Skip to main content
Version: v2.3

Docker

On a Linux-based Docker host, the ThreatStryker agents are deployed as a lightweight container.

Install a docker runtime on the Linux host.

For Windows Server hosts, experimental support exists, but it is not suitable for production use.

Installation of ThreatStryker Sensors

The host or VM to be used for the Deepfence agents needs to have the docker runtime installed on it.

info

Image tags quay.io/deepfenceio/deepfence_agent:2.3.1-multiarch and quay.io/deepfenceio/deepfence_cluster_agent:2.3.1-multiarch are supported in amd64 and arm64/v8 architectures.

Docker

  1. Download the following script: start-agent.sh 🔗

    wget https://docs.deepfence.io/threatstryker/files/v2.3/start-agent.sh
  2. To authenticate to the docker image repository, run the following command:

    docker login quay.io

    When prompted, please provide the credentials sent by email.

  3. Run the script as follows:

    bash start-agent.sh -r <IP_ADDRESS_OF_UI_MACHINE> -k xxxxxxxx

Podman

  1. Download the following script: start-podman-agent.sh 🔗

    wget https://docs.deepfence.io/threatstryker/files/v2.3/start-podman-agent.sh
  2. To authenticate to the docker image repository, run the following command:

    sudo podman login quay.io

    When prompted, please provide the credentials sent by email.

  3. Run the script as follows:

    bash start-podman-agent.sh -r <IP_ADDRESS_OF_UI_MACHINE> -k xxxxxxxx
tip

Optionally the sensor container can be further tagged using USER_DEFINED_TAGS="" in the above command. Tags should be comma separated, for example, "dev,front-end".

Upgrade the ThreatStryker Sensors

To upgrade a sensor install, stop the existing sensor and start the new version.

Using a Proxy Server with Docker

If ThreatStryker management console is accessed through a proxy server, add the proxy server details to the docker configuration.

Edit the file: ~/.docker/config.json, and add the following content. Remember to change the proxy server ip address from 111.111.111.111 to your proxy server ip:

{
"auths": {
"https://index.docker.io/v1/": {
"auth": ""
}
},
"HttpHeaders": {
"User-Agent": "Docker-Client/19.03.1 (linux)"
},
"proxies": {
"default": {
"httpProxy": "http://111.111.111.111:8006",
"httpsProxy": "http://111.111.111.111:8006",
"noProxy": "localhost,127.0.0.1"
}
}
}

Restart the docker daemon:

sudo systemctl restart docker

ThreatMapper agent VMs do not require any changes for proxy server.