Lucas Manuel Rodriguez
05493a8fe5
This eases the testing of fleetd updates (to `edge`) on Linux amd64 (from macOS). <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Build process now accepts optional CLI configuration parameters (--update-url, --orbit-channel, --desktop-channel, --osqueryd-channel) to customize package generation during builds. * Containerized fleetd services now use a restart policy that keeps services running unless explicitly stopped, improving reliability and reducing downtime. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
35 lines
1.0 KiB
YAML
35 lines
1.0 KiB
YAML
---
|
|
x-default-settings:
|
|
environment: &default-environment
|
|
ENROLL_SECRET: "${ENROLL_SECRET:?ENROLL_SECRET must be set for server authentication}"
|
|
platform: &default-platform linux/amd64
|
|
cap_add: &default-caps
|
|
- SYS_PTRACE
|
|
|
|
#
|
|
# SYS_PTRACE is granted so osquery can read /proc/<pid>/io for processes it
|
|
# doesn't own (otherwise: `[... processes.cpp:510] Cannot read /proc/50/io`).
|
|
# We avoid `privileged: true` because running multiple privileged services
|
|
# at once breaks Docker Desktop for Mac.
|
|
#
|
|
|
|
services:
|
|
ubuntu24.04-fleetd:
|
|
image: "fleetd-ubuntu-24.04"
|
|
platform: *default-platform
|
|
environment: *default-environment
|
|
cap_add: *default-caps
|
|
restart: unless-stopped
|
|
fedora43-fleetd:
|
|
image: "fleetd-fedora-43"
|
|
platform: *default-platform
|
|
environment: *default-environment
|
|
cap_add: *default-caps
|
|
restart: unless-stopped
|
|
debian13.4-fleetd:
|
|
image: "fleetd-debian-13.4"
|
|
platform: *default-platform
|
|
environment: *default-environment
|
|
cap_add: *default-caps
|
|
restart: unless-stopped
|