diff --git a/.github/workflows/reusable_build_docker.yaml b/.github/workflows/reusable_build_docker.yaml index bbb61a9f..e1f2eb41 100644 --- a/.github/workflows/reusable_build_docker.yaml +++ b/.github/workflows/reusable_build_docker.yaml @@ -65,6 +65,8 @@ jobs: run: | docker build -f docker/driver-loader/Dockerfile -t docker.io/falcosecurity/falco-driver-loader:${{ inputs.arch }}-${{ inputs.tag }} \ --build-arg FALCO_IMAGE_TAG=${{ inputs.arch }}-${{ inputs.tag }} \ + --build-arg FALCO_VERSION=${{ inputs.version }} \ + --build-arg FALCO_COMMIT_SHA=${{ github.sha }} \ --build-arg TARGETARCH=${TARGETARCH} \ . docker save docker.io/falcosecurity/falco-driver-loader:${{ inputs.arch }}-${{ inputs.tag }} --output /tmp/falco-driver-loader-${{ inputs.arch }}.tar diff --git a/docker/driver-loader-buster/Dockerfile b/docker/driver-loader-buster/Dockerfile index 49525e21..6eb9abb1 100644 --- a/docker/driver-loader-buster/Dockerfile +++ b/docker/driver-loader-buster/Dockerfile @@ -1,10 +1,15 @@ FROM debian:buster +ARG FALCO_COMMIT_SHA +ARG FALCO_VERSION + LABEL org.opencontainers.image.authors='The Falco Authors https://falco.org' \ org.opencontainers.image.url='https://falco.org' \ org.opencontainers.image.source='https://github.com/falcosecurity/falco' \ org.opencontainers.image.vendor='Falco Organization' \ org.opencontainers.image.licenses='Apache-2.0' \ + org.opencontainers.image.revision=${FALCO_COMMIT_SHA} \ + org.opencontainers.image.version=${FALCO_VERSION} \ maintainer="cncf-falco-dev@lists.cncf.io" LABEL usage="docker run -i -t --privileged -v /root/.falco:/root/.falco -v /proc:/host/proc:ro -v /boot:/host/boot:ro -v /lib/modules:/host/lib/modules:ro -v /usr:/host/usr:ro -v /etc:/host/etc:ro falcosecurity/falco-driver-loader:latest-buster [driver] [options]" diff --git a/docker/driver-loader/Dockerfile b/docker/driver-loader/Dockerfile index 61076d88..187ddadd 100644 --- a/docker/driver-loader/Dockerfile +++ b/docker/driver-loader/Dockerfile @@ -1,11 +1,16 @@ ARG FALCO_IMAGE_TAG=latest FROM docker.io/falcosecurity/falco:${FALCO_IMAGE_TAG}-debian +ARG FALCO_COMMIT_SHA +ARG FALCO_VERSION + LABEL org.opencontainers.image.authors='The Falco Authors https://falco.org' \ org.opencontainers.image.url='https://falco.org' \ org.opencontainers.image.source='https://github.com/falcosecurity/falco' \ org.opencontainers.image.vendor='Falco Organization' \ org.opencontainers.image.licenses='Apache-2.0' \ + org.opencontainers.image.revision=${FALCO_COMMIT_SHA} \ + org.opencontainers.image.version=${FALCO_VERSION} \ maintainer="cncf-falco-dev@lists.cncf.io" LABEL usage="docker run -i -t --privileged -v /root/.falco:/root/.falco -v /proc:/host/proc:ro -v /boot:/host/boot:ro -v /lib/modules:/host/lib/modules:ro -v /usr:/host/usr:ro -v /etc:/host/etc:ro falcosecurity/falco-driver-loader:latest [driver] [options]" diff --git a/docker/falco-debian/Dockerfile b/docker/falco-debian/Dockerfile index b6e9dddf..ea2125ef 100644 --- a/docker/falco-debian/Dockerfile +++ b/docker/falco-debian/Dockerfile @@ -1,15 +1,19 @@ FROM debian:12-slim +ARG FALCO_COMMIT_SHA +ARG FALCO_VERSION + LABEL org.opencontainers.image.authors='The Falco Authors https://falco.org' \ org.opencontainers.image.url='https://falco.org' \ org.opencontainers.image.source='https://github.com/falcosecurity/falco' \ org.opencontainers.image.vendor='Falco Organization' \ org.opencontainers.image.licenses='Apache-2.0' \ + org.opencontainers.image.revision=${FALCO_COMMIT_SHA} \ + org.opencontainers.image.version=${FALCO_VERSION} \ maintainer="cncf-falco-dev@lists.cncf.io" LABEL usage="docker run -i -t --privileged -v /var/run/docker.sock:/host/var/run/docker.sock -v /proc:/host/proc:ro -v /etc:/host/etc:ro falcosecurity/falco:latest-debian" -ARG FALCO_VERSION ARG VERSION_BUCKET=deb ENV FALCO_VERSION=${FALCO_VERSION} diff --git a/docker/falco/Dockerfile b/docker/falco/Dockerfile index 5dd1f040..fe044955 100644 --- a/docker/falco/Dockerfile +++ b/docker/falco/Dockerfile @@ -1,6 +1,7 @@ FROM cgr.dev/chainguard/wolfi-base ARG FALCO_COMMIT_SHA +ARG FALCO_VERSION LABEL org.opencontainers.image.authors='The Falco Authors https://falco.org' \ org.opencontainers.image.url='https://falco.org' \ @@ -8,12 +9,12 @@ LABEL org.opencontainers.image.authors='The Falco Authors https://falco.org' \ org.opencontainers.image.vendor='Falco Organization' \ org.opencontainers.image.licenses='Apache-2.0' \ org.opencontainers.image.revision=${FALCO_COMMIT_SHA} \ + org.opencontainers.image.version=${FALCO_VERSION} \ maintainer="cncf-falco-dev@lists.cncf.io" LABEL usage="docker run -i -t --privileged -v /var/run/docker.sock:/host/var/run/docker.sock -v /proc:/host/proc:ro -v /etc:/host/etc:ro falcosecurity/falco:latest" # NOTE: for the "least privileged" use case, please refer to the official documentation -ARG FALCO_VERSION ARG VERSION_BUCKET=bin ENV FALCO_VERSION=${FALCO_VERSION}