| [Unit] |
| Description=Run CIS Scanner with given environment variables |
| |
| [Service] |
| EnvironmentFile=-/etc/cis-scanner/env_vars |
| Type=simple |
| # NX feature is mandatory on ARMv8. Therefore, excluded this check from the scanning. |
| # COS ARM images use fluent-bit logging which is a native application which makes |
| # checking for stackdriver-correct-container unneccessary. |
| ExecStart=/usr/bin/cis_scanner \ |
| --config="${CONFIG}" \ |
| --result="${RESULT}" \ |
| --max-cis-profile-level="${LEVEL}" \ |
| --show-compliant-benchmarks=true \ |
| --benchmark-opt-out-ids=nx-enabled,stackdriver-correct-container \ |
| "${EXTRA_OPTIONS}" |
| |
| [Install] |
| WantedBy=multi-user.target |
