falco/docker
Luca Guerra 8a10bd52e6 update(containers): add labels
Signed-off-by: Luca Guerra <luca@guerra.sh>
2025-05-26 13:16:04 +02:00
..
docker-compose fix(docker): fix docker-compose with correct image name for Falco. 2024-11-05 17:38:11 +01:00
driver-loader update(containers): add labels 2025-05-26 13:16:04 +02:00
driver-loader-buster update(containers): add labels 2025-05-26 13:16:04 +02:00
falco update(containers): add labels 2025-05-26 13:16:04 +02:00
falco-debian update(containers): add labels 2025-05-26 13:16:04 +02:00
OWNERS chore(OWNERS): remove duplicates in reviewers 2022-07-20 10:39:56 +02:00
README.md docs(docker): update images description 2024-11-05 17:38:11 +01:00

Falco Dockerfiles

This directory contains various ways to package Falco as a container and related tools.

Currently Supported Images

Name Directory Description
falcosecurity/falco:latest, falcosecurity/falco:tag, falcosecurity/falco:master docker/falco Distroless image based on the latest released tar.gz of Falco. No tools are included in the image.
falcosecurity/falco:latest-debian, falcosecurity/falco:tag-debian, falcosecurity/falco:master-debian docker/falco-debian Debian-based image. Include some tools (i.e. jq, curl). No driver-building toolchain support.
falcosecurity/falco-driver-loader:latest, falcosecurity/falco-driver-loader:tag, falcosecurity/falco-driver-loader:master docker/driver-loader Based on falcosecurity/falco:x.y.z-debian (see above) plus the driver building toolchain support and falcoctl. This is intended to be used as an installer or an init container when modern eBPF cannot be used.
falcosecurity/falco-driver-loader:latest-buster, falcosecurity/falco-driver-loader:tag-buster, falcosecurity/falco-driver-loader:master-debian docker/driver-loader-buster Similar to falcosecurity/falco-driver-loader (see above) but based on a legacy Debian image (i.e. buster ). Recommended only for old kernel versions.