Instalasi dan konfigurasi manual

Bagian ini menjelaskan cara menginstal dan mengonfigurasi Inspector VM Scanner secara manual di instans Amazon EC2 Anda. Instalasi manual dianggap sebagai pemindaian berbasis agen dan tidak memerlukan Amazon EC2 Systems Manager (SSM).

catatan

Jika Anda mengaktifkan Pemindaian EC2 yang Ditingkatkan di konsol Amazon Inspector, Amazon Inspector secara otomatis menginstal dan mengelola VM Scanner menggunakan SSM. Instalasi manual hanya diperlukan jika Anda tidak dapat menggunakan SSM atau lebih suka mengelola pemindai secara mandiri.

Menginstal dan menghapus instalan Inspector VM Scanner secara manual

Inspector VM Scanner tersedia untuk instalasi mandiri melalui tautan berikut:

Paket Inspector VM Scanner

Jenis Package	Arsitektur	URL
.apk	LENGAN	https://inspector-vm-scanner.s3.amazonaws.com/latest/APK-ARM/inspector-vm-scanner-latest-r0.apk
	X86_64	https://inspector-vm-scanner.s3.amazonaws.com/latest/APK-X86_64/inspector-vm-scanner-latest-r0.apk
.deb	LENGAN	https://inspector-vm-scanner.s3.amazonaws.com/latest/DEB-ARM/inspector-vm-scanner_latest_arm64.deb
	X86_64	https://inspector-vm-scanner.s3.amazonaws.com/latest/DEB-X86_64/inspector-vm-scanner_latest_amd64.deb
.msi	X86_64	https://inspector-vm-scanner.s3.amazonaws.com/latest/MSI-X86_64/inspector-vm-scanner-x86_64-latest.msi
.pkg	LENGAN	https://inspector-vm-scanner.s3.amazonaws.com/latest/PKG-ARM/inspector-vm-scanner.latest.arm64.pkg
.rpm	LENGAN	https://inspector-vm-scanner.s3.amazonaws.com/latest/RPM-ARM/inspector-vm-scanner-latest.arm64.rpm
	X86_64	https://inspector-vm-scanner.s3.amazonaws.com/latest/RPM-X86_64/inspector-vm-scanner-latest.x86_64.rpm

Untuk melihat prosedur untuk menginstal Inspector VM Scanner secara manual pada manajer paket yang ditentukan, pilih tautan dari daftar berikut:

• APK

• DEB

• MSI

• PKG

• RPM

APK

Penginstalan

LENGAN

curl --output-dir /etc/apk/keys -O https://inspector-vm-scanner.s3.amazonaws.com/latest/APK-ARM/inspector-vm-scanner.pem.pub
curl -O https://inspector-vm-scanner.s3.amazonaws.com/latest/APK-ARM/inspector-vm-scanner-latest-r0.apk
apk add inspector-vm-scanner-latest-r0.apk

X86_64

curl --output-dir /etc/apk/keys -O https://inspector-vm-scanner.s3.amazonaws.com/latest/APK-X86_64/inspector-vm-scanner.pem.pub
curl -O https://inspector-vm-scanner.s3.amazonaws.com/latest/APK-X86_64/inspector-vm-scanner-latest-r0.apk
apk add inspector-vm-scanner-latest-r0.apk

Penghapusan Instalasi

apk del inspector-vm-scanner

DEB

Penginstalan

LENGAN

curl -O https://inspector-vm-scanner.s3.amazonaws.com/latest/DEB-ARM/inspector-vm-scanner.gpg.pub
curl -O https://inspector-vm-scanner.s3.amazonaws.com/latest/DEB-ARM/inspector-vm-scanner_latest_arm64.deb
gpg --import inspector-vm-scanner.gpg.pub
gpg --verify inspector-vm-scanner_latest_arm64.deb
sudo dpkg -i inspector-vm-scanner_latest_arm64.deb

X86_64

curl -O https://inspector-vm-scanner.s3.amazonaws.com/latest/DEB-X86_64/inspector-vm-scanner.gpg.pub
curl -O https://inspector-vm-scanner.s3.amazonaws.com/latest/DEB-X86_64/inspector-vm-scanner_latest_amd64.deb
gpg --import inspector-vm-scanner.gpg.pub
gpg --verify inspector-vm-scanner_latest_amd64.deb
sudo dpkg -i inspector-vm-scanner_latest_amd64.deb

Penghapusan Instalasi

sudo dpkg -r inspector-vm-scanner

MSI

Penginstalan

X86_64

Invoke-WebRequest https://inspector-vm-scanner.s3.amazonaws.com/latest/MSI-X86_64/inspector-vm-scanner-x86_64-latest.msi -OutFile inspector-vm-scanner-x86_64-latest.msi
msiexec /i inspector-vm-scanner-x86_64-latest.msi /qn

Penghapusan Instalasi

Untuk menghapus instalan Inspector VM ScannerWindows, gunakan panel kontrol Windows Program dan Fitur atau perintah berikut: PowerShell

Get-WmiObject -Class Win32_Product | Where-Object {$_.Name -eq "Inspector VM Scanner"} | ForEach-Object {$_.Uninstall()}

PKG

Penginstalan

LENGAN

curl -O https://inspector-vm-scanner.s3.amazonaws.com/latest/PKG-ARM/inspector-vm-scanner.latest.arm64.pkg
pkgutil --check-signature inspector-vm-scanner.latest.arm64.pkg
sudo installer -pkg inspector-vm-scanner.latest.arm64.pkg -target /

Penghapusan Instalasi

sudo rm /opt/aws/inspector/bin/inspector-vm-scanner
sudo rm -rf /var/lib/amazon/inspector

RPM

Penginstalan

LENGAN

curl -O https://inspector-vm-scanner.s3.amazonaws.com/latest/RPM-ARM/inspector-vm-scanner.gpg.pub
curl -O https://inspector-vm-scanner.s3.amazonaws.com/latest/RPM-ARM/inspector-vm-scanner-latest.arm64.rpm
rpm --import inspector-vm-scanner.gpg.pub
rpm --checksig inspector-vm-scanner-latest.arm64.rpm
sudo yum install inspector-vm-scanner-latest.arm64.rpm

X86_64

curl -O https://inspector-vm-scanner.s3.amazonaws.com/latest/RPM-X86_64/inspector-vm-scanner.gpg.pub
curl -O https://inspector-vm-scanner.s3.amazonaws.com/latest/RPM-X86_64/inspector-vm-scanner-latest.x86_64.rpm
rpm --import inspector-vm-scanner.gpg.pub
rpm --checksig inspector-vm-scanner-latest.x86_64.rpm
sudo yum install inspector-vm-scanner-latest.x86_64.rpm

Penghapusan Instalasi

sudo yum remove inspector-vm-scanner

Jalur instalasi

Pada semua sistem Unix-based operasi (termasuk macOS), Inspector VM Scanner menginstal ke. /opt/aws/inspector/bin/inspector-vm-scanner Pengecualiannya adalah sistem Alpine-based operasi (termasuk Chainguard), yang menggunakan jalur alternatif. /usr/opt/aws/inspector/bin/inspector-vm-scanner

AktifWindows, Inspector VM Scanner menginstal ke. C:\Program Files\Amazon\Inspector\inspector-vm-scanner.exe

Jalur instalasi ini (selain dari Alpine) identik dengan Inspector SSM Plugin, yang menyimpan semua binari Inspector di satu lokasi.

Menghapus Instalasi Inspector VM Scanner

Jika Anda menonaktifkan Pemindaian EC2 yang Ditingkatkan, Inspector secara otomatis menghapus instans Inspector VM Inspector pada semua instans. Inspector-managed Untuk menghapus instalasi manual, lihat petunjuk penghapusan instalasi untuk manajer paket Anda di bagian sebelumnya.

Menjalankan Inspector VM Scanner

Inspector VM Scanner mengharapkan Scan Type akan diteruskan sebagai parameter pertama. Pada saat ini, satu-satunya nilai yang didukung adalahsbom.

Perintah penggunaan default:

./inspector-vm-scanner sbom --send-results telemetry

Opsi cetak untuk pemindaian SBOM:

./inspector-vm-scanner sbom --help

Melihat output

Alur kerja Inspector default tidak menyimpan SBOM secara lokal. Namun, jika terjadi kegagalan dengan pengiriman sumber daya SBOM melalui telemetri, itu akan ditulis ke lokasi berikut:

• /var/lib/amazon/inspector/state/sbom.jsondi Unix

• C:\ProgramData\Amazon\Inspector\State\sbom.json pada Windows

Pengguna dapat mengganti jalur ini selama pemanggilan VM Scanner. Lihat Konfigurasi lanjutan untuk detail selengkapnya.