@@ -4,13 +4,14 @@ This section details how you can run Tracee through a container image.
4
4
5
5
## Prerequisites
6
6
7
- Please ensure that Docker or another container runtime is working on your machine.
7
+ Please ensure that Docker or another container runtime is working on your machine.
8
+
8
9
## Run the Tracee container images
9
10
10
11
All of the Tracee container images are stored in a public registry on [ Docker Hub.] ( https://hub.docker.com/r/aquasec/tracee )
11
12
You can easily start experimenting with Tracee using the Docker image.
12
13
13
- ### On x86 architecture, please run the following command:
14
+ ### On x86 architecture, please run the following command
14
15
15
16
``` console
16
17
docker run \
@@ -20,45 +21,45 @@ docker run \
20
21
aquasec/tracee:latest
21
22
```
22
23
23
- ### Steps to run the Tracee container image on arm64:
24
+ ### Steps to run the Tracee container image on arm64
24
25
25
26
There are a few more steps involved in running Tracee through a container image on arm64 (M1).
26
27
27
28
Prerequisites:
28
29
29
30
* [ Vagrant CLI] ( https://developer.hashicorp.com/vagrant/downloads ) installed
30
- * [ Parallels Pro] ( https://www.parallels.com/uk/products/desktop/pro/ ) installed
31
+ * [ Parallels Pro] ( https://www.parallels.com/uk/products/desktop/pro/ ) installed
31
32
32
33
First, clone the Tracee Git repository and move into the root directory:
34
+
33
35
``` console
34
36
git clone [email protected] :aquasecurity/tracee.git
35
37
36
38
cd tracee
37
39
```
38
40
39
41
Next, use Vagrant to start a Parallels VM:
40
- ```
42
+
43
+ ``` console
41
44
vagrant up
42
45
```
43
46
44
47
This will use the [ Vagrantfile] ( https://github.com/aquasecurity/tracee/blob/main/Vagrantfile ) in the root of the Tracee directory.
45
48
46
49
Lastly, ssh into the created VM:
50
+
47
51
``` console
48
52
vagrant ssh
49
53
```
50
54
51
- Now, it is possible to run the Tracee Container image, using the ` aarch64 ` tag:
55
+ Now, it is possible to run the Tracee Container image:
56
+
52
57
``` console
53
58
docker run \
54
59
--name tracee --rm -it \
55
60
--pid=host --cgroupns=host --privileged \
56
61
-v /etc/os-release:/etc/os-release-host:ro \
57
- aquasec/tracee:aarch64
62
+ aquasec/tracee:latest
58
63
```
59
64
60
- The Tracee output should be similar to the following screenshot:
61
-
62
- ![ Tracee Container Image output in Vragrant on arm64] ( ../images/docker-arm64.png )
63
-
64
65
To learn how to install Tracee in a production environment, [ check out the Kubernetes guide] ( ./kubernetes-quickstart ) .
0 commit comments