mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 09:28:54 +00:00
52948b25af
Removing some unmaintained/old docker images (Amazon Linux and CentOS), and keeping most used/updated (Debian, Ubuntu, and Fedora). Use cases for this: - I used this to test wiping a linux host (without needing to wipe my VMs). - Test fleetd on linux amd64 on Apple Silicon (VMs usually are arm64). <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Added support for Fedora 43 and Debian 13.4 container images. * **Bug Fixes** * Improved environment variable validation and configuration handling in the fleetd initialization process. * Enhanced build process reliability with stricter error handling. * **Chores** * Removed support for older container images (Amazon Linux 2023, CentOS Stream 10, Fedora 41, Debian 12.8). * Streamlined Docker Compose configuration with improved security defaults. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
34 lines
1 KiB
YAML
34 lines
1 KiB
YAML
---
|
|
x-default-settings:
|
|
environment: &default-environment
|
|
ENROLL_SECRET: "${ENROLL_SECRET:?ENROLL_SECRET must be set for server authentication}"
|
|
platform: &default-platform linux/amd64
|
|
cap_add: &default-caps
|
|
- SYS_PTRACE
|
|
|
|
#
|
|
# SYS_PTRACE is granted so osquery can read /proc/<pid>/io for processes it
|
|
# doesn't own (otherwise: `[... processes.cpp:510] Cannot read /proc/50/io`).
|
|
# We avoid `privileged: true` because running multiple privileged services
|
|
# at once breaks Docker Desktop for Mac.
|
|
#
|
|
|
|
services:
|
|
ubuntu24.04-fleetd:
|
|
image: "fleetd-ubuntu-24.04"
|
|
platform: *default-platform
|
|
environment: *default-environment
|
|
cap_add: *default-caps
|
|
restart: on-failure
|
|
fedora43-fleetd:
|
|
image: "fleetd-fedora-43"
|
|
platform: *default-platform
|
|
environment: *default-environment
|
|
cap_add: *default-caps
|
|
restart: on-failure
|
|
debian13.4-fleetd:
|
|
image: "fleetd-debian-13.4"
|
|
platform: *default-platform
|
|
environment: *default-environment
|
|
cap_add: *default-caps
|
|
restart: on-failure
|