update(docker/minimal): download falco binary

Co-authored-by: Lorenzo Fontana <lo@linux.com>
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
This commit is contained in:
Leonardo Di Donato 2020-02-27 14:54:54 +01:00 committed by poiana
parent 201ce0ddc6
commit 1ec2f2cea3
3 changed files with 11 additions and 12 deletions

View File

@ -8,14 +8,13 @@ ENV FALCO_VERSION=${FALCO_VERSION}
WORKDIR / WORKDIR /
ADD https://s3.amazonaws.com/download.draios.com/stable/tgz/x86_64/falco-${FALCO_VERSION}-x86_64.tar.gz / ADD https://bintray.com/api/ui/download/falcosecurity/bin/x86_64/falco-${FALCO_VERSION}-x86_64.tar.gz /
# ADD will download from URL and unntar
RUN apt-get update && \ RUN apt-get update && \
apt-get install -y libyaml-0-2 binutils && \ apt-get install -y libyaml-0-2 binutils && \
# curl -O https://s3.amazonaws.com/download.draios.com/stable/tgz/x86_64/falco-${FALCO_VERSION}-x86_64.tar.gz && \ gzip -d falco-${FALCO_VERSION}-x86_64.tar.gz && \
tar xfzv falco-${FALCO_VERSION}-x86_64.tar.gz && \ tar xfzv falco-${FALCO_VERSION}-x86_64.tar && \
rm -f falco-${FALCO_VERSION}-x86_64.tar.gz && \ rm -f falco-${FALCO_VERSION}-x86_64.tar && \
mv falco-${FALCO_VERSION}-x86_64 falco && \ mv falco-${FALCO_VERSION}-x86_64 falco && \
strip falco/usr/bin/falco && \ strip falco/usr/bin/falco && \
apt-get clean && \ apt-get clean && \

View File

@ -2,7 +2,7 @@ FROM registry.access.redhat.com/rhel7
LABEL maintainer="cncf-falco-dev@lists.cncf.io" LABEL maintainer="cncf-falco-dev@lists.cncf.io"
### Atomic/OpenShift Labels - https://github.com/projectatomic/ContainerApplicationGenericLabels ## Atomic/OpenShift Labels - https://github.com/projectatomic/ContainerApplicationGenericLabels
LABEL name="falco" LABEL name="falco"
LABEL vendor="falcosecurity" LABEL vendor="falcosecurity"
LABEL url="http://falco.org" LABEL url="http://falco.org"
@ -24,9 +24,9 @@ RUN rpm --import https://falco.org/repo/falcosecurity-3672BA8F.asc && \
yum -y update-minimal --disablerepo "*" --enablerepo ${REPOLIST} --setopt=tsflags=nodocs \ yum -y update-minimal --disablerepo "*" --enablerepo ${REPOLIST} --setopt=tsflags=nodocs \
--security --sec-severity=Important --sec-severity=Critical && \ --security --sec-severity=Important --sec-severity=Critical && \
yum -y install --disablerepo "*" --enablerepo ${REPOLIST} --setopt=tsflags=nodocs ${INSTALL_PKGS} && \ yum -y install --disablerepo "*" --enablerepo ${REPOLIST} --setopt=tsflags=nodocs ${INSTALL_PKGS} && \
### help file markdown to man conversion ## help file markdown to man conversion
go-md2man -in /tmp/help.md -out /help.1 && \ go-md2man -in /tmp/help.md -out /help.1 && \
### we delete everything on /usr/src/kernels otherwise it messes up docker-entrypoint.sh ## we delete everything on /usr/src/kernels otherwise it messes up docker-entrypoint.sh
rm -fr /usr/src/kernels && \ rm -fr /usr/src/kernels && \
rm -df /lib/modules && ln -s $HOST_ROOT/lib/modules /lib/modules && \ rm -df /lib/modules && ln -s $HOST_ROOT/lib/modules /lib/modules && \
yum clean all yum clean all