mondoohq/installer
GitHub: mondoohq/installer
提供 Mondoo 安全扫描工具 cnspec 和 mql 的跨平台安装脚本与包管理支持。
Stars: 83 | Forks: 13
# 概述
- [安装](#installation)
- [mql](#mql)
- [cnspec](#cnspec)
- [扫描您的目标平台](#scan-your-target-platform)
- [包信息](#package-information)
- [Kubernetes](#kubernetes)
## 状态
- Docker 容器: [](https://github.com/mondoohq/installer/actions/workflows/test-released-docker.yaml)
- Homebrew: [](https://github.com/mondoohq/installer/actions/workflows/test-released-docker.yaml)
- Install.sh: [](https://github.com/mondoohq/installer/actions/workflows/test-released-install-sh.yaml.yaml)
- Install.ps1: [](https://github.com/mondoohq/installer/actions/workflows/test-released-install-ps1.yaml)
- macOS Pkg: [](https://github.com/mondoohq/installer/actions/workflows/test-released-osx-pkg.yaml)
- Arch Linux: [](https://github.com/mondoohq/installer/actions/workflows/test-released-archlinux.yaml)
## 安装
安装 `mql` 和 `cnspec` 最简单的方法是使用安装脚本。
### 通过 Shell 脚本 (Linux 和 macOS)
[`https://install.mondoo.com/sh`](https://install.mondoo.com/sh)
```
bash -c "$(curl -sSL https://install.mondoo.com/sh)"
```
### 通过 PowerShell (Windows)
[`https://install.mondoo.com/ps1`](https://install.mondoo.com/ps1)
```
Set-ExecutionPolicy Unrestricted -Scope Process -Force;
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072;
iex ((New-Object System.Net.WebClient).DownloadString('https://install.mondoo.com/ps1'));
Install-Mondoo;
```
## 扫描您的目标平台
扫描您的[目标平台](https://github.com/mondoohq/cnspec/#supported-targets)：
```
# 使用 incident 和 inventory query pack 查询系统信息
mql scan aws
# 扫描平台以查找安全漏洞
cnspec scan aws
```
注册 Mondoo 账户以访问更多策略并存储报告。欲了解更多信息，请[联系我们](https://mondoo.com/contact)。
```
cnspec login -t 'eyJh...llZ4BW'
```
mql 和 cnspec 支持本地和远程目标，包括服务器（Linux、Windows、macOS）、云（AWS、Azure、Google、VMware）、Kubernetes（EKS、GKE、AKS、自管理）、容器、容器镜像仓库、SaaS 产品（Google Workspace、M365、GitHub、GitLab）等。
运行扫描：
```
# 扫描您的本地主机
cnspec scan local
# 扫描云环境
cnspec scan aws
cnspec scan gcp
cnspec scan azure
# 扫描 Kubernetes 集群
cnspec scan k8s
# 从远程 registry 扫描 Docker 镜像
cnspec scan docker image debian:12
# 扫描 Docker 容器（使用 docker ps 获取 ID）
cnspec scan docker container 00fa961d6b6a
# 通过 SSH 扫描系统
cnspec scan ssh ec2-user@54.76.229.223
```
## 包信息
`https://install.mondoo.com/package/cnspec/{platform}/{arch}/{filetype}/{version}/{method}`
参数支持以下值：
| 参数 | 值 |
| ---------- | ---------------------------------------------------- |
| `platform` | `linux`, `windows`, `darwin` |
| `arch` | `amd64`, `arm64`, `armv7`, `armv6`, `386`, `ppc64le` |
| `filetype` | `tar.gz`, `deb`, `rpm`, `zip`, `pkg`, `msi` |
| `version` | `latest` 或特定版本号 |
| `method` | `download`, `filename`, `version`, `sha256` |
```
# 下载最新版本
https://install.mondoo.com/package/cnspec/linux/arm64/rpm/latest/download
```
```
# 获取最新 cnspec 包的文件名
https://install.mondoo.com/package/cnspec/linux/arm64/rpm/latest/filename
```
```
# 获取最新 cnspec 包的版本
https://install.mondoo.com/package/cnspec/linux/arm64/rpm/latest/version
```
```
# 获取最新 cnspec 客户端的 sha256
https://install.mondoo.com/package/cnspec/linux/arm64/rpm/latest/sha256
```
```
# 下载特定版本的 cnspec 客户端
https://install.mondoo.com/package/cnspec/linux/arm64/rpm/5.21.1/download
```
```
# 获取特定版本 cnspec 客户端的 sha256
https://install.mondoo.com/package/cnspec/linux/arm64/rpm/5.21.1/sha256
```
## Kubernetes
## 用于安装 Operator 的 Kubernetes Manifests
[`https://install.mondoo.com/k8s/operator`](https://install.mondoo.com/k8s/operator)
```
kubectl apply -f https://install.mondoo.com/k8s/operator
```
### 用于配置 MondooAuditConfig 的 Kubernetes Manifest
[`https://install.mondoo.com/k8s/auditconfig?nodes=true&kubernetesResources=true`](https://install.mondoo.com/k8s/auditconfig?nodes=true&kubernetesResources=true)
```
kubectl apply -f https://install.mondoo.com/k8s/auditconfig?nodes=true&kubernetesResources=true
```
要浏览所有版本，请访问 [https://releases.mondoo.com](https://releases.mondoo.com)
## 参考资料
**安装脚本源码**
- [install.sh](https://github.com/mondoohq/installer/blob/main/install.sh) - `mql` 和 `cnspec` Bash 安装程序
- [download.sh](https://github.com/mondoohq/installer/blob/main/download.sh) - `mql` 和 `cnspec` Bash 二进制下载器
- [install.ps1](https://github.com/mondoohq/installer/blob/main/install.ps1) - `mql` 和 `cnspec` PowerShell 安装程序
- [download.ps1](https://github.com/mondoohq/installer/blob/main/download.ps1) - `mql` 和 `cnspec` PowerShell 二进制下载器
**配置管理**
- [mql 和 cnspec Ansible Role](https://github.com/mondoohq/ansible-mondoo)
- [mql 和 cnspec Chef Cookbook](https://github.com/mondoohq/chef-mondoo)
**Docker 容器**
- [https://hub.docker.com/r/mondoo/mql](https://hub.docker.com/r/mondoo/mql)
- [https://hub.docker.com/r/mondoo/cnspec](https://hub.docker.com/r/mondoo/cnspec)
**版本发布**
- [发布说明](https://mondoo.com/releases)
- [包下载](https://releases.mondoo.com)
## 代码签名验证
Mondoo 对 Microsoft Windows 可执行文件、PowerShell 脚本、Linux 包进行签名，并对 Apple macOS 可执行文件进行代码签名。公开的代码签名证书和公开的 GPG 密钥存储在 [安装程序仓库](https://github.com/mondoohq/installer) 中。
- 用于代码签名的公开证书 `public-code-signing.cer`
- 用于包签名的公开 GPG 密钥 `public-package-signing.gpg`
## Microsoft
**注意：** cmdlet `Get-AuthenticodeSignature` 目前在 PowerShell Core 中不可用，因此您需要 Windows 环境来运行它。
自 `11.66.1` 版本起，我们采用了 [Azure Trusted Signing](https://learn.microsoft.com/en-us/azure/trusted-signing/overview)，它提供大约每 72 小时轮换一次的短期代码签名证书。这意味着证书指纹在不同版本之间会有所不同，不能作为可靠的验证方法。
要验证 `mql` 或 `cnspec` 可执行文件的完整性，请使用 Microsoft 的 `Get-AuthenticodeSignature` PowerShell 命令，并验证**签名状态**为 `Valid`。此外，**签名者 (Subject)** 为：`CN=Mondoo, Inc.`，**颁发者** 为：`CN=Microsoft ID Verified CS EOC CA 01, O=Microsoft Corporation, C=US`
```
$file = ".\mondoo_11.66.1_windows_amd64.msi"
(Get-AuthenticodeSignature -FilePath $file).SignerCertificate | Format-List
Subject : CN="Mondoo, Inc.", O="Mondoo, Inc.", L=Cary, S=North Carolina, C=US
Issuer : CN=Microsoft ID Verified CS EOC CA 01, O=Microsoft Corporation, C=US
Thumbprint : 6134EB03311452EFFFA36EFC767F4BEBE29A4107
FriendlyName :
NotBefore : 05/08/2025 14:08:51
NotAfter : 08/08/2025 14:08:51
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid...}
```
要验证 Mondoo PowerShell `install.ps1` 脚本的完整性，请使用 Microsoft 的 `Get-AuthenticodeSignature` PowerShell，并验证**签名状态**为 `Valid`。
```
Get-AuthenticodeSignature .\install.ps1
SignerCertificate Status
----------------- ------
6134EB03311452EFFFA36EFC767F4BEBE29A4107 Valid
```
### 之前的签名者
在 `11.66.1` 版本之前，我们使用 DigiCert 对我们的 Microsoft 版本进行签名。这些版本使用由 `CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1, O="DigiCert, Inc.", C=US` 颁发的证书进行签名，并具有静态指纹 `EE97D1E3C6CD96E06C47B0233DD7C6CE2684FA50`。
### Apple macOS
要验证 `mql` 或 `cnspec` 可执行文件的完整性，请使用 Apple 的 codesign 工具并比较 TeamIdentifier 字段，该字段应与下方的内容匹配。
```
codesign --verify -d --verbose=2 /usr/local/bin/cnspec
Executable=/Library/Mondoo/bin/cnspec
Identifier=cnspec
Format=Mach-O universal (x86_64 arm64)
CodeDirectory v=20500 size=2124850 flags=0x10000(runtime) hashes=66396+2 location=embedded
Signature size=9054
Authority=Developer ID Application: Mondoo, Inc. (W2KUBWKG84)
Authority=Developer ID Certification Authority
Authority=Apple Root CA
Timestamp=25. Apr 2023 at 19:47:53
Info.plist=not bound
TeamIdentifier=W2KUBWKG84
Runtime Version=11.0.0
Sealed Resources=none
Internal requirements count=1 size=168
```
## 当前和以前的 PGP 公钥
### 当前密钥
来自 Mondoo 的当前 PGP 公钥 ID 为 `00E1C42B` / 指纹为 `4CE909E26AE7439C39CE7647AC69C65100E1C42B`，内容为：
```
-----BEGIN PGP PUBLIC KEY BLOCK-----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=9LQ9
-----END PGP PUBLIC KEY BLOCK-----
```
#### 以前的密钥
密钥 ID `00E1C42B` / 指纹 `4CE909E26AE7439C39CE7647AC69C65100E1C42B`：
```
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBGAF59cBEAC2qCHNY7b8vqKNfGkmgUiOQM7Ags2qL7Z6wlZR+6PjfHjCO7c/
zJgCOSbY1O/XcwnsntQUBlAjZ7yzIBvvvGjmL+3vW1flKl4ZlgLnufHB9oUXtkVd
AMSnVD/LztLKgDMad4KqNwGHuXOa3Ewl5Fv7ZQBHo0hLjslr/mbjG3CtJovXCuS1
HHklLwTap5C/SHx6DIQvJ5DV7GyhCJkRvVxs495XPEIjgv5nyftWhkDqVQxdHoSZ
RoYvoKytG5isDTlv3qbUgPFN6VYvMMEbGegwQpYvdwq6WHNFgri/Abq+yWKZ+Ysn
t8mXEVZR7onfH8jnI2X2XYrIw/c7GHcmkROU+sDvjKnEY/QfcnZUYQnsYmSW34l5
rOVoqQNEutlu41r3KZ1Z7fA8aRYo++D6IusmgIZYA0MtverWPc/S+ZkirQ/SCmNm
9CHV2iLHBJ2kYZ/sYYXCigOGAoJZ1QsTiXpKOB6X/IoDh5zw2yZQm+9GSQ1OGFlr
AWz9tPv98UpSNqGxJAoigS3aMYUobgskXL+dnCkAgb9kLIuDvp3e5EWJr3qmowC7
JMfphTtjrIVu8IgnpjwULlW1WIh3IUp4YfTN51D3NeeAIXuJYhHA5QSjkK9k+Rst
ElLYDWlvF4vZUgvF1a0DGCc5QcRousnavh4ReivLZZVdhxghFdRmO2NgMwARAQAB
tB9Nb25kb28gSW5jIDxzZWN1cml0eUBtb25kb28uaW8+iQJUBBMBCgA+FiEETOkJ
4mrnQ5w5znZHrGnGUQDhxCsFAmAF59cCGwMFCQPCZwAFCwkIBwMFFQoJCAsFFgID
AQACHgECF4AACgkQrGnGUQDhxCs89A/9F70jyBQtIe4BSk3spjk66HoqWfZnxNxH
j9R5v5Nqda05hj8QrSzqiflIac2mUPUln5o5rdORtHvxAr2PGTLJaI9sN4T/+gKg
6Ks324sP1TmOrgiQLzNzd8CE65tGeaqAWUnhOZFS8diWJ229pc9s+OPa6Cz0jz2S
ctfElfRZPEIWziIlCI4UBSOlJk0J6O/xMw+t2ljAcN8+zb3RoPk3e8Mvs6YxZ/29
e4CpdF52v1IdvxvFkw+kb5/g6m9yrPR6ywW40/Laxiyqr0H/8T7kKrUE8cnD/wii
gJ1l3uPIJKJ4EVDEsmDSjrMjhxdNWwjiLpgDImh505JlyqP1Q3IP07T4Z6IUlrmT
XC1ihRFrMSi7EesO5aYcv2sujMcjO9sMAkcdlI+zOUTQTlruO1xH54NmKcRPalx4
F7XhOTaP+0e8VaE3b3l1p0+YeENtxQBp6ABKDNK1FYG/IeHYEBr+X9gwvGgi2TAi
8sOij3hQClGMvtCNU1XB416lkYCsr2Zwwzl8QDDn7w5j2wfMVbmY+ekTu2gf5yZe
RQtmhz5cA+oCPB7VhjUzv/nUiXXzJK1KOUSYgHnc1/c1SStejfGpYlIzxxAOG4q7
KETM51TS4eHRYOE+xVTXM57wPzsltnw2pxFNyde7LJLntJZNmm/28AbYREuTiKZM
1e1/ShfoZDy5Ag0EYAXn1wEQAMAiLOUBM5FgrU32MS7MCDpbyoiWPmPPHE2onMEX
zpX5YH1a5JedUwYdAkc1x4WtUmSM3PnrfUA2gD4JX/ZrnyjK2kC7wmIM61oOARBL
/Mmyk7zb5+t/4TlVB0Q1AI9ylPrZPfxYEJ+VaUKJB+pixqilbc6SmuDW3Q7Q9fdF
3/Yan3nbewpt11zV3zPZaZfeFfCByOIwmpU9NJXULqV+oW99u0Cj8N532gMTIEO2
4oPBm+e71sy9Kv0OwXrlrJwUHhZJ7WciOI1XthxDgoqfxzW4EP6kjrIkQ4LltnMH
tpeKv6yohlLOZiWNmzPWAWnMbpXJCmUpgeTKaxxjXUehsstFbMGEYsGFM49Z3092
AXuGrYnoqpZNv9its7+Ly15wXpdXPPEIjqW9KTJqk+OoO7YopGE2XRKIDAZc1Qtx
zi9gAcwkOvIyhziZvzgyjbi/dtQa/vFWPSih6F3P9TPey82/eSBfRUwdM+UKP3CD
3dNLWHRigtMT/p1dlIRFXRlxYzAjZ4EwRg62eGScttP6PbPO+3ITVOCpMXAmnguH
DrpvuyuLmAwLpW2Q18EVtjV+UuLSbnF4nieUsT5iIWmy7JhRsLEu1Yerws4bTyoA
qNqDaZ1IottzkOHJpvNu5ntiJx8T/M8yuthFFy9jhbTDeiSTV+iESDVAtVVqhYT6
nyDlABEBAAGJAjwEGAEKACYWIQRM6QniaudDnDnOdkesacZRAOHEKwUCYAXn1wIb
DAUJA8JnAAAKCRCsacZRAOHEK6OmD/45CWnEVuoo00eGreH6B1rUf21y950jSAZw
sRmqO2vnsiprKnNnqj1EXNRB790MetiPqpWsHK6tvTWXcP3ofiDbRbVWLCYf+T6P
bnk1+SJI8h4f3EZmy5/PBvL4WxPuO+87o0AD+gM/8D+kMd5eUYeDB38TPs552IgB
brPCW+yjGyTqCrKKfAwmhSos2CrDtJdYW2h9LjwRpir3P15P/A3xkvWk15nUqMUV
tWAz5812EYTTca1WrVZF5myMn2X+E5iPhiuM+1BjrbHbbrhkMicwNy8Q2gtDVK7c
6lByh2V0+GZUdy+4AHNwyMOZSTwqTZy/EqoRB2GXP/lf+g+vmIhnZscECwaWB0OE
Y/KudZ2ctccEflsggRKtDd5a+5fBrPunnL7qFZ5UY5RTRTzkD+JLHiLnEUh1o6qf
qZxixn9jnPwkqgwGXADdUOGdPszAp5ohGHrofuiwrpguxSNCnmQgXtYqo2OY56jh
WDrNAf5A6Q67ByxpgoAIVsmmhgXGqxwErHvXHZOkoEEQzj0JQsvHEKozJK0DlTmS
Sqd0wu8Tg3C2phps++Y/6AqmEzQbXSqukPlQ1hYBAL3icyZ0sGmjZ33/NqBFKtWl
V7tRD7Y58ftpqjOd9BIzc4S05RJLUEb34XFfUPasFWUVeqUcaqi8CyQDa+RBZeSj
A8Hssvbbfw==
=dMNn
-----END PGP PUBLIC KEY BLOCK-----
```
您可以从以下位置下载 Mondoo 的公开 PGP 密钥（两者完全相同）：
- [https://releases.mondoo.com/debian/pubkey.gpg](https://releases.mondoo.com/debian/pubkey.gpg)
- [https://releases.mondoo.com/rpm/pubkey.gpg](https://releases.mondoo.com/rpm/pubkey.gpg)
标签：AI合规, AI应用开发, Awesome, cnquery, cnspec, CSV导出, Cutter, DevSecOps, Docker, Homebrew, IPv6, Libemu, Mondoo, MQL, OpenCanary, PowerShell, Shell Script, 上游代理, 包管理, 子域名突变, 安全防御评估, 安装脚本, 数据集, 策略即代码, 系统提示词, 系统管理, 聊天机器人安全, 自动化运维, 请求拦截