mirror of
https://github.com/falcosecurity/falco.git
synced 2026-04-05 19:42:21 +00:00
f3dcacea5b
Co-authored-by: Lorenzo Fontana <lo@linux.com> Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
22 lines
625 B
Docker
22 lines
625 B
Docker
FROM ubuntu:18.04
|
|
LABEL maintainer="opensource@sysdig.com"
|
|
|
|
ARG FALCO_VERSION=
|
|
RUN test -n FALCO_VERSION
|
|
ENV FALCO_VERSION ${FALCO_VERSION}
|
|
|
|
RUN apt update -y
|
|
RUN apt install dkms libyaml-0-2 -y
|
|
|
|
ADD falco-${FALCO_VERSION}-x86_64.deb /
|
|
RUN dpkg -i /falco-${FALCO_VERSION}-x86_64.deb
|
|
|
|
# Change the falco config within the container to enable ISO 8601 output.
|
|
RUN sed -e 's/time_format_iso_8601: false/time_format_iso_8601: true/' < /etc/falco/falco.yaml > /etc/falco/falco.yaml.new \
|
|
&& mv /etc/falco/falco.yaml.new /etc/falco/falco.yaml
|
|
|
|
COPY rules/*.yaml /rules/
|
|
COPY trace_files/*.scap /traces/
|
|
|
|
CMD ["/usr/bin/falco"]
|