Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Running security bench: Cannot reach trust server at this time #431

Closed
rirlswift opened this issue Apr 28, 2020 · 3 comments
Closed

Running security bench: Cannot reach trust server at this time #431

rirlswift opened this issue Apr 28, 2020 · 3 comments

Comments

@rirlswift
Copy link

I am running the security bench per the documentation for Ubuntu

docker run -it --net host --pid host --userns host --cap-add audit_control \
    -e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \
    -v /etc:/etc:ro \
    -v /lib/systemd/system:/lib/systemd/system:ro \
    -v /usr/bin/containerd:/usr/bin/containerd:ro \
    -v /usr/bin/runc:/usr/bin/runc:ro \
    -v /usr/lib/systemd:/usr/lib/systemd:ro \
    -v /var/lib:/var/lib:ro \
    -v /var/run/docker.sock:/var/run/docker.sock:ro \
    --label docker_bench_security \
    docker/docker-bench-security

I get this output:

docker: unable to reach trust server at this time: 500.
See 'docker run --help'.

Is there something I am missing? Do I need to setup the DTR per here

I'd truly appreciate any help or suggestions or guidance.

@konstruktoid
Copy link
Collaborator

Hi @rirlswift, are you running the officail Docker image, or have you built your own?
If you're using the official image, could you please try running the script on the host or build your own image?

@rirlswift
Copy link
Author

Hey konstruktoid,
Thanks for helping me get this to work. I am now running the script on the host via

git clone https://github.com/docker/docker-bench-security.git
cd docker-bench-security
sudo sh docker-bench-security.sh

Looks great, even on CE.

@konstruktoid
Copy link
Collaborator

ref #405

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants