github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-11 19:12:12 +00:00
Code Issues Projects Releases Wiki Activity
4,579 Commits 119 Branches 173 Tags 105 MiB
generalize-indexable-ruleset-polymorphic
Commit Graph

249 Commits

Author SHA1 Message Date
Federico Di Pierro
1bf6a83e31 new(docker): added zstd dep. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-05-17 13:38:57 +02:00
Federico Di Pierro
bdcfbba90b chore(docker,scripts): set old eBPF probe as lowest priority driver. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-04-18 11:18:54 +02:00
Federico Di Pierro
80a99b672f fix(docker): default to auto for driver to be configured. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-04-16 14:44:46 +02:00
Federico Di Pierro
fc7a451aed fix(docker): fixed docker entrypoints for driver loading. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-04-16 14:44:46 +02:00
Federico Di Pierro
ac61543276 fix(docker,scripts): do not load falcoctl driver loader when installing Falco deb package in docker image. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-04-15 17:22:44 +02:00
Federico Di Pierro
cb414f1254 chore(docker): support new automatic driver selection in docker images entrypoints. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-04-15 15:13:44 +02:00
Paul Rey
12cd72a396 Remove --source-only option in driver loader docker-entrypoint.sh 
The option is supported anymore in falcoctl

Signed-off-by: Paul Rey <contact@paulrey.io>
 2024-03-22 13:45:53 +01:00
Paul Rey
858c82ffe0 Update driver-loader docker-entrypoint 
Remove debug log
Set default option ENABLE_COMPILE and ENABLE_DOWNLOAD

Signed-off-by: Paul Rey <contact@paulrey.io>
 2024-03-22 13:45:53 +01:00
Paul Rey
2f6fdfa972 Add kernelversion and kernelrelease options to falco driver loader entrypoint 
Signed-off-by: Paul Rey <contact@paulrey.io>
 2024-03-22 13:45:53 +01:00
Andrea Terzolo
26add16d12 cleanup(docker)!: remove unused builder dockerfile 
Signed-off-by: Andrea Terzolo <andreaterzolo3@gmail.com>
 2024-02-14 17:10:26 +01:00
Tom Müller
8bc32d248e Added http headers option for driver download in docker images 
Signed-off-by: Tom Müller <60851960+toamto94@users.noreply.github.com>
 2024-02-12 18:03:17 +01:00
Tom Müller
71f3c77a1a fixed typo in print usage 
fixed typo in the print usage description of the docker run command

Signed-off-by: Tom Müller <60851960+toamto94@users.noreply.github.com>
 2024-02-08 10:16:59 +01:00
Tom Müller
56a4e31d18 added option for insecure http driver download 
added option for insecure http driver download to the falco docker entrypoint.

Signed-off-by: Tom Müller <60851960+toamto94@users.noreply.github.com>
 2024-02-08 10:16:59 +01:00
Tom Müller
159e3f6ffc added insecure http driver download 
added insecure http driver download to the driver-loader-legacy entrypoint.

Signed-off-by: Tom Müller <60851960+toamto94@users.noreply.github.com>
 2024-02-08 10:16:59 +01:00
Tom Müller
f62c38e9e8 added option for insecure http download 
Added option for insecure http driver download in the docker-entrypoint.sh script. By passing --http-insecure to the container via an argument, the flag is forwarded to the falcoctl driver install command.

Signed-off-by: Tom Müller <60851960+toamto94@users.noreply.github.com>
 2024-02-08 10:16:59 +01:00
Luca Guerra
0613f11980 fix(build): install libstdc++ in the Wolfi image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2024-02-05 14:55:49 +01:00
Luca Guerra
ea67e47023 update(build): install libelf in the nodriver image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2024-02-02 19:57:40 +01:00
Luca Guerra
7d0001269c update(build): include libelf in the distroless image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2024-02-02 19:57:40 +01:00
Federico Di Pierro
47959abfed chore(docker): improve usage helper message. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-12 18:23:44 +01:00
Federico Di Pierro
8db79da647 chore(cmake,docker): bumped falcoctl to v0.7.0-beta5. 
Moreover, small fix in docker images entrypoints regarding the name printed in usage.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-12 18:23:44 +01:00
Federico Di Pierro
f2ebdfaf8e fix(docker): small fixes in docker entrypoints for new driver loader. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-12 09:56:42 +01:00
Federico Di Pierro
ade27c2546 chore(scripts): use new default value for falcoctl driver.host-root config key. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-11 16:37:39 +01:00
Federico Di Pierro
0c9538241d chore(docker): cleaned up useless removal of falcoctl. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Leonardo Grasso <me@leonardograsso.com>
 2023-12-11 16:37:39 +01:00
Federico Di Pierro
be100f7ad5 new(docker,scripts): dropped falco-driver-loader in favor of new falcoctl driver command. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-11 16:37:39 +01:00
Federico Di Pierro
0ba0dd8671 chore(docker/falco): add back some deps to falco docker image. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-05 18:34:26 +01:00
Andrea Terzolo
16a37e5c2e fix(dockerfile): remove useless CMD 
Signed-off-by: Andrea Terzolo <andreaterzolo3@gmail.com>
 2023-09-21 17:38:47 +02:00
Leonardo Grasso
fe50ac22ee update: add SPDX license identifier 
See https://github.com/falcosecurity/evolution/issues/318

Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-09-21 13:21:47 +02:00
Luca Guerra
e5e7a4761d fix(build): set the right bucket and version for driver legacy 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-13 15:19:40 +02:00
Luca Guerra
7b4264918b update(docs): add driver-loader-legacy to readme and fix bad c&p 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-12 13:33:35 +02:00
Luca Guerra
37ce18f457 fix(docker): prevent variable expansion with FALCO_DRIVER_LOADER_OPTIONS 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-11 14:59:30 +02:00
Luca Guerra
dae36c798a new(docker): allow passing options to falco-driver-loader from the container image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-11 14:59:30 +02:00
Luca Guerra
d5e80fee0b update(docs): add section about the experimental distroless image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-11 10:03:13 +02:00
Adrian Mouat
de5eec5285 new(docker): add distroless Dockerfile 
Signed-off-by: Adrian Mouat <adrian@chainguard.dev>
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-11 10:03:13 +02:00
Luca Guerra
c2b940f8c4 update(docker): remove packages that are not strictly necessary 
Signed-off-by: Luca Guerra <luca@guerra.sh>
Co-authored-by: Leonardo Grasso <me@leonardograsso.com>
 2023-09-07 15:55:59 +02:00
Luca Guerra
1616ac666b update(docker): add the legacy driver loader image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-07 15:55:59 +02:00
Luca Guerra
02982e0375 update(docker): upgrade Falco driver loader image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-07 15:55:59 +02:00
Luca Guerra
d1b932d2e9 update(docker): use debian 12 slim for falco no driver 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-07 12:49:59 +02:00
Leonardo Grasso
e3be7a7309 chore(docker): remove UBI 
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-08-04 15:43:22 +02:00
Leonardo Grasso
120a3accc8 docs(docker): remove UBI 
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-08-04 15:43:22 +02:00
Jason Dellaluce
babfafc5ab cleanup: remove builder image 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-08-04 10:32:21 +02:00
Jason Dellaluce
35fab0a60c cleanup(docker/builder): remove workaround for circleci tests 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-08-04 10:32:21 +02:00
Jason Dellaluce
b546a3932a cleanup: remove tester and local images 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-08-04 10:32:21 +02:00
Daniel Wright
2e7a0b026f feat: add jq and curl to falco-no-driver docker image 
To supoprt the use of outputs that are documented in the falco
examples (e.g. jq piped to curl) I would like to propose including
these tools in the falco-no-driver image. They add a very minimal
size and dependency to the image but would make things a lot easier
for users getting started.

Closes #2580

Signed-off-by: Daniel Wright <danielwright@bitgo.com>
 2023-05-31 13:21:31 +02:00
Daniel Wright
498b64b469 feat: add image source OCI label to docker images 
Closes #2591

Signed-off-by: Daniel Wright <danielwright@bitgo.com>
 2023-05-29 11:17:24 +02:00
Luca Guerra
09b5cb7c7b fix(ci): load falco image before building falco-driver-loader 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-05-15 15:35:24 +02:00
Andrea Terzolo
0d62fb9133 ci: remove unit tests from circleCI 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-02-10 11:41:24 +01:00
Aldo Lacuku
43c802d045 fix(dockerfile/no-driver): install ca-certificates 
Signed-off-by: Aldo Lacuku <aldo@lacuku.eu>
 2023-02-09 17:31:31 +01:00
Andrea Terzolo
1d99e3d7b3 fix(ci): remove application rules from docker build 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-30 13:44:17 +01:00
Andrea Terzolo
229633ee8a update(CI): mitigate frequent failure in CircleCI jobs 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-26 12:37:43 +01:00
Andrea Terzolo
acd1e0dc28 update: split the build phase in multiple RUN commands 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-26 12:37:43 +01:00