Need help to install and run Clair on windows machine

[Lingom KSR]

Hi, 

I'm new to the container security concept. I would like to get guidance to find the vulnerabilities in the Container images using Quay Clair.

My requirement is, scan the images available in my local docker environment. I just tried the following Clair concepts, but could not get any outputs.. sometimes errors.

--Scan using Clair Docker Compose File

docker-compose up
docker pull infoslack/dvwad
ocker-compose exec clairctl clairctl analyze -l infoslack/dvwa

-- Using Docker file
docker run -p 5432:5432 -d --name db arminc/clair-db:2017-05-05
docker run -p 6060:6060 --link db:postgres -d --name clair arminc/clair-local-scan:v2.0.0-rc.0

clair-scanner nginx:1.11.6-alpine example-nginx.yaml http://YOUR_LOCAL_IP:6060 YOUR_LOCAL_IP

I also tried with "Analyze Local Images" CLI; since it is deprecated by Clair, I could not go further.

Any help would be appreciated!

Note: I'm using a Windows machine

Thank You.

Lingom KSR

STATEMENT OF CONFIDENTIALITY
The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. If you are not the intended recipient, or the person responsible for delivering the e-mail to the intended recipient, you have received this message in error and any use, dissemination, forwarding, printing, or copying is strictly prohibited. In such an event, please notify immediately at sup...@securin.io and destroy all copies of this message and any attachments.

[Hank Donnay]

On Tue, Jul 06, 2021 at 11:26:30AM +0530, Lingom KSR wrote:
>My requirement is, scan the images available in my local docker environment. I just tried the following Clair concepts, but could not get any outputs.. sometimes errors.
>
>--Scan using Clair Docker Compose File

>docker-compose up

What docker-compose file is this?

>docker pull infoslack/dvwad
>docker-compose exec clairctl clairctl analyze -l infoslack/dvwa

Clairctl doesn't have an "analyze" command, I suspect you may be using
a different, older project called "clairctl".

>-- Using Docker file
>docker run -p 5432:5432 -d --name db arminc/clair-db:2017-05-05
>docker run -p 6060:6060 --link db:postgres -d --name clair arminc/clair-local-scan:v2.0.0-rc.0

These aren't maintained by the clair project and are for an extremely
old version. None of the current maintainers have experience with that
version, which is significantly different than the current version.

>Note: I'm using a Windows machine

If you're using containers, I would hope this would work but it's
untested.

--
hank