trickster0 / container_sec_workstation

Container Security Workstation Playbook

This is a set of playbooks for setting up a container security workstation with common tools for doing container security reviews.

There are five playbooks in the repository

• cli_container_sec_workstation.yml - This has only command line tools installed
• gui_container_sec_workstation.yml - This adds tools that have a GUI but relies on a remote X server being available
• desktop_container_sec_workstation.yml - This installs XFCE4 and xrdp so you can get a remote full desktop.
• wsl_container_sec_workstation.yml - This is designed for installation inside a WSL environment that already has Docker installed (via Docker for Windows) and is running as root
• docker_container_sec_workstation.yml - This is designed for creating Docker images for container security testing

Pre-requisites

• Tested on Ubuntu, may work on other deb based distros
• Ansible install
  • For Ubuntu 18.04 there's an install script (install_ansible_ubuntu.sh)
  • For Ubuntu 20.04 just install ansible with apt update && apt install -y ansible
• Change the user var in the playbook to your username

Installation Process - VMs

Once you've got the pre-requisites installed, you can just run

ansible-playbook [playbook-YAML-file]

and it should setup the machine as needed.

Installation Process - Docker

Here the goal is to use the playbook to create a container that can be turned into an image and pushed to a Docker Registry for later use.

ansible-playbook docker_container_sec_workstation.yml

After running the playbook, stop the container

docker stop base

Then commit it to an image, here container_sec_image

docker commit base container_sec_image

Then push to a registry of your choosing

Tools List - Core

• Auger
• Docker
• Docker Compose
• etcdctl
• gvisor
• helm
• kind
• kubectl
• kubens & kubectx
• kube-ps1
• nmap
• rakkess
• kubectl-who-can
• rback
• trivy
• whaler
• dive
• kube-bench

Tools List - GUI

If you install the GUI or desktop playbooks then it will add some handy tools which require a GUI. You can then access the VM from a machine with an X Server (e.g. MobaXterm or XMing on Windows) and access these additional tools

• firefox
• octant
• Visual Studio Code , with the Docker, Kubernetes and YAML plugins

TODO

• Add More tools
• Ensure all tools from remote sources have signature/checksum checking