History

José Carlos Chávez bff2f619df fix: indentation Co-authored-by: Samuel Gaist <samuel.gaist@idiap.ch> Signed-off-by: José Carlos Chávez <jcchavezs@gmail.com>		2025-08-11 10:46:35 +02:00
..
docker-compose	fix(docker): fix docker-compose with correct image name for Falco.	2024-11-05 17:38:11 +01:00
driver-loader	fix: indentation	2025-08-11 10:46:35 +02:00
driver-loader-buster	fix: indentation	2025-08-11 10:46:35 +02:00
falco	chore: adds labels to falco-debian, driver-loader and driver-loader-buster	2025-08-11 10:46:35 +02:00
falco-debian	fix: indentation	2025-08-11 10:46:35 +02:00
OWNERS	chore(OWNERS): remove duplicates in reviewers	2022-07-20 10:39:56 +02:00
README.md	docs(docker): update images description	2024-11-05 17:38:11 +01:00

README.md

Falco Dockerfiles

This directory contains various ways to package Falco as a container and related tools.

Currently Supported Images

Name	Directory	Description
falcosecurity/falco:latest, falcosecurity/falco:tag, falcosecurity/falco:master	docker/falco	Distroless image based on the latest released tar.gz of Falco. No tools are included in the image.
falcosecurity/falco:latest-debian, falcosecurity/falco:tag-debian, falcosecurity/falco:master-debian	docker/falco-debian	Debian-based image. Include some tools (i.e. jq, curl). No driver-building toolchain support.
falcosecurity/falco-driver-loader:latest, falcosecurity/falco-driver-loader:tag, falcosecurity/falco-driver-loader:master	docker/driver-loader	Based on falcosecurity/falco:x.y.z-debian (see above) plus the driver building toolchain support and falcoctl. This is intended to be used as an installer or an init container when modern eBPF cannot be used.
falcosecurity/falco-driver-loader:latest-buster, falcosecurity/falco-driver-loader:tag-buster, falcosecurity/falco-driver-loader:master-debian	docker/driver-loader-buster	Similar to falcosecurity/falco-driver-loader (see above) but based on a legacy Debian image (i.e. buster ). Recommended only for old kernel versions.