Containerized Security Toolkit (CST)

Companion Blog • Docker Hub

This project contains several Dockerfiles for ARM (Apple Silicon) and x86_64 variants of security focussed docker images. The two main resources here are as follows →

• Security Image for x86_64
• Security Image for ARM64

The image is built automatically on via CI/CD pipelines and pushed to Docker Hub. The image is called sec_docker and it presents multiple tags →

	x86_64	ARM
tag	main	main_apple
image ref	tanq16/sec_docker:main	tanq16/sec_docker:main_apple

It has the cli-productivity-suite preinstalled within the image. The companion blog post goes over using the pre-built image, building it with modifications, conventions considered when creating the Dockerfiles, and different ways it can be used.

---

A quick look into the container and its capabilities, built from this image, is as follows →

docker run --name="sec_docker_quickstart" --rm -it tanq16/sec_docker:main /bin/zsh

It is also recommended to run the following command after getting into the container →

export TERM=xterm-256color && rm -rf /etc/localtime && ln -s "/usr/share/zoneinfo/$(curl -s https://ipapi.co/timezone)" /etc/localtime && echo $(curl -s https://ipapi.co/timezone) > /etc/timezone

If you exit the shell, the container will be destroyed along with the information in the ephemeral filesystem.

There are several other nuances related to running the container, such as setting up a persistence diretcory across container restarts, using one-word shell functions to start and stop containers with customized settings. Read the companion blog post, especially the Example Workflow section for a comprehensive and convenient setup process.