This environment is provided for demonstration purposes only and does not represent a production ready deployment of Falco.
The components that this docker-compose file spins up are Falco, falcosidekick, falcosidekick-ui and a redis database.
To start this environment run docker-compose up
.
Note: You may need to use sudo for Falco to start correctly.
To clean up run docker-compose rm
.
If you'd like to generate events that will trigger rules and show up in the UI you can run docker run -it --rm falcosecurity/event-generator run syscall --loop