Run containers to browse Chalk data locally

Use prebuilt containers to set up Chalk API server and database server to receive Chalk data

Summary

Chalk is capable of adding all the information you want to collect directly into the artifact. However, this may not always be desirable as certain data, such as SBOM or SAST reports, can be very large. In these cases we recommend capturing the data at build-time and sending it off to the Chalk API server. Soon, you will be able to send this data to Crash Override if you choose, but for the time being, you can run your own by running the API server container and the database server container locally.

We've put together a simple Python-based API Server that will accept reports and chalk marks the chalk binary as it runs, and stick things in an SQLite database. Most of the configuration files used in the how-to guides will set up the chalk binary to automatically push data to the local reporting server, so there is not an extra step during chalk configuration.

  1. Run the Chalk API server container
  2. Run the SQLite database container

Steps

Before you start

You will need docker, as the reporting web service will be installed by running two docker containers: one for collecting logs, and the other to give us a web frontend to browse them.

Step 1

To run the Chalk API server container:

docker run -d -w /db -v $HOME/.local/c0/:/db -p 8585:8585 --restart unless-stopped  ghcr.io/crashappsec/chalk-test-server

This will set up an API server on port 8585 on your machine, accessible from any interface. (Note that it will run in the background.)

At http://localhost:8585, you should see:

Output 1

To verify that the API server is healthy, you can run:

curl localhost:8585/health

You should see the response {"status":"ok"}.

To view the full API documentation, take a look at http://localhost:8585/docs#/.

Step 2

To run the SQLite database container:

docker run -d -p 8080:8080 -v $HOME/.local/c0/chalkdb.sqlite:/chalkdb.sqlite -e SQLITE_DATABASE=/chalkdb.sqlite coleifer/sqlite-web

The SQLite database will be stored in ~/.local/c0/chalkdb.sqlite:/chalkdb.sqlite.

The database GUI will run on port 8080. At http://localhost:8080, you should see:

Output 1