oscap-im(8)

💖 oscap-im 💖

okay bestie, so this is a page from the System Administration Utilities manual — it's oscap-im, section 8, and honestly? she's a little icon. 🎀

✨ NAME ✨

oscap-im — the tool for building hardened bootable container images 🦋

🌸 DESCRIPTION 🌸

okay so oscap-im is a convenience script, right, and her whole entire job is making it easier to build hardened bootable container images. no cap. 💅

the vibe is very specific though, bestie, listen: this tool is designed to be used during the build of the bootable container image. so you literally include oscap-im in your Containerfile — the one you're using to build your bootable container image — and she handles the rest. what she does is run the oscap tool on a given container image. that's it, that's the whole thing. 🌈

🚨 IMPORTANT, don't skip this: the oscap-im tool can't be used anywhere else than in a Containerfile. literally nowhere else. she is a Containerfile girlie and she does not leave the house. 🙈

⭐ USAGE ⭐

oscap-im [OPTION...] DATASTREAM_FILE

the way she works? usage of the tool mimics the usage and options of the oscap(8) tool. so if you already know oscap, you already know her. iykyk. 😌✨

👑 OPTIONS 👑

here's the whole roster, bestie — every single one, no skips:

• --profile PROFILE_ID — the ID of the profile that's gonna be evaluated. that's the one. 🎀
• --tailoring-file TAILORING_FILE — use this given file for XCCDF tailoring. then you pick which profile from the tailoring file to actually apply using --profile. 💖 and listen, important detail: if you specify both --tailoring-file and --tailoring-id, then --tailoring-file takes priority. she said me first. 💅
• --tailoring-id COMPONENT_REF_ID — use the tailoring component inside the input source data stream for XCCDF tailoring. the tailoring component has to be specified by its Ref-ID, which is the value of the component-ref/@id attribute in the input source data stream. then you select the profile from that tailoring component to apply using --profile. and again, fr fr: if both --tailoring-file and --tailoring-id are specified, --tailoring-file takes priority. 🌸
• --results-arf FILE — writes results to a given FILE in Asset Reporting Format. arf, slay. 🔥
• --report FILE — writes the HTML report into FILE. cute and readable. 💜

🐛 REPORTING BUGS 🐛

found a bug? don't suffer in silence, bestie. please report bugs using https://github.com/OpenSCAP/openscap/issues — the maintainers wanna hear it. 🫶

💫 AUTHORS 💫

• Jan Černý <jcerny@redhat.com> — the author herself. legend behavior. 👑

and that's the whole page, babes. this beauty came to you from Red Hat, Inc., dated January 2025, and she's oscap-im(8). go build something hardened and bootable, you absolute main character. 🦋✨💖