Mondoo.com

Overview

Installation

mql & cnspec

via Shell Script (Linux and macOS)

https://install.mondoo.com/sh

bash -c "$(curl -sSL https://install.mondoo.com/sh)"

via PowerShell (Windows)

https://install.mondoo.com/ps1/mql

Set-ExecutionPolicy Unrestricted -Scope Process -Force;
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072;
iex ((New-Object System.Net.WebClient).DownloadString('https://install.mondoo.com/ps1/mql'));
Install-Mondoo -Product mql;

login

To login with Mondoo Platform:

mql login -t 'eyJh...llZ4BW'
cnspec login -t 'eyJh...llZ4BW'

Package Information

https://install.mondoo.com/package/{package}/{platform}/{arch}/{filetype}/{version}/{method}

The arguments support the following values

# Download the latest version
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/latest/download
# Get the filename for the latest Mondoo Client
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/latest/filename
# Get the version for the latest Mondoo Client
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/latest/version
# Get the sha256 for the latest Mondoo Client
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/latest/sha256
# Download a specific version of Mondoo Client
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/5.21.1/download
# Get the sha256 for a specific version of Mondoo Client
https://install.mondoo.com/package/mondoo/linux/arm64/rpm/5.21.1/sha256
# Download the latest xgrep or mhunt binary, extracted from the tar.gz on the fly
https://install.mondoo.com/package/xgrep/linux/amd64/tar.gz/latest/download?extract=true
https://install.mondoo.com/package/mhunt/linux/amd64/tar.gz/latest/download?extract=true

Release Manifest

https://install.mondoo.com/package/{package}/latest.json

The endpoints above answer for one platform, which suits a script that already
knows what it is running on. A binary updating itself wants the whole manifest:
one document carrying the version and every platform's download URL and sha256,
so it can compare the version and pick its own entry.

Add ?channel=edge for the edge channel.

# The full release manifest for cnspec
https://install.mondoo.com/package/cnspec/latest.json

Kubernetes

Kubernetes Manifests to install the operator

https://install.mondoo.com/k8s/operator

kubectl apply -f https://install.mondoo.com/k8s/operator

Kubernetes Manifest to configure the MondooAuditConfig

https://install.mondoo.com/k8s/auditconfig?nodes=true&kubernetesResources=true

kubectl apply -f https://install.mondoo.com/k8s/auditconfig?nodes=true&kubernetesResources=true

To browse all releases, please visit https://releases.mondoo.com