CVE-2017-5335 CVE-2017-5337 CVE-2011-3389 CVE-2017-7507 CVE-2017-5336 CVE-2017-5334 CVE-2016-9842 CVE-2016-9843 CVE-2016-9840 CVE-2016-9841 CVE-2015-8271 CVE-2015-8272 CVE-2015-8270 CVE-2017-6508 CVE-2016-4971 CVE-2016-7098 CVE-2017-11671 CVE-2015-5276 CVE-2015-2632 CVE-2017-7867 CVE-2017-7868 CVE-2015-4844 CVE-2014-9911 CVE-2016-0494 CVE-2016-7415 CVE-2016-6293 CVE-2017-14952 CVE-2017-8804 CVE-2010-4756 CVE-2016-3706 CVE-2017-12133 CVE-2010-4051 CVE-2016-1234 CVE-2016-10228 CVE-2016-4429 CVE-2017-1000366 CVE-2017-12132 CVE-2015-5180 CVE-2014-9761 CVE-2016-6323 CVE-2016-3075 CVE-2010-4052 CVE-2015-8985 CVE-2017-2625 CVE-2016-10165 CVE-2016-1938 CVE-2017-5461 CVE-2016-5285 CVE-2015-4000 CVE-2017-11695 CVE-2016-1950 CVE-2016-2834 CVE-2017-11698 CVE-2016-1979 CVE-2017-11697 CVE-2017-11696 CVE-2017-7805 CVE-2017-7502 CVE-2016-8635 CVE-2016-1978 CVE-2015-7575 CVE-2017-5462 CVE-2016-9574 CVE-2016-9074 CVE-2015-7181 CVE-2015-7182 CVE-2017-8283 CVE-2017-1000376 CVE-2017-11164 CVE-2017-7186 CVE-2017-7244 CVE-2017-7246 CVE-2017-7245 CVE-2015-3217 CVE-2015-2694 CVE-2017-11368 CVE-2016-3120 CVE-2016-3119 CVE-2017-11462 CVE-2004-0971 CVE-2017-10140 CVE-2016-2781]]

from clair-scanner.

hi ,
When I am running following command, I am getting following error.

./clair-scanner --ip (my IP) benhall/elasticsearch:1.4.2, it is giving following error.
[CRIT] ▶ Could not read Docker image layers: could not open [/tmp/clair-scanner-6246334/manifest.json]: open /tmp/clair-scanner-6246334/manifest.json: no such file or directory

from clair-scanner.

I am not sure but have you pulled the image ?
sudo docker pull benhall/elasticsearch:1.4.2

from clair-scanner.