github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-19 22:58:40 +00:00
Code Issues Projects Releases Wiki Activity
4,299 Commits 117 Branches 173 Tags 105 MiB
release/0.37.x
Commit Graph

239 Commits

Author SHA1 Message Date
Tom Müller
fedde9f7c4 Added http headers option for driver download in docker images 
Signed-off-by: Tom Müller <60851960+toamto94@users.noreply.github.com>
 2024-02-13 09:56:21 +01:00
Tom Müller
d8bd03fc4b fixed typo in print usage 
fixed typo in the print usage description of the docker run command

Signed-off-by: Tom Müller <60851960+toamto94@users.noreply.github.com>
 2024-02-12 14:47:16 +01:00
Tom Müller
4448d444b0 added option for insecure http driver download 
added option for insecure http driver download to the falco docker entrypoint.

Signed-off-by: Tom Müller <60851960+toamto94@users.noreply.github.com>
 2024-02-12 14:47:16 +01:00
Tom Müller
0ec995037f added insecure http driver download 
added insecure http driver download to the driver-loader-legacy entrypoint.

Signed-off-by: Tom Müller <60851960+toamto94@users.noreply.github.com>
 2024-02-12 14:47:16 +01:00
Tom Müller
d7d877e16c added option for insecure http download 
Added option for insecure http driver download in the docker-entrypoint.sh script. By passing --http-insecure to the container via an argument, the flag is forwarded to the falcoctl driver install command.

Signed-off-by: Tom Müller <60851960+toamto94@users.noreply.github.com>
 2024-02-12 14:47:16 +01:00
Luca Guerra
f327a77059 fix(build): install libstdc++ in the Wolfi image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2024-02-12 14:47:16 +01:00
Luca Guerra
e37570116d update(build): install libelf in the nodriver image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2024-02-12 14:47:16 +01:00
Luca Guerra
9ae09b6692 update(build): include libelf in the distroless image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2024-02-12 14:47:16 +01:00
Federico Di Pierro
47959abfed chore(docker): improve usage helper message. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-12 18:23:44 +01:00
Federico Di Pierro
8db79da647 chore(cmake,docker): bumped falcoctl to v0.7.0-beta5. 
Moreover, small fix in docker images entrypoints regarding the name printed in usage.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-12 18:23:44 +01:00
Federico Di Pierro
f2ebdfaf8e fix(docker): small fixes in docker entrypoints for new driver loader. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-12 09:56:42 +01:00
Federico Di Pierro
ade27c2546 chore(scripts): use new default value for falcoctl driver.host-root config key. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-11 16:37:39 +01:00
Federico Di Pierro
0c9538241d chore(docker): cleaned up useless removal of falcoctl. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Leonardo Grasso <me@leonardograsso.com>
 2023-12-11 16:37:39 +01:00
Federico Di Pierro
be100f7ad5 new(docker,scripts): dropped falco-driver-loader in favor of new falcoctl driver command. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-11 16:37:39 +01:00
Federico Di Pierro
0ba0dd8671 chore(docker/falco): add back some deps to falco docker image. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-05 18:34:26 +01:00
Andrea Terzolo
16a37e5c2e fix(dockerfile): remove useless CMD 
Signed-off-by: Andrea Terzolo <andreaterzolo3@gmail.com>
 2023-09-21 17:38:47 +02:00
Leonardo Grasso
fe50ac22ee update: add SPDX license identifier 
See https://github.com/falcosecurity/evolution/issues/318

Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-09-21 13:21:47 +02:00
Luca Guerra
e5e7a4761d fix(build): set the right bucket and version for driver legacy 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-13 15:19:40 +02:00
Luca Guerra
7b4264918b update(docs): add driver-loader-legacy to readme and fix bad c&p 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-12 13:33:35 +02:00
Luca Guerra
37ce18f457 fix(docker): prevent variable expansion with FALCO_DRIVER_LOADER_OPTIONS 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-11 14:59:30 +02:00
Luca Guerra
dae36c798a new(docker): allow passing options to falco-driver-loader from the container image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-11 14:59:30 +02:00
Luca Guerra
d5e80fee0b update(docs): add section about the experimental distroless image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-11 10:03:13 +02:00
Adrian Mouat
de5eec5285 new(docker): add distroless Dockerfile 
Signed-off-by: Adrian Mouat <adrian@chainguard.dev>
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-11 10:03:13 +02:00
Luca Guerra
c2b940f8c4 update(docker): remove packages that are not strictly necessary 
Signed-off-by: Luca Guerra <luca@guerra.sh>
Co-authored-by: Leonardo Grasso <me@leonardograsso.com>
 2023-09-07 15:55:59 +02:00
Luca Guerra
1616ac666b update(docker): add the legacy driver loader image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-07 15:55:59 +02:00
Luca Guerra
02982e0375 update(docker): upgrade Falco driver loader image 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-07 15:55:59 +02:00
Luca Guerra
d1b932d2e9 update(docker): use debian 12 slim for falco no driver 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-09-07 12:49:59 +02:00
Leonardo Grasso
e3be7a7309 chore(docker): remove UBI 
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-08-04 15:43:22 +02:00
Leonardo Grasso
120a3accc8 docs(docker): remove UBI 
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-08-04 15:43:22 +02:00
Jason Dellaluce
babfafc5ab cleanup: remove builder image 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-08-04 10:32:21 +02:00
Jason Dellaluce
35fab0a60c cleanup(docker/builder): remove workaround for circleci tests 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-08-04 10:32:21 +02:00
Jason Dellaluce
b546a3932a cleanup: remove tester and local images 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-08-04 10:32:21 +02:00
Daniel Wright
2e7a0b026f feat: add jq and curl to falco-no-driver docker image 
To supoprt the use of outputs that are documented in the falco
examples (e.g. jq piped to curl) I would like to propose including
these tools in the falco-no-driver image. They add a very minimal
size and dependency to the image but would make things a lot easier
for users getting started.

Closes #2580

Signed-off-by: Daniel Wright <danielwright@bitgo.com>
 2023-05-31 13:21:31 +02:00
Daniel Wright
498b64b469 feat: add image source OCI label to docker images 
Closes #2591

Signed-off-by: Daniel Wright <danielwright@bitgo.com>
 2023-05-29 11:17:24 +02:00
Luca Guerra
09b5cb7c7b fix(ci): load falco image before building falco-driver-loader 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-05-15 15:35:24 +02:00
Andrea Terzolo
0d62fb9133 ci: remove unit tests from circleCI 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-02-10 11:41:24 +01:00
Aldo Lacuku
43c802d045 fix(dockerfile/no-driver): install ca-certificates 
Signed-off-by: Aldo Lacuku <aldo@lacuku.eu>
 2023-02-09 17:31:31 +01:00
Andrea Terzolo
1d99e3d7b3 fix(ci): remove application rules from docker build 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-30 13:44:17 +01:00
Andrea Terzolo
229633ee8a update(CI): mitigate frequent failure in CircleCI jobs 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-26 12:37:43 +01:00
Andrea Terzolo
acd1e0dc28 update: split the build phase in multiple RUN commands 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-26 12:37:43 +01:00
Jason Dellaluce
cfc96e899b fix(docker/falco): trust latest GPG key 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-19 12:33:46 +01:00
Thomas Labarussias
bb9edea666 install ca-certificates in falco:no-driver image 
Signed-off-by: Thomas Labarussias <issif+github@gadz.org>
 2023-01-16 10:35:18 +01:00
Andrea Terzolo
19d5430f5d update: modern falco builder 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-09 09:04:54 +01:00
Andrea Terzolo
647c085041 ci: bump resource class 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2022-12-21 11:26:02 +01:00
Andrea Terzolo
c861f0b02a update(ci): update ci jobs to generate Falco images with modern probe 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2022-12-21 11:26:02 +01:00
Federico Di Pierro
818f717622 chore(scripts,cmake): dialog is an optional dep, do not list it among deps. 
Cleaned up unused vars in postinst scripts.
Finally, only show dialog window in interactive shells.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2022-12-15 14:09:19 +01:00
Federico Di Pierro
d0ceba83b4 update(cmake, docker, circleci): updated libs and driver to latest master. 
Docker builder image was updated to remove the libelf and libz deps as they are now properly bundled, in BUNDLED_DEPS mode.
Finally, circleci musl job was updated to enforce the use of alpine-provided libelf package, since it is already static,
and building libelf on musl is pretty cumbersome.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2022-11-11 14:56:10 +01:00
Jason Dellaluce
6c1f908ca5 cleanup(cmake): rename legacy cmake variables 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2022-08-29 15:42:33 +02:00
Jason Dellaluce
0cab9ba6ed chore(OWNERS): remove duplicates in reviewers 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2022-07-20 10:39:56 +02:00
Federico Di Pierro
610b67838b fix(docker): fixed deb tester sub image. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2022-06-29 11:52:31 +02:00