mirror of
https://github.com/falcosecurity/falco.git
synced 2026-04-02 18:12:15 +00:00
6356490b1c
Small changes to improve the use of falco_event_generator with falco: - In event_generator, some actions like exec_ls won't trigger notifications on their own. So exclude them from -a all. - For all actions, print details on what the action will do. - For actions that won't result in a falco notification in containers, note that in the output. - The short version of --once wasn't working, fix the getopt. - Explicitly saying -a all wasn't working, fix. - Don't rely on an external ruleset in the nodejs docker-compose demo--the built in rules are sufficient now.
24 lines
567 B
YAML
24 lines
567 B
YAML
# Owned by software vendor, serving install-software.sh.
|
|
express_server:
|
|
container_name: express_server
|
|
image: node:latest
|
|
working_dir: /usr/src/app
|
|
command: bash -c "npm install && node server.js"
|
|
ports:
|
|
- "8080:8080"
|
|
volumes:
|
|
- ${PWD}:/usr/src/app
|
|
|
|
falco:
|
|
container_name: falco
|
|
image: sysdig/falco:latest
|
|
privileged: true
|
|
volumes:
|
|
- /var/run/docker.sock:/host/var/run/docker.sock
|
|
- /dev:/host/dev
|
|
- /proc:/host/proc:ro
|
|
- /boot:/host/boot:ro
|
|
- /lib/modules:/host/lib/modules:ro
|
|
- /usr:/host/usr:ro
|
|
tty: true
|