|
⇤ ← Revision 1 as of 2026-10-04 09:41:48
Size: 212
Comment:
|
Size: 2373
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 6: | Line 6: |
| {{{ cd ~ git clone https://github.com/cisagov/cset.git cd cset find . -name "Dockerfile" ./CSETWebNg/Dockerfile ./CSETWebApi/Dockerfile cp .env.example .env }}} ''' .env ''' {{{ # CSET Web API ConnectionStrings__CSET_DB="data source=mssql,1433;initial catalog=CSET;User Id=sa;Password=********;Encrypt=False;TrustServerCertificate=True;" # Optional: URL to a custom CA certificate (for corporate proxies/VPNs) # CA_CERT_URL=https://your-internal-cert-store/root_ca.crt # Host port overrides for Docker Compose (Optional) WEB_PORT=4200 #WEB_TLS_PORT=443 WEB_TLS_PORT=8443 API_PORT=5000 # MSSQL Server MSSQL_SA_PASSWORD=******** ACCEPT_EULA=Y }}} Run compose {{{#!highlight sh docker compose up docker compose ps NAME IMAGE COMMAND SERVICE CREATED STATUS PORTS cset-api ghcr.io/cisagov/cset/api:latest "dotnet CSETWebCore.…" api 53 seconds ago Up 52 seconds 0.0.0.0:5000->5000/tcp, :::5000->5000/tcp cset-mssql mcr.microsoft.com/mssql/server:2022-CU13-ubuntu-22.04 "/opt/mssql/bin/perm…" sqlserver 53 seconds ago Up 52 seconds 0.0.0.0:1433->1433/tcp, :::1433->1433/tcp cset-web ghcr.io/cisagov/cset/web:latest "/docker-entrypoint.…" web 53 seconds ago Up 52 seconds 0.0.0.0:4200->80/tcp, :::4200->80/tcp, 0.0.0.0:8443->443/tcp, :::8443->443/tcp # http://localhost:4200/ docker compose exec sqlserver bash apt update apt upgrade -y apt install nano vim -y cd /opt/mssql-tools/bin/ ./sqlcmd ./sqlcmd -S localhost -U sa -P ******** select name from sys.databases go master tempdb model msdb exit docker compose exec sqlserver bash cd /var/opt/mssql/backup/ cd bak-files cat CSET.bak.part_a* > /tmp/CSET.bak cp /var/opt/mssql/backup/restoredb.sql /tmp cd /tmp cp restoredb.sql restoredb.sql.ori chmod 666 restoredb.sql chown root restoredb.sql nano restoredb.sql # update to point to /tmp/CSET.bak /opt/mssql-tools/bin/sqlcmd -U 'sa' -P "********" -i /tmp/restoredb.sql }}} |
Contents
cset
Cyber Security Evaluation Tool for asset owners with the primary objective of reducing the risk to the nation’s critical infrastructure.
cd ~ git clone https://github.com/cisagov/cset.git cd cset find . -name "Dockerfile" ./CSETWebNg/Dockerfile ./CSETWebApi/Dockerfile cp .env.example .env
.env
# CSET Web API ConnectionStrings__CSET_DB="data source=mssql,1433;initial catalog=CSET;User Id=sa;Password=********;Encrypt=False;TrustServerCertificate=True;" # Optional: URL to a custom CA certificate (for corporate proxies/VPNs) # CA_CERT_URL=https://your-internal-cert-store/root_ca.crt # Host port overrides for Docker Compose (Optional) WEB_PORT=4200 #WEB_TLS_PORT=443 WEB_TLS_PORT=8443 API_PORT=5000 # MSSQL Server MSSQL_SA_PASSWORD=******** ACCEPT_EULA=Y
Run compose
1 docker compose up
2
3 docker compose ps
4 NAME IMAGE COMMAND SERVICE CREATED STATUS PORTS
5 cset-api ghcr.io/cisagov/cset/api:latest "dotnet CSETWebCore.…" api 53 seconds ago Up 52 seconds 0.0.0.0:5000->5000/tcp, :::5000->5000/tcp
6 cset-mssql mcr.microsoft.com/mssql/server:2022-CU13-ubuntu-22.04 "/opt/mssql/bin/perm…" sqlserver 53 seconds ago Up 52 seconds 0.0.0.0:1433->1433/tcp, :::1433->1433/tcp
7 cset-web ghcr.io/cisagov/cset/web:latest "/docker-entrypoint.…" web 53 seconds ago Up 52 seconds 0.0.0.0:4200->80/tcp, :::4200->80/tcp, 0.0.0.0:8443->443/tcp, :::8443->443/tcp
8
9 # http://localhost:4200/
10
11 docker compose exec sqlserver bash
12 apt update
13 apt upgrade -y
14 apt install nano vim -y
15
16 cd /opt/mssql-tools/bin/
17 ./sqlcmd
18 ./sqlcmd -S localhost -U sa -P ********
19 select name from sys.databases
20 go
21 master
22 tempdb
23 model
24 msdb
25 exit
26
27 docker compose exec sqlserver bash
28 cd /var/opt/mssql/backup/
29 cd bak-files
30 cat CSET.bak.part_a* > /tmp/CSET.bak
31 cp /var/opt/mssql/backup/restoredb.sql /tmp
32 cd /tmp
33 cp restoredb.sql restoredb.sql.ori
34 chmod 666 restoredb.sql
35 chown root restoredb.sql
36 nano restoredb.sql
37 # update to point to /tmp/CSET.bak
38 /opt/mssql-tools/bin/sqlcmd -U 'sa' -P "********" -i /tmp/restoredb.sql