falco/docker
José Carlos Chávez bff2f619df fix: indentation
Co-authored-by: Samuel Gaist <samuel.gaist@idiap.ch>
Signed-off-by: José Carlos Chávez <jcchavezs@gmail.com>
2025-08-11 10:46:35 +02:00
..
docker-compose fix(docker): fix docker-compose with correct image name for Falco. 2024-11-05 17:38:11 +01:00
driver-loader fix: indentation 2025-08-11 10:46:35 +02:00
driver-loader-buster fix: indentation 2025-08-11 10:46:35 +02:00
falco chore: adds labels to falco-debian, driver-loader and driver-loader-buster 2025-08-11 10:46:35 +02:00
falco-debian fix: indentation 2025-08-11 10:46:35 +02:00
OWNERS chore(OWNERS): remove duplicates in reviewers 2022-07-20 10:39:56 +02:00
README.md docs(docker): update images description 2024-11-05 17:38:11 +01:00

Falco Dockerfiles

This directory contains various ways to package Falco as a container and related tools.

Currently Supported Images

Name Directory Description
falcosecurity/falco:latest, falcosecurity/falco:tag, falcosecurity/falco:master docker/falco Distroless image based on the latest released tar.gz of Falco. No tools are included in the image.
falcosecurity/falco:latest-debian, falcosecurity/falco:tag-debian, falcosecurity/falco:master-debian docker/falco-debian Debian-based image. Include some tools (i.e. jq, curl). No driver-building toolchain support.
falcosecurity/falco-driver-loader:latest, falcosecurity/falco-driver-loader:tag, falcosecurity/falco-driver-loader:master docker/driver-loader Based on falcosecurity/falco:x.y.z-debian (see above) plus the driver building toolchain support and falcoctl. This is intended to be used as an installer or an init container when modern eBPF cannot be used.
falcosecurity/falco-driver-loader:latest-buster, falcosecurity/falco-driver-loader:tag-buster, falcosecurity/falco-driver-loader:master-debian docker/driver-loader-buster Similar to falcosecurity/falco-driver-loader (see above) but based on a legacy Debian image (i.e. buster ). Recommended only for old kernel versions.