Comments (6)
Hey @happy-dude, I had a similar requiremt for testing purposes - Wanted to see how Tetragon compares to other eBPF security tools on my test machines that don't have Kubernetues clusters running on them.
Helpfully @tixxdz on the Slack shared this gist to run things inside a docker container, provided the machine you run Docker on meets the requirements
# 1. Run Tetragon in a detached privliged Docker container, mounting required folders
docker run --name tetragon \
--rm -it -d --pid=host --cgroupns=host \
--privileged \
-v /sys/kernel/btf/vmlinux:/var/lib/tetragon/btf \
quay.io/cilium/tetragon:v0.8.0 \
bash -c "/usr/bin/tetragon"
#2. Get events:
docker exec -it tetragon \
bash -c "/usr/bin/tetra getevents -o compact"
@willfindlay , while I understand this isn't a 'proper' way to deploy Tetragon, having this example in the repo (under "local testing" or something) would be extremely useful for people wanting to try and compare Tetragon without needing a full k8s environment
from tetragon.
@pathtofile @happy-dude #384 this should do it for now right? for pure deb or rpm packages it is just matter of priorities we will try to do it, or maybe someone will contribute it. Thank you!
from tetragon.
Hey team,
Howdy! Thanks for your interest in the project :)
After reading the announcement of the project, I've been eager and excited to play around and compare how the tool compares to others like Falco.
I was able to follow the instructions and get an environment running within a Vagrant image and monitoring the sample kuburnetes container images.
At a glance (might be wrong here), it seems that the Makefile makes some assumptions about being installed in a container and not the host itself.
Nope, you should be able to build a standalone binary as follows: make tools-install && LD_LIBRARY_PATH=$(realpath ./lib) make
. Then you could just copy the tetragon
binary to your desired location (i.e. somewhere in your PATH). You can pass in a CRD to a standalone tetragon using the --config-file
command line flag.
Are there any plans to offer an installation package (deb, rpm) that allows for a stand-alone installation and configuration of the daemon?
I don't know of any plans per se, but I'm sure a PR would be welcome if you want to make a package for your favourite distro.
from tetragon.
having this example in the repo (under "local testing" or something) would be extremely useful
Agreed, would be happy to take a PR. :)
from tetragon.
We do have a systemd installation now, so closing this.
from tetragon.
Very, very, late, but thanks @tixxdz !
from tetragon.
Related Issues (20)
- LSM `security_path_*` deletion kprobes can't resolve target dentry name HOT 2
- field-filters: filter message and tags fields
- metrics: add tags support HOT 2
- policyfilter test failure on bpf-next
- gRPC server can't be disabled
- Tetragon does not allow getting healthcheck and non healthcheck events at the same time
- Using rateLimit on tcp_connect calls doesn't have any effect HOT 2
- Documentation: broken links automatic report HOT 4
- Documentation: broken links automatic report
- update docs to use NotifyEnforcer HOT 1
- v1.1.1 release HOT 1
- v1.1.2 release HOT 2
- TestDemoApp failure
- Dynamic log level change doesn't work the same for all environments
- Cannot track users attempting to follow symlinks outside of a directory root
- New `TestPolicyListingWhileLoadUnload` introduces a flake
- `tetra getevents` filtering with --pods returns no pod HOT 1
- Implement parent_binary export filter
- [Doc] Getting Started > File Access Monitoring, is the doc correct ? HOT 3
- panic: runtime error: invalid memory address or nil pointer dereference HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from tetragon.