Skip to content

Ubuntu 18.04 (Bionic Beaver) Walkthrough

Vagrant VM: ubuntu18 | Box: bento/ubuntu-18.04 | IP: 192.168.56.17 | Family: Debian

Supported Tools

Tool Status Notes
OpenSCAP ✅ Supported Packages: openscap-scanner, openscap-utils, libopenscap8, ssg-base, ssg-debderived
Lynis ✅ Supported Package: lynis
USG ⚠️ Requires Ubuntu Pro Package: ubuntu-advantage-tools
CIS-CAT Lite ✅ Supported Pinned to v4.59.0 for compatibility

VM Setup

cd cis_hardening_tool
vagrant up ubuntu18
vagrant ssh ubuntu18

Installation (Inside VM)

Via AppImage/DEB artifact

sudo bash /mnt/artifacts/vm_test_runner.sh

From source

cd /opt/cis_tool
uv venv && source .venv/bin/activate
uv pip install -e .

Running the Tool

# Version check
sudo cis-hardening-tool --version

# Doctor
sudo cis-hardening-tool doctor

# Install tools
sudo cis-hardening-tool tools install --yes

# Run scan
sudo cis-hardening-tool scan --tools lynis,openscap --non-interactive --export pdf --output /tmp/ubuntu18_report.pdf

Platform-Specific Notes

  • OpenSCAP SSG Content: Located at /usr/share/xml/scap/ssg/content/ssg-ubuntu1804-ds.xml
  • CIS-CAT: Auto-pinned to v4.59.0 for Ubuntu 18.04 compatibility
  • USG: Requires pro enable usg (Ubuntu Pro subscription needed)
  • Python: Ships with Python 3.6, but the tool requires ≥3.9 (AppImage bundles its own Python)

Capturing Screenshots

# From host machine, while VM is running:
VBoxManage controlvm "$(cat .vagrant/machines/ubuntu18/virtualbox/id)" screenshotpng walkthroughs/platforms/ubuntu/screenshots/ubuntu1804_console.png