Skip to content

Commit

Permalink
chore: add docker-compose file for securing unorchestrated container
Browse files Browse the repository at this point in the history
Signed-off-by: Navin Chandra <navinchandra772@gmail.com>
  • Loading branch information
navin772 committed Jun 26, 2024
1 parent 1fc5a38 commit e442ae9
Showing 1 changed file with 26 additions and 0 deletions.
26 changes: 26 additions & 0 deletions docker-compose.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
services:
kubearmor-init:
image: kubearmor/kubearmor-init:stable
restart: unless-stopped
volumes:
- /tmp/:/opt/kubearmor/BPF

kubearmor:
image: kubearmor/kubearmor:latest
depends_on:
kubearmor-init:
condition: service_completed_successfully
restart: unless-stopped
privileged: true
command: ["-k8s=false", "-enableKubeArmorHostPolicy"]
pid: "host"
ipc: "host"
network_mode: "host"
volumes:
- /tmp/:/opt/kubearmor/BPF
- /sys/fs/bpf:/sys/fs/bpf
- /sys/kernel/security:/sys/kernel/security
- /sys/kernel/debug:/sys/kernel/debug
- /var/run/docker.sock:/var/run/docker.sock
- /var/lib/docker:/var/lib/docker
- /etc/apparmor.d:/etc/apparmor.d

0 comments on commit e442ae9

Please sign in to comment.