{"id":28409999,"url":"https://github.com/crowdstrike/falcon-bootc","last_synced_at":"2026-02-17T08:03:15.354Z","repository":{"id":256986391,"uuid":"838991522","full_name":"CrowdStrike/falcon-bootc","owner":"CrowdStrike","description":"Configuration for creating a bootc-based image with the Falcon sensor installed.","archived":false,"fork":false,"pushed_at":"2024-09-13T14:34:15.000Z","size":27,"stargazers_count":3,"open_issues_count":0,"forks_count":0,"subscribers_count":7,"default_branch":"main","last_synced_at":"2025-10-15T09:09:33.151Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Dockerfile","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/CrowdStrike.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-08-06T18:41:43.000Z","updated_at":"2025-08-07T18:26:03.000Z","dependencies_parsed_at":"2024-09-14T07:27:34.060Z","dependency_job_id":"26ff2ef1-f7b3-4a18-bdef-c817aec589ce","html_url":"https://github.com/CrowdStrike/falcon-bootc","commit_stats":null,"previous_names":["crowdstrike/falcon-bootc"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/CrowdStrike/falcon-bootc","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CrowdStrike%2Ffalcon-bootc","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CrowdStrike%2Ffalcon-bootc/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CrowdStrike%2Ffalcon-bootc/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CrowdStrike%2Ffalcon-bootc/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/CrowdStrike","download_url":"https://codeload.github.com/CrowdStrike/falcon-bootc/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CrowdStrike%2Ffalcon-bootc/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29537256,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-17T05:00:25.817Z","status":"ssl_error","status_checked_at":"2026-02-17T04:57:16.126Z","response_time":100,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-06-02T11:09:37.686Z","updated_at":"2026-02-17T08:03:15.343Z","avatar_url":"https://github.com/CrowdStrike.png","language":"Dockerfile","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cp align=\"center\"\u003e\n   \u003cimg src=\"img/crowdstrike.png\" alt=\"CrowdStrike logo\" width=\"500\"/\u003e\n\u003c/p\u003e\n\n# falcon-bootc\n\nConfiguration for creating a bootc-based image with the Falcon sensor installed.\n\nThis is an example that users should adapt to their bootc workflow. The resulting image will be\nassociated with a specific customer ID (CID). Upon startup, the host will generate a new agent ID (AID).\n\n## Support\n\nfalcon-bootc is an open source project, not a CrowdStrike product. As such, it carries no formal support, expressed or implied.\n\n## Prerequisites\n\n### RHEL setup\n\n1. Install Podman\n2. Log in to the Red Hat registry:\n\n```bash\npodman login registry.redhat.io\n# enter your Red Hat login\n```\n\n### Mac setup\n\n1. Install Podman\n2. Create a Podman machine with rootful and a volume mount:\n\n```bash\npodman machine init --rootful -v $HOME/projects:$HOME/projects\n```\n\n3. Log in to the Red Hat registry:\n\n```bash\npodman login registry.redhat.io\n# enter your Red Hat login\n```\n\n4. Register the Podman machine so it has access to subscription content (don't copy and paste both commands into the terminal, you need to start the SSH session _then_ register):\n\n```bash\npodman machine ssh\n# then inside the ssh session...\nsubscription-manager register\n# enter your Red Hat login\n```\n\n## Building\n\n1. Download a GPG key and RPM that matches the system's architecture and place them in `assets`. Note: the `Containerfile` installs any `*.gpg` and `*.rpm` file found, so ensure the files match this convention.\n2. Retrieve your CID and set as as environment variable: `FALCON_CID=abcd1234`\n3. Build the container image: `podman build --build-arg FALCON_CID=$FALCON_CID -t falcon-bootc-demo:latest .`\n4. Build the bootable image:\n\n```\npodman run \\\n  --rm \\\n  --privileged \\\n  --pull=newer \\\n  --security-opt label=type:unconfined_t \\\n  -v ./config.toml:/config.toml \\\n  -v ./output:/output \\\n  -v /var/lib/containers/storage:/var/lib/containers/storage \\\n  registry.redhat.io/rhel9/bootc-image-builder:latest \\\n  --type iso \\\n  --config /config.toml \\\n  --local=true \\\n  localhost/falcon-bootc-demo:latest\n```\n\n5. Launch a VM with the ISO as the boot disk.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcrowdstrike%2Ffalcon-bootc","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcrowdstrike%2Ffalcon-bootc","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcrowdstrike%2Ffalcon-bootc/lists"}