Falco 0.26.1 a.k.a. "the static release"
Today we announce the release of Falco 0.26.1 🥳
This one is a hotfix release for the Falco 0.26.0 released last week!
You can take a look at the set of changes here:
As usual, in case you just want to try out the stable Falco 0.26.1, you can install its packages following the process outlined in the docs:
Do you rather prefer using the docker images? No problem!
You can read more about running Falco with Docker in the docs.
What's new?
From this Falco version onwards, if you download Falco using the tarball distribution (binary) or the falcosecurity/falco-no-driver container image, you will get a 100% statically-linked version of Falco! ⛓
The use case for this is that you can now download the tarball and copy the Falco binary (and configuration files) to any target machine or container without depending on the underlying system libraries, included libc.
The userspace working group is already using this in the experiments to bring Falco to new endeavors like AWS Fargate. 🕶
Rules
As always, our rules set is constantly improving and adapting to the constantly changing world. Many thanks to @ldegio, @mstemm, @csschwe and @leogr.
What's next?
As always, you have a chance to be part of this release by joining our community calls!
In the last Falco call the community chose to release Falco every 2 months, from now on. ⏰
So, we just created the milestone for 0.27.0 due by December 1st, 2020.
See you in winter!
Leo & Lore