Requirements

• Python 3.5

Usage

$ pyvenv testenv
$ cd testenv
$ git clone ssh://[email protected]/ostc/docker-compliance.git
$ source bin/activate
$ cd docker-compliance
$ pip install -r requirements.txt
$ ./tern -h

To run a test

$ cd testenv
$ source bin/activate
$ git clone ssh://[email protected]/ostc/docker-compliance.git
$ cd docker-compliance
$ export PYTHONPATH=`pwd`
$ python tests/<test file>.py

TODO

Phase 2:

1. Knowledge base: Each layer hash should come with a list of known packages that are installed in that layer
2. Allow for exceptions or additions for the command library
3. In the reporting do not ignore packages that may be installed in the docker image
4. Harden for testing within VMware's docker community

Bugs:

1. For reporting purposes - parse ENV
2. Keeps running docker save even if it already exists on the filesystem
3. Reporting of errors in docker commands are not recorded in the report
4. The container is shut down and brought up for every invoke
5. Too much noise in the docker command - no need to report unless there was an error

Feature requests:

1. Logging
2. Errors don't bubble up to the report. This can be a --verbose option
3. Create install script

Upstream potential:

1. Docker API assumes user is in docker group and hence can run docker commands without sudo
2. Docker has no ability to step through docker history