From 3beadb0cafe00ecc2425897ac28c0c86d22fcba3 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Fri, 31 Jul 2020 17:48:27 -0400 Subject: [PATCH] Update README with thank you note --- Dockerfile | 8 ++++---- README.md | 9 ++++++--- 2 files changed, 10 insertions(+), 7 deletions(-) diff --git a/Dockerfile b/Dockerfile index e202c37..ef5ee27 100644 --- a/Dockerfile +++ b/Dockerfile @@ -10,7 +10,7 @@ USER root # Friendly reminder that generated container images are from an open source # project, and not a formal CrowdStrike product. # -LABEL maintainer="https://github.com/CrowdStrike/openshift-falcon-daemonset" +LABEL maintainer="https://github.com/CrowdStrike/dockerfiles/" # # Apply updates to base image. @@ -42,9 +42,9 @@ ARG VCS_REF # VCS_REF=$(git rev-parse --short HEAD) LABEL org.label-schema.build-date=$BUILD_DATE LABEL org.label-schema.schema-version "1.0" LABEL org.label-schema.description "CrowdStrike Falcon Linux Sensor" -LABEL org.label-schema.vendor "https://github.com/CrowdStrike/openshift-falcon-daemonset" -LABEL org.label-schema.url="https://github.com/CrowdStrike/openshift-falcon-daemonset" -LABEL org.label-schema.vcs-url="https://github.com/CrowdStrike/openshift-falcon-daemonset" +LABEL org.label-schema.vendor "https://github.com/CrowdStrike/dockerfiles/" +LABEL org.label-schema.url="https://github.com/CrowdStrike/dockerfiles/" +LABEL org.label-schema.vcs-url="https://github.com/CrowdStrike/dockerfiles/" LABEL org.label-schema.vcs-ref=$VCS_REF LABEL org.label-schema.docker.cmd \ "docker run -d --privileged -v /var/log:/var/log \ diff --git a/README.md b/README.md index 9561224..dd84799 100644 --- a/README.md +++ b/README.md @@ -74,7 +74,7 @@ FALCONCTL_OPT_MEMFAIL_EVERY_N The sensor can be run as a background service as follows: ```shell -CONTAINER_ID=$(docker run -d \ +$ CONTAINER_ID=$(docker run -d \ -e FALCONCTL_OPT_CID=<> \ -e FALCONCTL_OPT_TRACE=debug \ --privileged --net=host \ @@ -87,8 +87,11 @@ Replace ``<>`` with your CrowdStrike Customer ID (CID). This can be fo `falconctl` can be invoked inside a running sensor container with `docker exec`: ```shell -docker exec -it $CONTAINER_ID falconctl -g --trace +$ docker exec -it $CONTAINER_ID falconctl -g --trace ``` ## Post-build Actions -Push the image to a registry (like ECR) if the container needs to be accessed outside of the build host. \ No newline at end of file +Push the image to a registry (like ECR) if the container needs to be accessed outside of the build host. + +## Many Thanks +Thank you to [Dinesh Subhraveti](https://www.linkedin.com/in/subhraveti/) whose initial code inspired this repo! \ No newline at end of file