diff --git a/docker/driver-loader-buster/Dockerfile b/docker/driver-loader-buster/Dockerfile index 156d9522..679ef9c4 100644 --- a/docker/driver-loader-buster/Dockerfile +++ b/docker/driver-loader-buster/Dockerfile @@ -3,7 +3,7 @@ FROM debian:buster LABEL maintainer="cncf-falco-dev@lists.cncf.io" LABEL org.opencontainers.image.source="https://github.com/falcosecurity/falco" -LABEL usage="docker run -i -t --privileged -v /var/run/docker.sock:/host/var/run/docker.sock -v /dev:/host/dev -v /proc:/host/proc:ro -v /boot:/host/boot:ro -v /lib/modules:/host/lib/modules:ro -v /usr:/host/usr:ro -v /etc:/host/etc --name NAME IMAGE" +LABEL usage="docker run -i -t --privileged -v /var/run/docker.sock:/host/var/run/docker.sock -v /dev:/host/dev -v /proc:/host/proc:ro -v /boot:/host/boot:ro -v /lib/modules:/host/lib/modules:ro -v /usr:/host/usr:ro -v /etc:/host/etc falcosecurity/falco-driver-loader:latest-buster" ARG TARGETARCH @@ -130,3 +130,5 @@ RUN curl -L -o falcoct.tar.gz $(curl -s "https://api.github.com/repos/falcosecur COPY ./docker-entrypoint.sh / ENTRYPOINT ["/docker-entrypoint.sh"] + +CMD ["/usr/bin/falco"] \ No newline at end of file diff --git a/docker/driver-loader-buster/docker-entrypoint.sh b/docker/driver-loader-buster/docker-entrypoint.sh index 72502b66..bf17c700 100755 --- a/docker/driver-loader-buster/docker-entrypoint.sh +++ b/docker/driver-loader-buster/docker-entrypoint.sh @@ -125,4 +125,4 @@ fi /usr/bin/falcoctl driver install --compile=$ENABLE_COMPILE --download=$ENABLE_DOWNLOAD --http-insecure=$HTTP_INSECURE --http-headers="$FALCOCTL_DRIVER_HTTP_HEADERS" -exec /usr/bin/falco +exec "$@" diff --git a/docker/driver-loader/Dockerfile b/docker/driver-loader/Dockerfile index f986f5a9..ed333b0f 100644 --- a/docker/driver-loader/Dockerfile +++ b/docker/driver-loader/Dockerfile @@ -4,7 +4,7 @@ FROM docker.io/falcosecurity/falco:${FALCO_IMAGE_TAG}-debian LABEL maintainer="cncf-falco-dev@lists.cncf.io" LABEL org.opencontainers.image.source="https://github.com/falcosecurity/falco" -LABEL usage="docker run -i -t --privileged -v /root/.falco:/root/.falco -v /proc:/host/proc:ro -v /boot:/host/boot:ro -v /lib/modules:/host/lib/modules:ro -v /usr:/host/usr:ro -v /etc:/host/etc:ro --name NAME IMAGE" +LABEL usage="docker run -i -t --privileged -v /root/.falco:/root/.falco -v /proc:/host/proc:ro -v /boot:/host/boot:ro -v /lib/modules:/host/lib/modules:ro -v /usr:/host/usr:ro -v /etc:/host/etc:ro falcosecurity/falco-driver-loader:latest" ENV HOST_ROOT /host ENV HOME /root @@ -48,3 +48,5 @@ RUN rm -df /lib/modules \ COPY ./docker-entrypoint.sh / ENTRYPOINT ["/docker-entrypoint.sh"] + +CMD ["/usr/bin/falco"] diff --git a/docker/driver-loader/docker-entrypoint.sh b/docker/driver-loader/docker-entrypoint.sh index 3002361b..acd6e0a2 100755 --- a/docker/driver-loader/docker-entrypoint.sh +++ b/docker/driver-loader/docker-entrypoint.sh @@ -137,4 +137,4 @@ fi /usr/bin/falcoctl driver install --compile=$ENABLE_COMPILE --download=$ENABLE_DOWNLOAD --http-insecure=$HTTP_INSECURE --http-headers="$FALCOCTL_DRIVER_HTTP_HEADERS" $extra_args -exec /usr/bin/falco +exec "$@" diff --git a/docker/falco-debian/Dockerfile b/docker/falco-debian/Dockerfile index ffa92604..53d41821 100644 --- a/docker/falco-debian/Dockerfile +++ b/docker/falco-debian/Dockerfile @@ -3,7 +3,7 @@ FROM debian:12-slim LABEL maintainer="cncf-falco-dev@lists.cncf.io" LABEL org.opencontainers.image.source="https://github.com/falcosecurity/falco/docker/falco-debian" -LABEL usage="docker run -i -t -v /var/run/docker.sock:/host/var/run/docker.sock -v /dev:/host/dev -v /proc:/host/proc:ro --name NAME IMAGE" +LABEL usage="docker run -i -t -v /var/run/docker.sock:/host/var/run/docker.sock -v /dev:/host/dev -v /proc:/host/proc:ro falcosecurity/falco:latest-debian" ARG FALCO_VERSION ARG VERSION_BUCKET=deb diff --git a/docker/falco/Dockerfile b/docker/falco/Dockerfile index 0e292f94..48a16c0f 100644 --- a/docker/falco/Dockerfile +++ b/docker/falco/Dockerfile @@ -3,7 +3,7 @@ FROM cgr.dev/chainguard/wolfi-base LABEL maintainer="cncf-falco-dev@lists.cncf.io" LABEL org.opencontainers.image.source="https://github.com/falcosecurity/falco" -LABEL usage="docker run -i -t --privileged -v /var/run/docker.sock:/host/var/run/docker.sock -v /dev:/host/dev -v /proc:/host/proc:ro --name NAME IMAGE" +LABEL usage="docker run -i -t --privileged -v /var/run/docker.sock:/host/var/run/docker.sock -v /proc:/host/proc:ro -v /etc:/host/etc:ro falcosecurity/falco:latest" # NOTE: for the "least privileged" use case, please refer to the official documentation ARG FALCO_VERSION