Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/levonet/docker-rsyslog

Fastest and smaller Rsyslog built with CPU optimization and third party modules
https://github.com/levonet/docker-rsyslog

clickhouse docker dockerfile elasticsearch kafka logging mongodb rsyslog syslog

Last synced: about 1 month ago
JSON representation

Fastest and smaller Rsyslog built with CPU optimization and third party modules

Awesome Lists containing this project

README

        

# Supported tags and respective `Dockerfile` links

- [`latest` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/master/Dockerfile)
- [`8.2208.1-alpine`, `8.2208-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2208.1/Dockerfile)
- Older versions

- [`8.2206.0-alpine`, `8.2206-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2206.0/Dockerfile)
- [`8.2112.0-alpine`, `8.2112-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2112.0/Dockerfile)
- [`8.2110.0-alpine`, `8.2110-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2110.0/Dockerfile)
- [`8.2108.0-alpine`, `8.2108-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2108.0/Dockerfile)
- [`8.2106.0-alpine`, `8.2106-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2106.0/Dockerfile)
- [`8.2104.0-alpine`, `8.2104-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2104.0/Dockerfile)
- [`8.2102.0-alpine`, `8.2102-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2102.0/Dockerfile)
- [`8.2012.0-alpine`, `8.2012-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2012.0/Dockerfile)
- [`8.2010.0-alpine`, `8.2010-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2010.0/Dockerfile)
- [`8.2008.0-alpine`, `8.2008-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2008.0/Dockerfile)
- [`8.2006.0-alpine`, `8.2006-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2006.0/Dockerfile)
- [`8.2004.0-alpine`, `8.2004-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2004.0/Dockerfile)
- [`8.2002.0-alpine`, `8.2002-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2002.0/Dockerfile)
- [`8.2001.0-alpine`, `8.2001-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.2001.0/Dockerfile)
- [`8.1911.0-alpine`, `8.1911-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.1911.0/Dockerfile)
- [`8.1910.0-alpine`, `8.1910-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.1910.0/Dockerfile)
- [`8.1908.0-alpine`, `8.1908-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.1908.0/Dockerfile)
- [`8.1907.0-alpine`, `8.1907-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.1907.0/Dockerfile)
- [`8.1905.1-alpine`, `8.1905-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.1905.1/Dockerfile)
- [`8.1904.1-alpine`, `8.1904-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.1904.1/Dockerfile)
- [`8.1903.0-alpine`, `8.1903-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.1903.0/Dockerfile)
- [`8.1901.0-alpine`, `8.1901-alpine` (*Dockerfile*)](https://github.com/levonet/docker-rsyslog/blob/v8.1901.0/Dockerfile)

# Rsyslog

[![build](https://github.com/levonet/docker-rsyslog/actions/workflows/build.yml/badge.svg)](https://github.com/levonet/docker-rsyslog/actions/workflows/build.yml)
[![Docker Pulls](https://img.shields.io/docker/pulls/levonet/rsyslog.svg)](https://hub.docker.com/r/levonet/rsyslog/)

**Fastest** and **smaller** Rsyslog built for x86-64 CPU architecture.

This source is used to build an image for rsyslog.

## Modules

Rsyslog has a modular design. This enables functionality to be dynamically loaded from modules, which may also be written by any third party.
The image contains:


OutputInputParserMessage ModificationFunctionsLibrary



omclickhouse

omelasticsearch

omfile-hardened

omgssapi

omhiredis

omhttp

omhttpfs

omkafka

omlibdbi

ommail

ommongodb

ommysql

ompgsql

omprog

omrelp

omruleset

omstdout

omtesting

omuxsock

im3195

imbatchreport

imdiag

imdocker

imfile

imgssapi

imhiredis

imhttp

imkafka

imklog

immark

impcap

impstats

imptcp

imrelp

imtcp

imtuxedoulog

imudp

imuxsock

pmaixforwardedfrom

pmciscoios

pmcisconames

pmdb2diag

pmlastmsg

pmnormalize

pmnull

pmpanngfw

pmsnare

mmanon

mmaudit

mmcount

mmdarwin

mmdblookup

mmexternal

mmfields

mmgrok

mmjsonparse

mmkubernetes

mmnormalize

mmpstrucdata

mmrfc5424addhmac

mmrm1stspace

mmsequence

mmtaghostname

mmutf8fix

fmhash

fmhttp

lmcry_gcry

lmnet

lmnetstrms

lmnsd_gtls

lmnsd_ossl

lmnsd_ptcp

lmregexp

lmtcpclt

lmtcpsrv

lmzlibw

## How to use this image

This container will listen on `514/udp`, and `514/tcp` and drop all input data without additional configuration.

Rsyslog configuration will load any additionnal configuration files within `/etc/rsyslog.d/` ending by the `.conf` extension.

Run a container from the CLI:

```sh
docker run --name rsyslog -d -p 514:514/tcp -p 514:514/udp \
-v /etc/rsyslog.d:/etc/rsyslog.d \
-v /path/syslog:/var/log/syslog \
levonet/rsyslog
```

## Image Variants

### `levonet/rsyslog:-alpine`

This image is based on the popular [Alpine Linux project](http://alpinelinux.org/), available in [the `alpine` official image](https://hub.docker.com/_/alpine).
Alpine Linux is much smaller than most distribution base images (~5MB), and thus leads to much slimmer images in general.

This variant is highly recommended when final image size being as small as possible is desired. The main caveat to note is that it does use [musl libc](http://www.musl-libc.org/) instead of [glibc and friends](http://www.etalabs.net/compare_libcs.html), so certain software might run into issues depending on the depth of their libc requirements. However, most software doesn't have an issue with this, so this variant is usually a very safe choice.
See [this Hacker News comment thread](https://news.ycombinator.com/item?id=10782897) for more discussion of the issues that might arise and some pro/con comparisons of using Alpine-based images.

To minimize image size, it's uncommon for additional related tools (such as `git` or `bash`) to be included in Alpine-based images. Using this image as a base, add the things you need in your own Dockerfile (see the [`alpine` image description](https://hub.docker.com/_/alpine/) for examples of how to install packages if you are unfamiliar).