Photo by Mathew Schwartz on Unsplash

Scanning Buildah Images with Trivy on Manjaro

I recently changed my Operating System to Manjaro. As a operations/developer i want to scan my images with Trivy locally. There was one article i did find on how to do this; however, it was mixed into other methods. So i am writing an article that just talks about this particular situation.

Step 1. Make sure that you have base-devel

First make sure that the base-devel is installed. You can do this by running the following with pacman:

sudo pacman -S base-devel git

The base-devel package is needed for the fakeroot-binary. The fakeroot is for the pikaur package manager. Currently the Trivy-Bin is only available via the pikaur package manager. Git was also added to the installation in case this was not already installed.

Step 2. Pulling the PikAur Repo and Install

Now pull the PikAur repository by running:

git clone https://aur.archlinux.org/pikaur.git

Change to the pikaur directory by running:

cd pikaur

Now make the package to run by running:

makepkg -fsri

Note: Root/Sudo cannot be ran with makepkg as a warning will display.