Required for all workshop steps. Install via docs.docker.com/get-docker.
# macOS
brew install jq
# Debian/Ubuntu
apt-get install -y jqLatest release: v1.1.0-rc.1 Full release listing: https://gitlab.opencode.de/oci-community/tools/container-hardening-work-bench/-/releases
# macOS (Apple Silicon)
curl -LO https://gitlab.opencode.de/oci-community/tools/container-hardening-work-bench/-/releases/v1.1.0-rc.1/downloads/container-hardening-work-bench_1.1.0-rc.1_darwin_arm64.tar.gz
tar xzf container-hardening-work-bench_1.1.0-rc.1_darwin_arm64.tar.gz
sudo mv container-hardening-work-bench /usr/local/bin/
# macOS (Intel)
curl -LO https://gitlab.opencode.de/oci-community/tools/container-hardening-work-bench/-/releases/v1.1.0-rc.1/downloads/container-hardening-work-bench_1.1.0-rc.1_darwin_amd64.tar.gz
tar xzf container-hardening-work-bench_1.1.0-rc.1_darwin_amd64.tar.gz
sudo mv container-hardening-work-bench /usr/local/bin/
# Linux (amd64)
curl -LO https://gitlab.opencode.de/oci-community/tools/container-hardening-work-bench/-/releases/v1.1.0-rc.1/downloads/container-hardening-work-bench_1.1.0-rc.1_linux_amd64.tar.gz
tar xzf container-hardening-work-bench_1.1.0-rc.1_linux_amd64.tar.gz
sudo mv container-hardening-work-bench /usr/local/bin/
# Linux (arm64)
curl -LO https://gitlab.opencode.de/oci-community/tools/container-hardening-work-bench/-/releases/v1.1.0-rc.1/downloads/container-hardening-work-bench_1.1.0-rc.1_linux_arm64.tar.gz
tar xzf container-hardening-work-bench_1.1.0-rc.1_linux_arm64.tar.gz
sudo mv container-hardening-work-bench /usr/local/bin/
# Verify checksum (optional but recommended)
curl -LO https://gitlab.opencode.de/oci-community/tools/container-hardening-work-bench/-/releases/v1.1.0-rc.1/downloads/checksums.txt
# macOS
shasum -a 256 --check --ignore-missing checksums.txt
# Linux
sha256sum --check --ignore-missing checksums.txtVerify the installation:
container-hardening-work-bench --help