docker 安装Sysdig Falco
时间: 2023-08-25 13:15:45 浏览: 249
docker安装
要安装Sysdig Falco,您可以按照以下步骤进行操作:
1. 部署收集程序:使用以下命令在Docker中运行Falco收集程序,并指定展示程序地址:
```
docker run -d \
-p 2801:2801 \
--name falcosidekick \
-e WEBUI_URL=http://192.168.130.145:2802 \
falcosecurity/falcosidekick
```
这将在Docker中启动Falco收集程序,并将展示程序地址设置为http://192.168.130.145:2802。# vim falco.yaml
......
json_output: true
......
http_output:
enabled: true
url: "http://192.168.130.145:2801/"
user_agent: "falcosecurity/falco"
[root@k8s-node1 falco# systemctl restart falco-custom
```
这将修改Falco配置文件,使其以JSON格式输出,并启用HTTP输出,并将收集程序地址设置为http://192.168.130.145:2801。然后重新启动Falco服务。<em>1</em><em>2</em><em>3</em>
#### 引用[.reference_title]
- *1* *3* [K8s进阶7——Sysdig、Falco、审计日志](https://blog.csdn.net/yi_qingjun/article/details/130260005)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v92^chatsearchT3_1"}} ] [.reference_item]
- *2* [Sysdig Falco:你不可不知的Docker安全监控利器](https://blog.csdn.net/weixin_34376562/article/details/89594095)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v92^chatsearchT3_1"}} ] [.reference_item]
[ .reference_list ]
阅读全文