aquasecurity / kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
Apache License 2.0
7.06k stars 1.23k forks source link

I am trying to install kube-bench_0.6.2_linux_amd64.rpm in Suse Linux but it is failing #1258

Open vinodboruah opened 2 years ago

vinodboruah commented 2 years ago

I downloaded the package from https://github.com/aquasecurity/kube-bench/releases/download/v0.6.2/kube-bench_0.6.2_linux_amd64.rpm -o kube-bench_0.6.2_linux_amd64.rpm following the documentation - https://github.com/aquasecurity/kube-bench/blob/main/docs/installation.md

After successful download, I fired the following command and it gives me the following vm2047:~/vinod # zypper in -y kube-bench_0.6.2_linux_amd64.rpm Refreshing service 'Basesystem_Module_x86_64'. Refreshing service 'Containers_Module_x86_64'. Refreshing service 'Desktop_Applications_Module_x86_64'. Refreshing service 'Legacy_Module_x86_64'. Refreshing service 'Public_Cloud_Module_x86_64'. Refreshing service 'Python_2_Module_x86_64'. Refreshing service 'SUSE_Linux_Enterprise_High_Availability_Extension_x86_64'. Refreshing service 'SUSE_Linux_Enterprise_Server_x86_64'. Refreshing service 'SUSE_Package_Hub_x86_64'. Refreshing service 'Server_Applications_Module_x86_64'. Loading repository data... Reading installed packages... Resolving package dependencies...

The following NEW package is going to be installed: kube-bench

The following package has no support information from its vendor: kube-bench

1 new package to install. Overall download size: 7.6 MiB. Already cached: 0 B. After the operation, additional 17.5 MiB will be used. Continue? [y/n/v/...? shows all options] (y): y Retrieving package kube-bench-0.6.2-1.x86_64 (1/1), 7.6 MiB ( 17.5 MiB unpacked) kube-bench_0.6.2_linux_amd64.rpm: Package is not signed!

kube-bench-0.6.2-1.x86_64 (Plain RPM files cache): Signature verification failed [6-File is unsigned] Abort, retry, ignore? [a/r/i] (a): a Problem occurred during or after installation or removal of packages: Installation has been aborted as directed suse .

mozillazg commented 2 years ago

@vinodboruah Looks like you should ignore the signature verification failed:

kube-bench-0.6.2-1.x86_64 (Plain RPM files cache): Signature verification failed [6-File is unsigned]
Abort, retry, ignore? [a/r/i] (a): i