falco Docker & Self-Hosted Deployment

GitHub

Cloud Native Runtime Security

8,928 stars C++ C++ 1 file · ~4,841 tokens #cloud-native#cncf#cncf-project#containers#ebpf#falco#hacktoberfest#kubernetes
RAW Compose
1. Pull Image (DOCKERHUB) docker pull falcosecurity/falco
2. Docker Run (1-Click Launch) docker run -d --name falco -p 2802:2802 --restart always falcosecurity/falco:latest
3. Podman Run podman run -d --name falco -p 2802:2802 --restart always falcosecurity/falco:latest
4. Skopeo Inspect (Zero-Pull Manifest) skopeo inspect docker://docker.io/falcosecurity/falco:latest
5. ORAS Pull (OCI Artifact) oras pull falcosecurity/falco:latest
6. Compose Deployment docker compose up -d
docker/docker-compose/docker-compose.yaml
Download .yml 
version: "3"
services:
  falco:
    container_name: falco
    cap_drop:
      - all
    cap_add:
      - sys_admin
      - sys_resource
      - sys_ptrace
    volumes:
      - /var/run/docker.sock:/host/var/run/docker.sock
      - /proc:/host/proc:ro
      - /etc:/host/etc:ro
      - ./config/http_output.yml:/etc/falco/config.d/http_output.yml
    image: falcosecurity/falco:latest

  sidekick:
    container_name: falco-sidekick
    image: falcosecurity/falcosidekick
    environment:
      WEBUI_URL: http://falco-webui:2802

  webui:
    container_name: falco-webui
    image: falcosecurity/falcosidekick-ui:2.2.0
    ports:
      - 127.0.0.1:2802:2802
    depends_on:
      - redis
    command: ['-r', 'redis:6379', '-d']

  redis:
    image: redis/redis-stack:7.2.0-v11