cset

Cyber Security Evaluation Tool for asset owners with the primary objective of reducing the risk to the nation’s critical infrastructure.

https://github.com/cisagov/cset

   1 cd ~
   2 git clone https://github.com/cisagov/cset.git 
   3 cd cset 
   4 find . -name "Dockerfile"
   5 ./CSETWebNg/Dockerfile
   6 ./CSETWebApi/Dockerfile
   7 cp .env.example .env

.env

   1 # CSET Web API
   2 ConnectionStrings__CSET_DB="data source=mssql,1433;initial catalog=CSET;User Id=sa;Password=********;Encrypt=False;TrustServerCertificate=True;"
   3 
   4 # Optional: URL to a custom CA certificate (for corporate proxies/VPNs)
   5 # CA_CERT_URL=https://your-internal-cert-store/root_ca.crt
   6 
   7 # Host port overrides for Docker Compose (Optional)
   8 WEB_PORT=4200
   9 #WEB_TLS_PORT=443
  10 WEB_TLS_PORT=8443
  11 API_PORT=5000
  12 
  13 # MSSQL Server
  14 MSSQL_SA_PASSWORD=********
  15 ACCEPT_EULA=Y

Run compose

   1 docker compose up
   2 
   3 docker compose ps
   4 NAME         IMAGE                                                   COMMAND                  SERVICE     CREATED          STATUS          PORTS
   5 cset-api     ghcr.io/cisagov/cset/api:latest                         "dotnet CSETWebCore.…"   api         53 seconds ago   Up 52 seconds   0.0.0.0:5000->5000/tcp, :::5000->5000/tcp
   6 cset-mssql   mcr.microsoft.com/mssql/server:2022-CU13-ubuntu-22.04   "/opt/mssql/bin/perm…"   sqlserver   53 seconds ago   Up 52 seconds   0.0.0.0:1433->1433/tcp, :::1433->1433/tcp
   7 cset-web     ghcr.io/cisagov/cset/web:latest                         "/docker-entrypoint.…"   web         53 seconds ago   Up 52 seconds   0.0.0.0:4200->80/tcp, :::4200->80/tcp, 0.0.0.0:8443->443/tcp, :::8443->443/tcp
   8 
   9 # http://localhost:4200/
  10 
  11 docker compose exec sqlserver bash
  12 apt update 
  13 apt upgrade -y 
  14 apt install nano vim -y 
  15 
  16 cd /opt/mssql-tools/bin/
  17 ./sqlcmd
  18 ./sqlcmd -S localhost -U sa -P ********
  19 select name from sys.databases
  20 go
  21 master
  22 tempdb
  23 model
  24 msdb 
  25 exit 
  26 
  27 docker compose exec sqlserver bash
  28 cd /var/opt/mssql/backup/
  29 cd bak-files
  30 cat CSET.bak.part_a* > /tmp/CSET.bak 
  31 cp /var/opt/mssql/backup/restoredb.sql /tmp 
  32 cd /tmp
  33 cp restoredb.sql restoredb.sql.ori 
  34 chmod 666 restoredb.sql
  35 chown root restoredb.sql
  36 nano restoredb.sql
  37 # update to point to /tmp/CSET.bak 
  38 /opt/mssql-tools/bin/sqlcmd -U 'sa' -P "********" -i /tmp/restoredb.sql

Install dotnet 10 in debian

   1 # https://dotnet.microsoft.com/en-us/download/dotnet/10.0
   2 # https://learn.microsoft.com/pt-pt/dotnet/core/install/linux-debian?tabs=dotnet10
   3 cd ~
   4 wget https://packages.microsoft.com/config/debian/13/packages-microsoft-prod.deb -O packages-microsoft-prod.deb
   5 sudo dpkg -i packages-microsoft-prod.deb
   6 rm packages-microsoft-prod.deb
   7 sudo apt-get update &&  sudo apt-get install -y dotnet-sdk-10.0
   8 dotnet --version