Dig into Atomic Host!

Falco Feeds enhances the capabilities of the open-source security tool Falco by providing continuously updated expert-written rules to address emerging threats. The latest sysdig release introduces expanded support for minimal container-focused Linux distributions, including RHEL Atomic Host, CentOS Atomic Host, and Fedora Atomic Host, alongside the existing CoreOS support. These Atomic Hosts are lightweight versions of traditional distributions designed primarily for running Docker containers, which traditionally lack comprehensive monitoring tools. By running sysdig within an Atomic Host, users gain full visibility into both the host and their containers. Sysdig, comprised of the sysdig-probe kernel driver and userspace programs, can now operate on distributions without available kernel headers by utilizing precompiled kernel modules, simplifying installation and enhancing troubleshooting capabilities in container environments. As sysdig continues to evolve, these improvements aim to advance the container ecosystem and facilitate easier monitoring processes.