falcon-node-sensor-build

#!/bin/bash

: <<'#OutsideUsageExample'

docker run --privileged=true -it --rm \
        -e FALCON_CLIENT_ID="$FALCON_CLIENT_ID" \
        -e FALCON_CLIENT_SECRET="$FALCON_CLIENT_SECRET" \
        -v /var/run/docker.sock:/var/run/docker.sock \
        quay.io/crowdstrike/cloud-tools-image \
        falcon-node-sensor-build ubuntu20

#OutsideUsageExample



set -e -o pipefail

function die(){
    echo "$0: fatal error: $*" >&2
    exit 1
}

if [ -z "$FALCON_CLOUD" ]; then
    echo "WARNING: FALCON_CLOUD environment variable missing. Assuming FALCON_CLOUD=us-1" >&2
fi

if [ -z "$FALCON_CLIENT_ID" ]; then
    die "Missing FALCON_CLIENT_ID environment variable. Please provide your OAuth2 API Client ID for authentication with CrowdStrike Falcon platform. Establishing and retrieving OAuth2 API credentials can be performed at https://falcon.crowdstrike.com/support/api-clients-and-keys."
fi
if [ -z "$FALCON_CLIENT_SECRET" ]; then
    die "Missing FALCON_CLIENT_SECRET environment variable. Please provide your OAuth2 API Client Secret for authentication with CrowdStrike Falcon platform. Establishing and retrieving OAuth2 API credentials can be performed at https://falcon.crowdstrike.com/support/api-clients-and-keys."
fi

tempdir=$(mktemp -d)
tempdir_cleanup() { rm -rf "$tempdir"; }; trap tempdir_cleanup EXIT

pushd "$tempdir"
git clone --depth 1 https://github.com/CrowdStrike/Dockerfiles
pushd Dockerfiles

if [ -z "$2" ]; then
    sensor_version=latest;
else
    sensor_version="$2"
fi

case "$1" in
    amazonlinux2)
        falcon_sensor_download --os-name='Amazon Linux' --os-version=2 --sensor-version="${sensor_version}"
        docker build --no-cache=true \
               --build-arg BUILD_DATE="$(date -u +'%Y-%m-%dT%H:%M:%SZ')" \
               --build-arg VCS_REF="$(git rev-parse --short HEAD)" \
               --build-arg FALCON_PKG=falcon-sensor-*.x86_64.rpm \
               -t falcon-node-sensor:latest \
               -f Dockerfile.amazonlinux .
        ;;
    ubuntu18)
        sed -i  's/^FROM ubuntu:.*$/FROM ubuntu:18.04/g' Dockerfile.ubuntu
        falcon_sensor_download --os-name=Ubuntu --os-version=16/18/20 --sensor-version="${sensor_version}"
        docker build --no-cache=true \
               --build-arg BUILD_DATE="$(date -u +'%Y-%m-%dT%H:%M:%SZ')" \
               --build-arg VCS_REF="$(git rev-parse --short HEAD)" \
               --build-arg FALCON_PKG=falcon-sensor_*_amd64.deb \
               -t falcon-node-sensor:latest \
               -f Dockerfile.ubuntu .
        ;;
    ubuntu20)
        falcon_sensor_download --os-name=Ubuntu --os-version=16/18/20 --sensor-version="${sensor_version}"
        docker build --no-cache=true \
               --build-arg BUILD_DATE="$(date -u +'%Y-%m-%dT%H:%M:%SZ')" \
               --build-arg VCS_REF="$(git rev-parse --short HEAD)" \
               --build-arg FALCON_PKG=falcon-sensor_*_amd64.deb \
               -t falcon-node-sensor:latest \
               -f Dockerfile.ubuntu .
         ;;
    rhel8)
        falcon_sensor_download --os-name=RHEL/CentOS/Oracle --os-version=8 --sensor-version="${sensor_version}"
        docker build --no-cache=true \
               --build-arg BUILD_DATE="$(date -u +'%Y-%m-%dT%H:%M:%SZ')" \
               --build-arg VCS_REF="$(git rev-parse --short HEAD)" \
               --build-arg FALCON_PKG=falcon-sensor-*.x86_64.rpm \
               -t falcon-node-sensor:latest \
               -f Dockerfile .
        ;;
    sles15)
        falcon_sensor_download --os-name=SLES --os-version=15 --sensor-version="${sensor_version}"
        docker build --no-cache=true \
               --build-arg BUILD_DATE="$(date -u +'%Y-%m-%dT%H:%M:%SZ')" \
               --build-arg VCS_REF="$(git rev-parse --short HEAD)" \
               --build-arg FALCON_PKG=falcon-sensor-*.rpm \
               -t falcon-node-sensor:latest \
               -f Dockerfile.suse .
        ;;
    *)
        die "Please provide node operating system as command-line argument. Valid options are: amazonlinux2, ubuntu18, ubuntu20, rhel8, sles15"
        ;;
esac

docker images falcon-node-sensor

echo "Contaner falcon-node-sensor:latest has been built successfully"