falco

GitHub

Cloud Native Runtime Security

RAW Compose
1. Pull Image docker pull falcosecurity/falco
2. 1-Click Launch Command docker run -d -p 2802:2802 --name falco falcosecurity/falco:latest
3. Compose Deployment docker compose up -d
docker/docker-compose/docker-compose.yaml
Download .yml
version: "3"
services:
  falco:
    container_name: falco
    cap_drop:
      - all
    cap_add:
      - sys_admin
      - sys_resource
      - sys_ptrace
    volumes:
      - /var/run/docker.sock:/host/var/run/docker.sock
      - /proc:/host/proc:ro
      - /etc:/host/etc:ro
      - ./config/http_output.yml:/etc/falco/config.d/http_output.yml
    image: falcosecurity/falco:latest

  sidekick:
    container_name: falco-sidekick
    image: falcosecurity/falcosidekick
    environment:
      WEBUI_URL: http://falco-webui:2802

  webui:
    container_name: falco-webui
    image: falcosecurity/falcosidekick-ui:2.2.0
    ports:
      - 127.0.0.1:2802:2802
    depends_on:
      - redis
    command: ['-r', 'redis:6379', '-d']

  redis:
    image: redis/redis-stack:7.2.0-v11