Mondoo.com

Overview

Installation

mql & cnspec

via Shell Script (Linux and macOS)

https://install.mondoo.com/sh

bash -c "$(curl -sSL https://install.mondoo.com/sh)"

via PowerShell (Windows)

https://install.mondoo.com/ps1/mql

Set-ExecutionPolicy Unrestricted -Scope Process -Force;
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072;
iex ((New-Object System.Net.WebClient).DownloadString('https://install.mondoo.com/ps1/mql'));
Install-Mondoo -Product mql;

login

To login with Mondoo Platform:

mql login -t 'eyJh...llZ4BW'

cnspec login -t 'eyJh...llZ4BW'

Package Information

https://install.mondoo.com/package/{package}/{platform}/{arch}/{filetype}/{version}/{method}

The arguments support the following values

# Download the latest version
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/latest/download

# Get the filename for the latest Mondoo Client
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/latest/filename

# Get the version for the latest Mondoo Client
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/latest/version

# Get the sha256 for the latest Mondoo Client
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/latest/sha256

# Download a specific version of Mondoo Client
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/5.21.1/download

# Get the sha256 for a specific version of Mondoo Client
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/5.21.1/sha256

# Download the latest xgrep or mhunt binary, extracted from the tar.gz on the fly
https://install.mondoo.com/package/xgrep/linux/amd64/tar.gz/latest/download?extract=true
https://install.mondoo.com/package/mhunt/linux/amd64/tar.gz/latest/download?extract=true

Release Manifest

https://install.mondoo.com/package/{package}/latest.json

The endpoints above answer for one platform, which suits a script that already
knows what it is running on. A binary updating itself wants the whole manifest:
one document carrying the version and every platform's download URL and sha256,
so it can compare the version and pick its own entry.

# The full release manifest for cnspec
https://install.mondoo.com/package/cnspec/latest.json

Channels

?channel= selects a release track. It works on every package endpoint above,
and on /providers/.

channel what it resolves to
stable (default) the newest release with no pre-release segment
preview the newest release overall, release candidates included
edge snapshot builds, a separate tree

preview is never older than stable: when a release candidate becomes a
final release, preview follows it forward rather than leaving you on the
candidate. An unrecognised channel is an error, not a silent fallback.

# The release manifest for the pre-release track
https://install.mondoo.com/package/cnspec/latest.json?channel=preview

# One platform, on preview
https://install.mondoo.com/package/cnspec/linux/amd64/tar.gz/latest/download?channel=preview

# Which provider versions the preview track is on
https://install.mondoo.com/providers/latest.json?channel=preview

A pinned version ignores the channel: artifacts live in one place, and only the
pointer to "latest" differs between tracks.

Kubernetes

Kubernetes Manifests to install the operator

https://install.mondoo.com/k8s/operator

kubectl apply -f https://install.mondoo.com/k8s/operator

Kubernetes Manifest to configure the MondooAuditConfig

https://install.mondoo.com/k8s/auditconfig?nodes=true&kubernetesResources=true

kubectl apply -f https://install.mondoo.com/k8s/auditconfig?nodes=true&kubernetesResources=true

To browse all releases, please visit https://releases.mondoo.com