Skip to content

Latest commit

 

History

History
39 lines (25 loc) · 2.66 KB

README.md

File metadata and controls

39 lines (25 loc) · 2.66 KB
Raw

Libs builder and runtime images

This repository packages two base images for creating libs consumers. These are intented to be used in multi-stage builds where one first builds the Libs consumer using the libs builder image in an initial stage, and then copies the target executable in a second stage that is derived from the runtime image. This should result in very small images for release.

Base images

Image Description Dockerfile Environment
ghcr.io/sysflow-telemetry/libs-base-images/libs A base image containing the pre-installed Falco Libs and tools for building Libs consumers docker/libs FALCO_LIBS_CFLAGS
FALCO_LIBS_LDFLAGS
ghcr.io/sysflow-telemetry/libs-base-images/libs-musl A base image containing the pre-installed Falco Libs and tools for building Libs consumers using musl docker/libs FALCO_LIBS_CFLAGS
FALCO_LIBS_LDFLAGS
ghcr.io/sysflow-telemetry/libs-base-images/runtime A base image containing the Falco Libs driver loader, to be used to build Libs consumer release images docker/driver-loader
ghcr.io/sysflow-telemetry/libs-base-images/runtime-ubi A base image containing the Falco Libs driver loader based on Red Hat UBI, to be used to build Libs consumer release images docker/driver-loader

The libs builder images define two built-in environment variables that can be used in build automation for Libs consumers (e.g., see this Makefile):

  • FALCO_LIBS_CFLAGS: defines the CFLAGS for including the Libs headers

  • FALCO_LIBS_LDFLAGS: defines the LDFLAGS for linking the Libs libraries and dependencies

Creating Libs consumer images

Using this SDK, you can easily create Docker images for your Libs consumer. Example dockerfiles are providede in the examples directory.

To build the docker images for the examples, run:

docker build \
    --build-arg FALCOSECURITY_LIBS_VERSION=$(FALCOSECURITY_LIBS_VERSION) \
    --build-arg FALCOSECURITY_DRIVER_VERSION=$(FALCOSECURITY_DRIVER_VERSION) \
    -f examples/cppscap/Dockerfile -t cppscap .

To perform a live capture with the example consumer, run:

./examples/cppscap/run.sh