hckops/hckctl

The Security Automation Toolkit

hckctl's Issues

shared folder flag

By default the content of ${HOME}/.local/state/hck/share is automatically

• mounted as path - for the docker provider
• uploaded to a shared volume with the pod - for the kube provider

The current approach works but it is not efficient: add a flag to specify the path to upload and disable this feature by default

cloud provider preview

Placeholder to collect feedback and interest about the managed cloud platform, as of today it's in private preview only.
Please, leave a comment or a 👍🏻 and we'll make sure to keep you posted and let you know about general availability.

Don't forget to ⭐ the project!

shared folder issue

On macOS the docker provider is not working. How to reproduce the error

brew install homebrew/cask/docker
brew install hckops/tap/hckctl
hckctl box alpine

Error

2023-11-15T21:58:48Z WRN ../../home/runner/work/hckctl/hckctl/internal/command/box/common.go:54 > error invoking client: provider=docker
error="error container create: Error response from daemon: invalid mount config for type \"bind\": bind source path does not exist: /host_mnt/Users/<REDACTED>/Library/Application Support/hck/share" sessionId=ijea7 source=hckctl

Similar error with the kube provider

2023-11-15T22:18:31Z WRN ../../home/runner/work/hckctl/hckctl/internal/command/box/common.go:54 > error invoking client: provider=kube
error="error copy invalid localPath=/Users/<REDACTED>/Library/Application Support/hck/share" sessionId=g3gjr source=hckctl

For kube the quick solution is to run

mkdir -p /Users/admin/Library/Application\ Support/hck/share

Investigate

• github.com/adrg/xdg
• docker why the path is read-only by default and why it uses the prefix /host_mnt which requires the user to manually edit the setting in Docker Desktop i.e. Settings > Resources > File sharing - the folder shouldn't be read-only
• kube why the folder is not automatically created