Building and running Lacework CLI in Docker-less environments using podman and buildah

[marcredhat]

Hi,

Please find below how I build and run Lacework CLI containers in Docker-less environments using podman and buildah:

Buildah from scratch:
https://github.com/marcredhat/lacework/blob/master/demo4.sh

Buildah from Dockerfile:
https://github.com/marcredhat/lacework/blob/master/demo3.sh

Hope this helps,
Marc

[afiune]

Hey Marc, thank you for bringing these demos to our attention and to play with the Lacework CLI! 💯

I have a couple of things to mention, the first one is that we introduced a new feature to the
lacework configure command to run non-interactively. I saw that your shell scripts are executing
the command:

lacework configure --account "<account>" --api_key "<API key>" --api_secret "<API secret>"

I would recommend you to pass the flag --noninteractive to the previous command to avoid the
interactions with a prompt.

The second thing to mention is that we do have a certified container for our agent:

• https://catalog.redhat.com/software/containers/lacework/lacework-agent/5e8b82e2ecb5246c09fe95db

But, we do not have a container for our CLI, which is definitely a feature we would like to have and that you
have already contributed with your scripts. 🥇 Thank you for that!

Last, we were wondering what was the motivation to work on this? what are you using the Lacework CLI for?
Is there anything we can help you with?