DOKK / manpages / debian 13 / openscap-utils / oscap-im.8.en
oscap-im(8) System Administration Utilities oscap-im(8)

oscap-im - Tool for building hardened bootable container images

The oscap-im tool is a convenience script that makes building hardened bootable container images easier. This tool is designed to be used during the build of the bootable container image. Include oscap-im in your Containerfile that will be used to build your bootable container image. The oscap-im runs oscap tool on a given container image.

The oscap-im tool can't be used anywhere else than in a Containerfile.

oscap-im [OPTION...] DATASTREAM_FILE

Usage of the tool mimics usage and options of oscap(8) tool.

ID of the profile to be evaluated.
Use given file for XCCDF tailoring. Select profile from tailoring file to apply using --profile. If both --tailoring-file and --tailoring-id are specified, --tailoring-file takes priority.
Use tailoring component in input source data stream for XCCDF tailoring. The tailoring component must be specified by its Ref-ID (value of component-ref/@id attribute in input source data stream). Select profile from tailoring component to apply using --profile. If both --tailoring-file and --tailoring-id are specified, --tailoring-file takes priority.
Writes results to a given FILE in Asset Reporting Format.
Write HTML report into FILE.

Please report bugs using https://github.com/OpenSCAP/openscap/issues


Jan Černý <jcerny@redhat.com>
January 2025 Red Hat, Inc.