From 2e7a0b026f8124e0a57f874b7a13ac9c114e3e35 Mon Sep 17 00:00:00 2001 From: Daniel Wright Date: Thu, 25 May 2023 13:18:58 +1000 Subject: [PATCH] feat: add jq and curl to falco-no-driver docker image To supoprt the use of outputs that are documented in the falco examples (e.g. jq piped to curl) I would like to propose including these tools in the falco-no-driver image. They add a very minimal size and dependency to the image but would make things a lot easier for users getting started. Closes #2580 Signed-off-by: Daniel Wright --- docker/no-driver/Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docker/no-driver/Dockerfile b/docker/no-driver/Dockerfile index 0b7a91f1..3a379a3a 100644 --- a/docker/no-driver/Dockerfile +++ b/docker/no-driver/Dockerfile @@ -28,7 +28,8 @@ LABEL org.opencontainers.image.source="https://github.com/falcosecurity/falco" LABEL usage="docker run -i -t --privileged -v /var/run/docker.sock:/host/var/run/docker.sock -v /dev:/host/dev -v /proc:/host/proc:ro --name NAME IMAGE" # NOTE: for the "least privileged" use case, please refer to the official documentation -RUN apt-get -y update && apt-get -y install ca-certificates +RUN apt-get -y update && apt-get -y install ca-certificates curl jq \ + && apt clean -y && rm -rf /var/lib/apt/lists/* ENV HOST_ROOT /host ENV HOME /root