ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0 linux/amd64

ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0 - 国内下载镜像源 浏览次数:9

这个镜像是Malcolm项目(由Idaho Lab开发的网络流量分析平台)中使用的Filebeat OSS版本,Filebeat是轻量级的日志数据采集工具,用于在Malcolm架构里收集、转发各类日志数据,支持将日志发送到指定的后端服务进行进一步处理与分析。

源镜像 ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0
国内镜像 swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0
镜像ID sha256:1c253697799fbe59b6d14c326564639029380f287ee311a06a1cf12b56369b01
镜像TAG 26.06.0
大小 472.35MB
镜像源 ghcr.io
CMD /usr/local/bin/supervisord -c /etc/supervisord.conf -u root -n
启动入口 /usr/bin/tini -- /usr/local/bin/docker-uid-gid-setup.sh /usr/local/bin/service_check_passthrough.sh -s filebeat
工作目录 /usr/share/filebeat
OS/平台 linux/amd64
浏览量 9 次
贡献者
镜像创建 2026-06-01T14:32:48.593664139Z
同步时间 2026-06-13 17:55
目录挂载
/usr/share/filebeat-logs/data /usr/share/filebeat-nginx/data /usr/share/filebeat-syslog-tcp/data /usr/share/filebeat-syslog-udp/data /usr/share/filebeat-tcp/data /usr/share/filebeat-zeek-files-logs/data
环境变量
PATH=/usr/share/filebeat:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin container=oci ELASTIC_CONTAINER=true GODEBUG=madvdontneed=1 LIBBEAT_MONITORING_CGROUPS_HIERARCHY_OVERRIDE=/ DEFAULT_UID=1000 DEFAULT_GID=1000 PUSER=filebeat PGROUP=filebeat PUSER_CHOWN=/usr/share/filebeat-logs/data;/usr/share/filebeat-nginx/data;/usr/share/filebeat-syslog-tcp/data;/usr/share/filebeat-syslog-udp/data;/usr/share/filebeat-tcp/data;/usr/share/filebeat-zeek-files-logs/data PUSER_PRIV_DROP=false TERM=xterm PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 PIP_ROOT_USER_ACTION=ignore SUPERCRONIC_VERSION=0.2.46 SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux- SUPERCRONIC_CRONTAB=/etc/crontab TINI_VERSION=v0.19.0 TINI_URL=https://github.com/krallin/tini/releases/download/v0.19.0/tini YQ_VERSION=4.53.2 YQ_URL=https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_ EVTX_VERSION=0.11.2 EVTX_URL=https://github.com/omerbenamram/evtx/releases/download/v0.11.2/evtx_dump-v0.11.2-XXX-unknown-linux-gnu AUTO_TAG=true LOG_CLEANUP_MINUTES=0 ZIP_CLEANUP_MINUTES=0 FILEBEAT_WATCHER_POLLING=false FILEBEAT_WATCHER_POLLING_ASSUME_CLOSED_SEC=10 FILEBEAT_SCAN_FREQUENCY=10s FILEBEAT_CLEAN_INACTIVE=180m FILEBEAT_IGNORE_OLDER=120m FILEBEAT_CLOSE_INACTIVE=120s FILEBEAT_CLOSE_RENAMED=true FILEBEAT_CLOSE_REMOVED=true FILEBEAT_CLOSE_EOF=true FILEBEAT_CLEAN_REMOVED=true FILEBEAT_ZEEK_LOG_PATH=/zeek/current FILEBEAT_ZEEK_LOG_LIVE_PATH=/zeek/live FILEBEAT_FILESCAN_LOG_PATH=/filescan FILEBEAT_SURICATA_LOG_PATH=/suricata FILEBEAT_NGINX_LOG_PATH=/nginx FILEBEAT_MAIN_LOGS=true FILEBEAT_ZEEK_FILE_LOGS=true NGINX_LOG_ACCESS_AND_ERRORS=false FILEBEAT_TCP_LISTEN=false FILEBEAT_TCP_PORT=5045 FILEBEAT_TCP_LOG_FORMAT=raw FILEBEAT_TCP_MAX_CONNECTIONS=32 FILEBEAT_TCP_MAX_MESSAGE_SIZE=20MB FILEBEAT_TCP_PARSE_ADD_ERROR_KEY=true FILEBEAT_TCP_PARSE_DOCUMENT_ID_FIELD= FILEBEAT_TCP_PARSE_MAX_DEPTH=1 FILEBEAT_TCP_PARSE_OVERWRITE_KEYS=false FILEBEAT_TCP_PARSE_PROCESS_ARRAY=false FILEBEAT_TCP_PARSE_SOURCE_FIELD=message FILEBEAT_TCP_PARSE_TARGET_FIELD= FILEBEAT_TCP_PARSE_DROP_FIELD= FILEBEAT_TCP_TAG=_malcolm_beats FILEBEAT_SYSLOG_TCP_LISTEN=false FILEBEAT_SYSLOG_UDP_LISTEN=false FILEBEAT_REGISTRY_FILE=/usr/share/filebeat-logs/data/registry/filebeat/log.json FILEBEAT_ZEEK_DIR=/zeek/ FILEBEAT_ZEEK_UPLOAD_SUBDIR=upload PCAP_NODE_NAME=malcolm BUILD_DATE=2026-06-01T14:32:21Z MALCOLM_VERSION=26.06.0 VCS_REVISION=1a9ed2c
镜像标签
x86_64: architecture 2026-04-29T10:54:27Z: build-date ubi9-minimal-container: com.redhat.component https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI: com.redhat.license_terms RHEL-9.8.0-updates-20260428.2: compose-id cpe:/a:redhat:enterprise_linux:9::appstream: cpe Filebeat sends log files to Logstash or directly to Elasticsearch.: description public: distribution-scope 1.42.2: io.buildah.version Filebeat sends log files to Logstash or directly to Elasticsearch.: io.k8s.description Filebeat image: io.k8s.display-name : io.openshift.expose-services minimal rhel9: io.openshift.tags ASL 2.0: license malcolm@inl.gov: maintainer filebeat: name 2026-05-22T20:43:37Z: org.label-schema.build-date ASL 2.0: org.label-schema.license filebeat: org.label-schema.name 1.0: org.label-schema.schema-version https://www.elastic.co/beats/filebeat: org.label-schema.url e98b93df5a916738f04a338ea2ddcf53ebd0bc0b: org.label-schema.vcs-ref github.com/elastic/beats/v7: org.label-schema.vcs-url Elastic: org.label-schema.vendor 9.4.2: org.label-schema.version malcolm@inl.gov: org.opencontainers.image.authors 2026-06-01T14:32:21Z: org.opencontainers.image.created Malcolm container providing Filebeat (the Apache-licensed variant): org.opencontainers.image.description https://github.com/idaholab/Malcolm/blob/main/README.md: org.opencontainers.image.documentation ASL 2.0: org.opencontainers.image.licenses 1a9ed2c: org.opencontainers.image.revision https://github.com/idaholab/Malcolm: org.opencontainers.image.source ghcr.io/idaholab/malcolm/filebeat-oss: org.opencontainers.image.title https://github.com/idaholab/Malcolm: org.opencontainers.image.url Idaho National Laboratory: org.opencontainers.image.vendor 26.06.0: org.opencontainers.image.version 1: release filebeat: summary https://www.elastic.co/beats/filebeat: url fd5dc4e2dadeb67e60b63fecdcc29975854bd48a: vcs-ref git: vcs-type Elastic: vendor 9.4.2: version
镜像安全扫描 查看Trivy扫描报告

系统OS: redhat 9.8 扫描引擎: Trivy 扫描时间: 2026-06-13 17:55

低危漏洞:104 中危漏洞:174 高危漏洞:25 严重漏洞:0

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0  ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0  ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0

Shell快速替换命令

sed -i 's#ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0  ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0  ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0'

镜像构建历史


# 2026-06-01 22:32:48  0.00B 添加元数据标签
LABEL org.opencontainers.image.revision=1a9ed2c
                        
# 2026-06-01 22:32:48  0.00B 添加元数据标签
LABEL org.opencontainers.image.version=26.06.0
                        
# 2026-06-01 22:32:48  0.00B 添加元数据标签
LABEL org.opencontainers.image.created=2026-06-01T14:32:21Z
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 VCS_REVISION
ENV VCS_REVISION=1a9ed2c
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 MALCOLM_VERSION
ENV MALCOLM_VERSION=26.06.0
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 BUILD_DATE
ENV BUILD_DATE=2026-06-01T14:32:21Z
                        
# 2026-06-01 22:32:48  0.00B 定义构建参数
ARG VCS_REVISION=1a9ed2c
                        
# 2026-06-01 22:32:48  0.00B 定义构建参数
ARG MALCOLM_VERSION=26.06.0
                        
# 2026-06-01 22:32:48  0.00B 定义构建参数
ARG BUILD_DATE=2026-06-01T14:32:21Z
                        
# 2026-06-01 22:32:48  0.00B 设置默认要执行的命令
CMD ["/usr/local/bin/supervisord" "-c" "/etc/supervisord.conf" "-u" "root" "-n"]
                        
# 2026-06-01 22:32:48  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/usr/bin/tini" "--" "/usr/local/bin/docker-uid-gid-setup.sh" "/usr/local/bin/service_check_passthrough.sh" "-s" "filebeat"]
                        
# 2026-06-01 22:32:48  0.00B 创建挂载点用于持久化数据或共享数据
VOLUME [/usr/share/filebeat-logs/data /usr/share/filebeat-nginx/data /usr/share/filebeat-syslog-tcp/data /usr/share/filebeat-syslog-udp/data /usr/share/filebeat-tcp/data /usr/share/filebeat-zeek-files-logs/data]
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 PCAP_NODE_NAME
ENV PCAP_NODE_NAME=malcolm
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_ZEEK_UPLOAD_SUBDIR
ENV FILEBEAT_ZEEK_UPLOAD_SUBDIR=upload
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_ZEEK_DIR
ENV FILEBEAT_ZEEK_DIR=/zeek/
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_REGISTRY_FILE
ENV FILEBEAT_REGISTRY_FILE=/usr/share/filebeat-logs/data/registry/filebeat/log.json
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_SYSLOG_UDP_LISTEN
ENV FILEBEAT_SYSLOG_UDP_LISTEN=false
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_SYSLOG_TCP_LISTEN
ENV FILEBEAT_SYSLOG_TCP_LISTEN=false
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_TAG
ENV FILEBEAT_TCP_TAG=_malcolm_beats
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_PARSE_DROP_FIELD
ENV FILEBEAT_TCP_PARSE_DROP_FIELD=
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_PARSE_TARGET_FIELD
ENV FILEBEAT_TCP_PARSE_TARGET_FIELD=
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_PARSE_SOURCE_FIELD
ENV FILEBEAT_TCP_PARSE_SOURCE_FIELD=message
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_PARSE_PROCESS_ARRAY
ENV FILEBEAT_TCP_PARSE_PROCESS_ARRAY=false
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_PARSE_OVERWRITE_KEYS
ENV FILEBEAT_TCP_PARSE_OVERWRITE_KEYS=false
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_PARSE_MAX_DEPTH
ENV FILEBEAT_TCP_PARSE_MAX_DEPTH=1
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_PARSE_DOCUMENT_ID_FIELD
ENV FILEBEAT_TCP_PARSE_DOCUMENT_ID_FIELD=
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_PARSE_ADD_ERROR_KEY
ENV FILEBEAT_TCP_PARSE_ADD_ERROR_KEY=true
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_MAX_MESSAGE_SIZE
ENV FILEBEAT_TCP_MAX_MESSAGE_SIZE=20MB
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_MAX_CONNECTIONS
ENV FILEBEAT_TCP_MAX_CONNECTIONS=32
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_LOG_FORMAT
ENV FILEBEAT_TCP_LOG_FORMAT=raw
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_PORT
ENV FILEBEAT_TCP_PORT=5045
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_TCP_LISTEN
ENV FILEBEAT_TCP_LISTEN=false
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 NGINX_LOG_ACCESS_AND_ERRORS
ENV NGINX_LOG_ACCESS_AND_ERRORS=false
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_ZEEK_FILE_LOGS
ENV FILEBEAT_ZEEK_FILE_LOGS=true
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_MAIN_LOGS
ENV FILEBEAT_MAIN_LOGS=true
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_NGINX_LOG_PATH
ENV FILEBEAT_NGINX_LOG_PATH=/nginx
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_SURICATA_LOG_PATH
ENV FILEBEAT_SURICATA_LOG_PATH=/suricata
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_FILESCAN_LOG_PATH
ENV FILEBEAT_FILESCAN_LOG_PATH=/filescan
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_ZEEK_LOG_LIVE_PATH
ENV FILEBEAT_ZEEK_LOG_LIVE_PATH=/zeek/live
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_ZEEK_LOG_PATH
ENV FILEBEAT_ZEEK_LOG_PATH=/zeek/current
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_CLEAN_REMOVED
ENV FILEBEAT_CLEAN_REMOVED=true
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_CLOSE_EOF
ENV FILEBEAT_CLOSE_EOF=true
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_CLOSE_REMOVED
ENV FILEBEAT_CLOSE_REMOVED=true
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_CLOSE_RENAMED
ENV FILEBEAT_CLOSE_RENAMED=true
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_CLOSE_INACTIVE
ENV FILEBEAT_CLOSE_INACTIVE=120s
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_IGNORE_OLDER
ENV FILEBEAT_IGNORE_OLDER=120m
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_CLEAN_INACTIVE
ENV FILEBEAT_CLEAN_INACTIVE=180m
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_SCAN_FREQUENCY
ENV FILEBEAT_SCAN_FREQUENCY=10s
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_WATCHER_POLLING_ASSUME_CLOSED_SEC
ENV FILEBEAT_WATCHER_POLLING_ASSUME_CLOSED_SEC=10
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 FILEBEAT_WATCHER_POLLING
ENV FILEBEAT_WATCHER_POLLING=false
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 ZIP_CLEANUP_MINUTES
ENV ZIP_CLEANUP_MINUTES=0
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 LOG_CLEANUP_MINUTES
ENV LOG_CLEANUP_MINUTES=0
                        
# 2026-06-01 22:32:48  0.00B 设置环境变量 AUTO_TAG
ENV AUTO_TAG=true
                        
# 2026-06-01 22:32:48  1.69MB 执行命令并创建新的镜像层
RUN |40 DEFAULT_UID=1000 DEFAULT_GID=1000 AUTO_TAG=true FILEBEAT_SCAN_FREQUENCY=10s FILEBEAT_CLEAN_INACTIVE=180m FILEBEAT_IGNORE_OLDER=120m FILEBEAT_CLOSE_INACTIVE=120s FILEBEAT_CLOSE_RENAMED=true FILEBEAT_CLOSE_REMOVED=true FILEBEAT_CLOSE_EOF=true FILEBEAT_CLEAN_REMOVED=true FILEBEAT_ZEEK_LOG_PATH=/zeek/current FILEBEAT_ZEEK_LOG_LIVE_PATH=/zeek/live FILEBEAT_FILESCAN_LOG_PATH=/filescan FILEBEAT_SURICATA_LOG_PATH=/suricata FILEBEAT_NGINX_LOG_PATH=/nginx FILEBEAT_WATCHER_POLLING=false FILEBEAT_WATCHER_POLLING_ASSUME_CLOSED_SEC=10 LOG_CLEANUP_MINUTES=0 ZIP_CLEANUP_MINUTES=0 FILEBEAT_MAIN_LOGS=true FILEBEAT_ZEEK_FILE_LOGS=true NGINX_LOG_ACCESS_AND_ERRORS=false FILEBEAT_TCP_LISTEN=false FILEBEAT_TCP_PORT=5045 FILEBEAT_TCP_LOG_FORMAT=raw FILEBEAT_TCP_MAX_CONNECTIONS=32 FILEBEAT_TCP_MAX_MESSAGE_SIZE=20MB FILEBEAT_TCP_PARSE_ADD_ERROR_KEY=true FILEBEAT_TCP_PARSE_DOCUMENT_ID_FIELD= FILEBEAT_TCP_PARSE_MAX_DEPTH=1 FILEBEAT_TCP_PARSE_OVERWRITE_KEYS=false FILEBEAT_TCP_PARSE_PROCESS_ARRAY=false FILEBEAT_TCP_PARSE_SOURCE_FIELD=message FILEBEAT_TCP_PARSE_TARGET_FIELD= FILEBEAT_TCP_PARSE_DROP_FIELD= FILEBEAT_TCP_TAG=_malcolm_beats FILEBEAT_SYSLOG_TCP_LISTEN=false FILEBEAT_SYSLOG_UDP_LISTEN=false PCAP_NODE_NAME=malcolm /bin/sh -c for INPUT in logs zeek-files-logs nginx tcp syslog-tcp syslog-udp; do       mkdir -p /usr/share/filebeat-$INPUT/data;       chown -R root:${PGROUP} /usr/share/filebeat-$INPUT;       cp -a /usr/share/filebeat/module /usr/share/filebeat-$INPUT/module;       chmod 770 /usr/share/filebeat-$INPUT;       chmod 770 /usr/share/filebeat-$INPUT/data;     done;     chmod 755 /usr/local/bin/*.sh /usr/local/bin/*.py &&     (echo -e "* * * * * /usr/local/bin/filebeat-process-zeek-folder.sh\n* * * * * /usr/local/bin/clean-processed-folder.py" > ${SUPERCRONIC_CRONTAB}) # buildkit
                        
# 2026-06-01 22:32:48  4.69KB 复制文件或目录到容器中
ADD --chmod=644 filebeat/supervisord.conf /etc/supervisord.conf # buildkit
                        
# 2026-06-01 22:32:48  5.12KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/opensearch_status.sh /usr/local/bin/ # buildkit
                        
# 2026-06-01 22:32:48  14.62KB 复制文件或目录到容器中
ADD --chmod=644 shared/bin/watch_common.py /usr/local/bin/ # buildkit
                        
# 2026-06-01 22:32:48  6.67KB 复制文件或目录到容器中
ADD --chmod=644 scripts/malcolm_constants.py /usr/local/bin/ # buildkit
                        
# 2026-06-01 22:32:48  52.21KB 复制文件或目录到容器中
ADD --chmod=644 scripts/malcolm_utils.py /usr/local/bin/ # buildkit
                        
# 2026-06-01 22:32:48  37.75KB 复制文件或目录到容器中
ADD filebeat/scripts /usr/local/bin/ # buildkit
                        
# 2026-06-01 22:32:48  3.62KB 复制文件或目录到容器中
ADD --chmod=644 filebeat/filebeat-zeek-files-logs.yml /usr/share/filebeat-zeek-files-logs/filebeat-zeek-files-logs.yml # buildkit
                        
# 2026-06-01 22:32:48  1.36KB 复制文件或目录到容器中
ADD --chmod=644 filebeat/filebeat-syslog-tcp.yml /usr/share/filebeat-syslog-tcp/filebeat-syslog-tcp.yml # buildkit
                        
# 2026-06-01 22:32:48  1.06KB 复制文件或目录到容器中
ADD --chmod=644 filebeat/filebeat-syslog-udp.yml /usr/share/filebeat-syslog-udp/filebeat-syslog-udp.yml # buildkit
                        
# 2026-06-01 22:32:48  1.95KB 复制文件或目录到容器中
ADD --chmod=644 filebeat/filebeat-tcp.yml /usr/share/filebeat-tcp/filebeat-tcp.yml # buildkit
                        
# 2026-06-01 22:32:48  1.03KB 复制文件或目录到容器中
ADD --chmod=644 filebeat/filebeat-nginx.yml /usr/share/filebeat-nginx/filebeat-nginx.yml # buildkit
                        
# 2026-06-01 22:32:48  8.06KB 复制文件或目录到容器中
ADD --chmod=644 filebeat/filebeat-logs.yml /usr/share/filebeat-logs/filebeat-logs.yml # buildkit
                        
# 2026-06-01 22:32:48  86.00B 复制文件或目录到容器中
ADD --chmod=755 container-health-scripts/filebeat.sh /usr/local/bin/container_health.sh # buildkit
                        
# 2026-06-01 22:32:48  7.14KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/service_check_passthrough.sh /usr/local/bin/ # buildkit
                        
# 2026-06-01 22:32:48  10.93KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/docker-uid-gid-setup.sh /usr/local/bin/ # buildkit
                        
# 2026-06-01 22:32:48  2.46MB 复制新文件或目录到容器中
COPY --chmod=755 /goStatic /usr/bin/goStatic # buildkit
                        
# 2026-06-01 22:32:48  147.23MB 执行命令并创建新的镜像层
RUN |40 DEFAULT_UID=1000 DEFAULT_GID=1000 AUTO_TAG=true FILEBEAT_SCAN_FREQUENCY=10s FILEBEAT_CLEAN_INACTIVE=180m FILEBEAT_IGNORE_OLDER=120m FILEBEAT_CLOSE_INACTIVE=120s FILEBEAT_CLOSE_RENAMED=true FILEBEAT_CLOSE_REMOVED=true FILEBEAT_CLOSE_EOF=true FILEBEAT_CLEAN_REMOVED=true FILEBEAT_ZEEK_LOG_PATH=/zeek/current FILEBEAT_ZEEK_LOG_LIVE_PATH=/zeek/live FILEBEAT_FILESCAN_LOG_PATH=/filescan FILEBEAT_SURICATA_LOG_PATH=/suricata FILEBEAT_NGINX_LOG_PATH=/nginx FILEBEAT_WATCHER_POLLING=false FILEBEAT_WATCHER_POLLING_ASSUME_CLOSED_SEC=10 LOG_CLEANUP_MINUTES=0 ZIP_CLEANUP_MINUTES=0 FILEBEAT_MAIN_LOGS=true FILEBEAT_ZEEK_FILE_LOGS=true NGINX_LOG_ACCESS_AND_ERRORS=false FILEBEAT_TCP_LISTEN=false FILEBEAT_TCP_PORT=5045 FILEBEAT_TCP_LOG_FORMAT=raw FILEBEAT_TCP_MAX_CONNECTIONS=32 FILEBEAT_TCP_MAX_MESSAGE_SIZE=20MB FILEBEAT_TCP_PARSE_ADD_ERROR_KEY=true FILEBEAT_TCP_PARSE_DOCUMENT_ID_FIELD= FILEBEAT_TCP_PARSE_MAX_DEPTH=1 FILEBEAT_TCP_PARSE_OVERWRITE_KEYS=false FILEBEAT_TCP_PARSE_PROCESS_ARRAY=false FILEBEAT_TCP_PARSE_SOURCE_FIELD=message FILEBEAT_TCP_PARSE_TARGET_FIELD= FILEBEAT_TCP_PARSE_DROP_FIELD= FILEBEAT_TCP_TAG=_malcolm_beats FILEBEAT_SYSLOG_TCP_LISTEN=false FILEBEAT_SYSLOG_UDP_LISTEN=false PCAP_NODE_NAME=malcolm /bin/sh -c export EVTXARCH=$(uname -m | sed 's/arm64/aarch64/') &&     export BINARCH=$(uname -m | sed 's/x86_64/amd64/' | sed 's/aarch64/arm64/') &&     microdnf -y install curl-minimal &&         curl -sSL -o /tmp/epel-release.rpm https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm &&         rpm -i /tmp/epel-release.rpm &&     microdnf -y update &&     microdnf -y install         bzip2         ca-certificates         cpio         file         gzip         inotify-tools         libarchive         lzip         jo         jq         openssl         p7zip         psmisc         python3         python3-pip         python3-setuptools         rsync         tar         unrar         unzip         xz &&     curl -sSLf -o /usr/bin/tini "${TINI_URL}-${BINARCH}" &&         chmod +x /usr/bin/tini &&     python3 -m pip install --upgrade pip setuptools wheel &&     python3 -m pip install --no-compile --no-cache-dir -r /usr/local/src/requirements.txt &&     curl -fsSL -o /usr/local/bin/supercronic "${SUPERCRONIC_URL}${BINARCH}" &&       chmod +x /usr/local/bin/supercronic &&     curl -fsSL -o /usr/local/bin/yq "${YQ_URL}${BINARCH}" &&         chmod 755 /usr/local/bin/yq &&     curl -fsSL -o /usr/local/bin/evtx "$(echo "${EVTX_URL}" | sed "s/XXX/${EVTXARCH}/g")" &&         chmod 755 /usr/local/bin/evtx &&     microdnf clean all &&     rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* # buildkit
                        
# 2026-06-01 22:32:32  109.00B 复制文件或目录到容器中
ADD --chmod=644 filebeat/requirements.txt /usr/local/src/ # buildkit
                        
# 2026-06-01 22:32:32  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 EVTX_URL
ENV EVTX_URL=https://github.com/omerbenamram/evtx/releases/download/v0.11.2/evtx_dump-v0.11.2-XXX-unknown-linux-gnu
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 EVTX_VERSION
ENV EVTX_VERSION=0.11.2
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 YQ_URL
ENV YQ_URL=https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 YQ_VERSION
ENV YQ_VERSION=4.53.2
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 TINI_URL
ENV TINI_URL=https://github.com/krallin/tini/releases/download/v0.19.0/tini
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 TINI_VERSION
ENV TINI_VERSION=v0.19.0
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 SUPERCRONIC_CRONTAB
ENV SUPERCRONIC_CRONTAB=/etc/crontab
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 SUPERCRONIC_URL
ENV SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux-
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 SUPERCRONIC_VERSION
ENV SUPERCRONIC_VERSION=0.2.46
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG PCAP_NODE_NAME=malcolm
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_SYSLOG_UDP_LISTEN=false
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_SYSLOG_TCP_LISTEN=false
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_TAG=_malcolm_beats
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_PARSE_DROP_FIELD=
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_PARSE_TARGET_FIELD=
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_PARSE_SOURCE_FIELD=message
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_PARSE_PROCESS_ARRAY=false
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_PARSE_OVERWRITE_KEYS=false
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_PARSE_MAX_DEPTH=1
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_PARSE_DOCUMENT_ID_FIELD=
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_PARSE_ADD_ERROR_KEY=true
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_MAX_MESSAGE_SIZE=20MB
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_MAX_CONNECTIONS=32
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_LOG_FORMAT=raw
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_PORT=5045
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_TCP_LISTEN=false
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG NGINX_LOG_ACCESS_AND_ERRORS=false
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_ZEEK_FILE_LOGS=true
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_MAIN_LOGS=true
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG ZIP_CLEANUP_MINUTES=0
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG LOG_CLEANUP_MINUTES=0
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_WATCHER_POLLING_ASSUME_CLOSED_SEC=10
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_WATCHER_POLLING=false
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_NGINX_LOG_PATH=/nginx
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_SURICATA_LOG_PATH=/suricata
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_FILESCAN_LOG_PATH=/filescan
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_ZEEK_LOG_LIVE_PATH=/zeek/live
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_ZEEK_LOG_PATH=/zeek/current
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_CLEAN_REMOVED=true
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_CLOSE_EOF=true
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_CLOSE_REMOVED=true
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_CLOSE_RENAMED=true
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_CLOSE_INACTIVE=120s
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_IGNORE_OLDER=120m
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_CLEAN_INACTIVE=180m
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG FILEBEAT_SCAN_FREQUENCY=10s
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG AUTO_TAG=true
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 PIP_ROOT_USER_ACTION
ENV PIP_ROOT_USER_ACTION=ignore
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 PYTHONUNBUFFERED
ENV PYTHONUNBUFFERED=1
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 PYTHONDONTWRITEBYTECODE
ENV PYTHONDONTWRITEBYTECODE=1
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 TERM
ENV TERM=xterm
                        
# 2026-06-01 22:32:32  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 PUSER_PRIV_DROP
ENV PUSER_PRIV_DROP=false
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 PUSER_CHOWN
ENV PUSER_CHOWN=/usr/share/filebeat-logs/data;/usr/share/filebeat-nginx/data;/usr/share/filebeat-syslog-tcp/data;/usr/share/filebeat-syslog-udp/data;/usr/share/filebeat-tcp/data;/usr/share/filebeat-zeek-files-logs/data
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 PGROUP
ENV PGROUP=filebeat
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 PUSER
ENV PUSER=filebeat
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 DEFAULT_GID
ENV DEFAULT_GID=1000
                        
# 2026-06-01 22:32:32  0.00B 设置环境变量 DEFAULT_UID
ENV DEFAULT_UID=1000
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG DEFAULT_GID=1000
                        
# 2026-06-01 22:32:32  0.00B 定义构建参数
ARG DEFAULT_UID=1000
                        
# 2026-06-01 22:32:32  0.00B 添加元数据标签
LABEL org.opencontainers.image.description=Malcolm container providing Filebeat (the Apache-licensed variant)
                        
# 2026-06-01 22:32:32  0.00B 添加元数据标签
LABEL org.opencontainers.image.title=ghcr.io/idaholab/malcolm/filebeat-oss
                        
# 2026-06-01 22:32:32  0.00B 添加元数据标签
LABEL org.opencontainers.image.vendor=Idaho National Laboratory
                        
# 2026-06-01 22:32:32  0.00B 添加元数据标签
LABEL org.opencontainers.image.source=https://github.com/idaholab/Malcolm
                        
# 2026-06-01 22:32:32  0.00B 添加元数据标签
LABEL org.opencontainers.image.documentation=https://github.com/idaholab/Malcolm/blob/main/README.md
                        
# 2026-06-01 22:32:32  0.00B 添加元数据标签
LABEL org.opencontainers.image.url=https://github.com/idaholab/Malcolm
                        
# 2026-06-01 22:32:32  0.00B 添加元数据标签
LABEL org.opencontainers.image.authors=malcolm@inl.gov
                        
# 2026-06-01 22:32:32  0.00B 添加元数据标签
LABEL maintainer=malcolm@inl.gov
                        
# 2026-05-23 04:48:08  0.00B 设置默认要执行的命令
CMD ["--environment" "container"]
                        
# 2026-05-23 04:48:08  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/usr/bin/tini" "--" "/usr/local/bin/docker-entrypoint"]
                        
# 2026-05-23 04:48:08  0.00B 设置工作目录为/usr/share/filebeat
WORKDIR /usr/share/filebeat
                        
# 2026-05-23 04:48:08  0.00B 设置环境变量 LIBBEAT_MONITORING_CGROUPS_HIERARCHY_OVERRIDE
ENV LIBBEAT_MONITORING_CGROUPS_HIERARCHY_OVERRIDE=/
                        
# 2026-05-23 04:48:08  0.00B 指定运行容器时使用的用户
USER 1000
                        
# 2026-05-23 04:48:08  57.38MB 执行命令并创建新的镜像层
RUN /bin/sh -c for iter in {1..10}; do             microdnf -y update &&             microdnf -y install systemd &&             microdnf clean all &&             exit_code=0 && break || exit_code=$? && echo "microdnf error: retry $iter in 10s" && sleep 10;         done;         (exit $exit_code) # buildkit
                        
# 2026-05-23 04:48:02  2.88KB 执行命令并创建新的镜像层
RUN /bin/sh -c useradd -M --uid 1000 --gid 1000 --groups 0 --home /usr/share/filebeat filebeat # buildkit
                        
# 2026-05-23 04:48:02  954.00B 执行命令并创建新的镜像层
RUN /bin/sh -c groupadd --gid 1000 filebeat # buildkit
                        
# 2026-05-23 04:48:01  4.94MB 复制新文件或目录到容器中
COPY /usr/share/filebeat/NOTICE.txt /licenses # buildkit
                        
# 2026-05-23 04:48:01  11.36KB 复制新文件或目录到容器中
COPY /usr/share/filebeat/LICENSE.txt /licenses # buildkit
                        
# 2026-05-23 04:48:01  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c mkdir /licenses # buildkit
                        
# 2026-05-23 04:48:00  151.48MB 复制新文件或目录到容器中
COPY /usr/share/filebeat /usr/share/filebeat # buildkit
                        
# 2026-05-23 04:47:55  716.00B 执行命令并创建新的镜像层
RUN /bin/sh -c chmod 755 /usr/local/bin/docker-entrypoint # buildkit
                        
# 2026-05-23 04:47:54  716.00B 复制新文件或目录到容器中
COPY docker-entrypoint /usr/local/bin/docker-entrypoint # buildkit
                        
# 2026-05-23 04:47:54  24.06KB 执行命令并创建新的镜像层
RUN /bin/sh -c set -e ;   TINI_BIN="";   TINI_SHA256="";   TINI_VERSION="v0.19.0";   echo "The arch value is $(arch)";   case "$(arch)" in     x86_64)         TINI_BIN="tini-amd64";         TINI_SHA256="93dcc18adc78c65a028a84799ecf8ad40c936fdfc5f2a57b1acda5a8117fa82c";         ;;     aarch64)         TINI_BIN="tini-arm64";         TINI_SHA256="07952557df20bfd2a95f9bef198b445e006171969499a1d361bd9e6f8e5e0e81";         ;;     *)         echo >&2 ; echo >&2 "Unsupported architecture \$(arch)" ; echo >&2 ; exit 1 ;         ;;   esac ;   curl --retry 8 -S -L -O "https://github.com/krallin/tini/releases/download/${TINI_VERSION}/${TINI_BIN}" ;   echo "${TINI_SHA256} ${TINI_BIN}" | sha256sum -c - ;   mv "${TINI_BIN}" /usr/bin/tini ;   chmod +x /usr/bin/tini # buildkit
                        
# 2026-05-23 04:47:54  0.00B 设置环境变量 GODEBUG
ENV GODEBUG=madvdontneed=1
                        
# 2026-05-23 04:47:54  0.00B 设置环境变量 PATH
ENV PATH=/usr/share/filebeat:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-05-23 04:47:54  0.00B 设置环境变量 ELASTIC_CONTAINER
ENV ELASTIC_CONTAINER=true
                        
# 2026-05-23 04:47:54  0.00B 添加元数据标签
LABEL org.label-schema.build-date=2026-05-22T20:43:37Z org.label-schema.schema-version=1.0 org.label-schema.vendor=Elastic org.label-schema.license=ASL 2.0 org.label-schema.name=filebeat org.label-schema.version=9.4.2 org.label-schema.url=https://www.elastic.co/beats/filebeat org.label-schema.vcs-url=github.com/elastic/beats/v7 org.label-schema.vcs-ref=e98b93df5a916738f04a338ea2ddcf53ebd0bc0b io.k8s.description=Filebeat sends log files to Logstash or directly to Elasticsearch. io.k8s.display-name=Filebeat image org.opencontainers.image.created=2026-05-22T20:43:37Z org.opencontainers.image.licenses=ASL 2.0 org.opencontainers.image.title=Filebeat org.opencontainers.image.vendor=Elastic org.opencontainers.image.authors=infra@elastic.co maintainer=infra@elastic.co name=filebeat vendor=Elastic version=9.4.2 release=1 url=https://www.elastic.co/beats/filebeat summary=filebeat license=ASL 2.0 description=Filebeat sends log files to Logstash or directly to Elasticsearch.
                        
# 2026-04-29 18:54:41  106.97MB 
/bin/sh -c #(nop) LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="fd5dc4e2dadeb67e60b63fecdcc29975854bd48a" "org.opencontainers.image.revision"="fd5dc4e2dadeb67e60b63fecdcc29975854bd48a" "build-date"="2026-04-29T10:54:27Z" "org.opencontainers.image.created"="2026-04-29T10:54:27Z" "release"="1777460003"org.opencontainers.image.revision=fd5dc4e2dadeb67e60b63fecdcc29975854bd48a,org.opencontainers.image.created=2026-04-29T10:54:27Z
                        
# 2026-04-29 18:54:41  0.00B 
/bin/sh -c #(nop) COPY file:7175e3c5e492b9f0b19ddd8d73dff39fa8f31f4fa5e8bf8c49e54a553df78410 in /root/buildinfo/labels.json      
                        
# 2026-04-29 18:54:41  0.00B 
/bin/sh -c #(nop) COPY file:7175e3c5e492b9f0b19ddd8d73dff39fa8f31f4fa5e8bf8c49e54a553df78410 in /usr/share/buildinfo/labels.json      
                        
# 2026-04-29 18:54:41  0.00B 
/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /root/buildinfo/content_manifests/content-sets.json      
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /usr/share/buildinfo/content-sets.json      
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) CMD ["/bin/bash"]
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.      
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) COPY dir:0955c56efa0494e3d45fc43267610bb5c193ef814f80ef9bf73eb73824846da7 in /      
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) ENV container oci
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL compose-id="RHEL-9.8.0-updates-20260428.2"
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL io.openshift.expose-services=""
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container"       name="ubi9/ubi-minimal"       version="9.8"       cpe="cpe:/a:redhat:enterprise_linux:9::appstream"       distribution-scope="public"
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."
                        
# 2026-04-29 18:54:40  0.00B 
/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."
                        
                    

镜像信息

{
    "Id": "sha256:1c253697799fbe59b6d14c326564639029380f287ee311a06a1cf12b56369b01",
    "RepoTags": [
        "ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0"
    ],
    "RepoDigests": [
        "ghcr.io/idaholab/malcolm/filebeat-oss@sha256:4042f297a7d69b33443ec40dec748338a4774d964b286bfbd9d93ff995759b1a",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/filebeat-oss@sha256:280119f83fc34aa861355b4017a4ce0a08c49f82e57390c70c5751721c4416f8"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-06-01T14:32:48.593664139Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "root",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/share/filebeat:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "container=oci",
            "ELASTIC_CONTAINER=true",
            "GODEBUG=madvdontneed=1",
            "LIBBEAT_MONITORING_CGROUPS_HIERARCHY_OVERRIDE=/",
            "DEFAULT_UID=1000",
            "DEFAULT_GID=1000",
            "PUSER=filebeat",
            "PGROUP=filebeat",
            "PUSER_CHOWN=/usr/share/filebeat-logs/data;/usr/share/filebeat-nginx/data;/usr/share/filebeat-syslog-tcp/data;/usr/share/filebeat-syslog-udp/data;/usr/share/filebeat-tcp/data;/usr/share/filebeat-zeek-files-logs/data",
            "PUSER_PRIV_DROP=false",
            "TERM=xterm",
            "PYTHONDONTWRITEBYTECODE=1",
            "PYTHONUNBUFFERED=1",
            "PIP_ROOT_USER_ACTION=ignore",
            "SUPERCRONIC_VERSION=0.2.46",
            "SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux-",
            "SUPERCRONIC_CRONTAB=/etc/crontab",
            "TINI_VERSION=v0.19.0",
            "TINI_URL=https://github.com/krallin/tini/releases/download/v0.19.0/tini",
            "YQ_VERSION=4.53.2",
            "YQ_URL=https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_",
            "EVTX_VERSION=0.11.2",
            "EVTX_URL=https://github.com/omerbenamram/evtx/releases/download/v0.11.2/evtx_dump-v0.11.2-XXX-unknown-linux-gnu",
            "AUTO_TAG=true",
            "LOG_CLEANUP_MINUTES=0",
            "ZIP_CLEANUP_MINUTES=0",
            "FILEBEAT_WATCHER_POLLING=false",
            "FILEBEAT_WATCHER_POLLING_ASSUME_CLOSED_SEC=10",
            "FILEBEAT_SCAN_FREQUENCY=10s",
            "FILEBEAT_CLEAN_INACTIVE=180m",
            "FILEBEAT_IGNORE_OLDER=120m",
            "FILEBEAT_CLOSE_INACTIVE=120s",
            "FILEBEAT_CLOSE_RENAMED=true",
            "FILEBEAT_CLOSE_REMOVED=true",
            "FILEBEAT_CLOSE_EOF=true",
            "FILEBEAT_CLEAN_REMOVED=true",
            "FILEBEAT_ZEEK_LOG_PATH=/zeek/current",
            "FILEBEAT_ZEEK_LOG_LIVE_PATH=/zeek/live",
            "FILEBEAT_FILESCAN_LOG_PATH=/filescan",
            "FILEBEAT_SURICATA_LOG_PATH=/suricata",
            "FILEBEAT_NGINX_LOG_PATH=/nginx",
            "FILEBEAT_MAIN_LOGS=true",
            "FILEBEAT_ZEEK_FILE_LOGS=true",
            "NGINX_LOG_ACCESS_AND_ERRORS=false",
            "FILEBEAT_TCP_LISTEN=false",
            "FILEBEAT_TCP_PORT=5045",
            "FILEBEAT_TCP_LOG_FORMAT=raw",
            "FILEBEAT_TCP_MAX_CONNECTIONS=32",
            "FILEBEAT_TCP_MAX_MESSAGE_SIZE=20MB",
            "FILEBEAT_TCP_PARSE_ADD_ERROR_KEY=true",
            "FILEBEAT_TCP_PARSE_DOCUMENT_ID_FIELD=",
            "FILEBEAT_TCP_PARSE_MAX_DEPTH=1",
            "FILEBEAT_TCP_PARSE_OVERWRITE_KEYS=false",
            "FILEBEAT_TCP_PARSE_PROCESS_ARRAY=false",
            "FILEBEAT_TCP_PARSE_SOURCE_FIELD=message",
            "FILEBEAT_TCP_PARSE_TARGET_FIELD=",
            "FILEBEAT_TCP_PARSE_DROP_FIELD=",
            "FILEBEAT_TCP_TAG=_malcolm_beats",
            "FILEBEAT_SYSLOG_TCP_LISTEN=false",
            "FILEBEAT_SYSLOG_UDP_LISTEN=false",
            "FILEBEAT_REGISTRY_FILE=/usr/share/filebeat-logs/data/registry/filebeat/log.json",
            "FILEBEAT_ZEEK_DIR=/zeek/",
            "FILEBEAT_ZEEK_UPLOAD_SUBDIR=upload",
            "PCAP_NODE_NAME=malcolm",
            "BUILD_DATE=2026-06-01T14:32:21Z",
            "MALCOLM_VERSION=26.06.0",
            "VCS_REVISION=1a9ed2c"
        ],
        "Cmd": [
            "/usr/local/bin/supervisord",
            "-c",
            "/etc/supervisord.conf",
            "-u",
            "root",
            "-n"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": {
            "/usr/share/filebeat-logs/data": {},
            "/usr/share/filebeat-nginx/data": {},
            "/usr/share/filebeat-syslog-tcp/data": {},
            "/usr/share/filebeat-syslog-udp/data": {},
            "/usr/share/filebeat-tcp/data": {},
            "/usr/share/filebeat-zeek-files-logs/data": {}
        },
        "WorkingDir": "/usr/share/filebeat",
        "Entrypoint": [
            "/usr/bin/tini",
            "--",
            "/usr/local/bin/docker-uid-gid-setup.sh",
            "/usr/local/bin/service_check_passthrough.sh",
            "-s",
            "filebeat"
        ],
        "OnBuild": null,
        "Labels": {
            "architecture": "x86_64",
            "build-date": "2026-04-29T10:54:27Z",
            "com.redhat.component": "ubi9-minimal-container",
            "com.redhat.license_terms": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI",
            "compose-id": "RHEL-9.8.0-updates-20260428.2",
            "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream",
            "description": "Filebeat sends log files to Logstash or directly to Elasticsearch.",
            "distribution-scope": "public",
            "io.buildah.version": "1.42.2",
            "io.k8s.description": "Filebeat sends log files to Logstash or directly to Elasticsearch.",
            "io.k8s.display-name": "Filebeat image",
            "io.openshift.expose-services": "",
            "io.openshift.tags": "minimal rhel9",
            "license": "ASL 2.0",
            "maintainer": "malcolm@inl.gov",
            "name": "filebeat",
            "org.label-schema.build-date": "2026-05-22T20:43:37Z",
            "org.label-schema.license": "ASL 2.0",
            "org.label-schema.name": "filebeat",
            "org.label-schema.schema-version": "1.0",
            "org.label-schema.url": "https://www.elastic.co/beats/filebeat",
            "org.label-schema.vcs-ref": "e98b93df5a916738f04a338ea2ddcf53ebd0bc0b",
            "org.label-schema.vcs-url": "github.com/elastic/beats/v7",
            "org.label-schema.vendor": "Elastic",
            "org.label-schema.version": "9.4.2",
            "org.opencontainers.image.authors": "malcolm@inl.gov",
            "org.opencontainers.image.created": "2026-06-01T14:32:21Z",
            "org.opencontainers.image.description": "Malcolm container providing Filebeat (the Apache-licensed variant)",
            "org.opencontainers.image.documentation": "https://github.com/idaholab/Malcolm/blob/main/README.md",
            "org.opencontainers.image.licenses": "ASL 2.0",
            "org.opencontainers.image.revision": "1a9ed2c",
            "org.opencontainers.image.source": "https://github.com/idaholab/Malcolm",
            "org.opencontainers.image.title": "ghcr.io/idaholab/malcolm/filebeat-oss",
            "org.opencontainers.image.url": "https://github.com/idaholab/Malcolm",
            "org.opencontainers.image.vendor": "Idaho National Laboratory",
            "org.opencontainers.image.version": "26.06.0",
            "release": "1",
            "summary": "filebeat",
            "url": "https://www.elastic.co/beats/filebeat",
            "vcs-ref": "fd5dc4e2dadeb67e60b63fecdcc29975854bd48a",
            "vcs-type": "git",
            "vendor": "Elastic",
            "version": "9.4.2"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 472348430,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/b0b7d00a28e95289409883c758a4e11717cf4842104eb8791988b0526c408986/diff:/var/lib/docker/overlay2/ac19530d4a0a54164e9e871fd1e3e2a3d4ae1cc9c2e49173cbf6bfc4f0635737/diff:/var/lib/docker/overlay2/e7b6a0557086884ee10baeb8eb6da4ca4e993aa5c5eeedb4683a05e083b6e995/diff:/var/lib/docker/overlay2/426d94fb1afeb566960c2df0c815591a1e17c6e143d963c174b6d0627c6f7a1f/diff:/var/lib/docker/overlay2/a397696224fba403444e9ff8517efba2fb8e2f05166f92d81566c04f0353bece/diff:/var/lib/docker/overlay2/c71554c3480b4f9294a2399b7fdb2dfd343e2b2f925f9facd0134487484c754f/diff:/var/lib/docker/overlay2/ea956a38da4ad930d88e004ec257a56232121c919e88ded2f1c98065236ed023/diff:/var/lib/docker/overlay2/06a702eeb36e75e89f4c6236e21346227fcb250e2863786c5545e87055b52cc5/diff:/var/lib/docker/overlay2/47255fe6566ee0477b5abe9230a5fcad02040de904e123b532516841331712c2/diff:/var/lib/docker/overlay2/b545466bd1a41b3f870d88147b70e6533f2079776ffebaa3cd4573bd9aeaa249/diff:/var/lib/docker/overlay2/2dee35657bf0c21d8e951b6c3b76addf6f125b2cc33d2cafdd0552d5d51926e9/diff:/var/lib/docker/overlay2/2985c310aa082e850909a3c59466dd95a5e840adfb4d4a91de72c658ee4667c7/diff:/var/lib/docker/overlay2/4971e55dd8039ba60b1f72c5175926e05b8667bf422b9e74a2fe5bd1366b80bf/diff:/var/lib/docker/overlay2/013aa575cca78276c92fd5e8dda37f220604727e0f90d4bc5f167d3da3062bdf/diff:/var/lib/docker/overlay2/0ffbd1d495683b8dc41710959f9671bb0fb81c6c9de7c9c2434c056a1d919ac4/diff:/var/lib/docker/overlay2/8aa4005f5a71cf08b9fcb77472dc1ac9a2b073b0fcafaa04a4b71fab33107e0f/diff:/var/lib/docker/overlay2/353b9ec855e5684776e55993f1a18eaafe2c04323bef31a996426bbc305f435a/diff:/var/lib/docker/overlay2/810b14f19fdd1072b13c499536c21485f723c490c91eeb1aa80e0617547c9d4c/diff:/var/lib/docker/overlay2/fafefec46973e88eb54f8bf4a415699a551989a508fb2b0782e2ffd2c6ba7239/diff:/var/lib/docker/overlay2/7fa113b1953ea6bcee91ea3eea9cf8ca28462dee4d640d7f3c7dbb02c4e924dc/diff:/var/lib/docker/overlay2/9c8c00fbacf563451f47d601f4b9375ee6402c0695baeafb635755d5d876dc7a/diff:/var/lib/docker/overlay2/894619c01002aba188a95297cf4efe10d0b99a534a8f6435fdd7055ffa0123c3/diff:/var/lib/docker/overlay2/ccc74b582a3593d5af4dcfeb28300c4070d41c8cec50ef2545b66251cfa32d4d/diff:/var/lib/docker/overlay2/7eeacfef915832a5ddffe7bfdde6368e88f029f304463376b41add15b38d8381/diff:/var/lib/docker/overlay2/c78120b5b40982c02dc700cc83e340d1ae789be0ce1b41b29cb237b88f73a77c/diff:/var/lib/docker/overlay2/76f4e410a5dfa09f857abbc6b3274ed669acd12b5d874699ca3c930e53bac547/diff:/var/lib/docker/overlay2/7f5eee03e1a501dde2b5bf2019e5fbb0773f35238fd26d55c571c86f528f02b7/diff:/var/lib/docker/overlay2/2579da2af23ea0e17cd8926311e3cb47b9b8bfc685f030b85099a80ea1662f35/diff:/var/lib/docker/overlay2/9cdfdede3a0249da043f1a612962a53bb8909aa37ce78b846e6cc4c8e850b351/diff:/var/lib/docker/overlay2/0478b1239a09983f4cfd98388a29c9c3df1edf0fbc21fec836239515b0084d06/diff",
            "MergedDir": "/var/lib/docker/overlay2/e1d1435c8bdc138695e049d34ce2cc00d3fee27f8e59be4a681beb320424f8b9/merged",
            "UpperDir": "/var/lib/docker/overlay2/e1d1435c8bdc138695e049d34ce2cc00d3fee27f8e59be4a681beb320424f8b9/diff",
            "WorkDir": "/var/lib/docker/overlay2/e1d1435c8bdc138695e049d34ce2cc00d3fee27f8e59be4a681beb320424f8b9/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:1b892ddc7d85996653e2ee6bcf7920f8f7799a4493c5415294bdd35df542a234",
            "sha256:9b1cd6777c52c8f34fc4ffd85c0a62bcd2d8afd1abde05438521c88b740ea7ea",
            "sha256:c6788ce3026f7bed0acc720d5e05bc5f766ead0174b19b76ac24de63a0abc8d4",
            "sha256:12a48a4b0a74d13f09ed594dd35555c16200b17cddce7b546dab6943e13a50c6",
            "sha256:8dd3eb42a19c13cf9992188dbe002e4556515bcdf430c5e79faa59a677e3cc40",
            "sha256:2a826303578015fc686605d44b0f318606cbc0b1b72e9505cf6cde057f0618af",
            "sha256:9ea89ff31b6477c9291842f352259467f91fb5e8543cf92ad5657c496e40c165",
            "sha256:fa547356a7d1afb32c4bfd146a13289643a827a75ce2a3aaaccd70058e697a45",
            "sha256:f15d034c6f054c8b9cb531af870822c745e9f055df82fd25eb80668bec907f4d",
            "sha256:54f850d9c6302c92ede4dd59d3826f54c5cecbb999e90a3c67f827e828ce45a3",
            "sha256:58822ef2ae3ea84a5e9f154ba2ca7816b0f3e9e745fbe25a28348d3812bc7c40",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:53732ce87886d5ae91440f6001a941addf65d1bef56ba5e1ecdeea961635ae64",
            "sha256:e255c2a8ca83cc3e7374d62f692229be929ee7b2457b1de12a6082b3f9482b8b",
            "sha256:8fb214b41fa2462e154c37346bf385928b7d74c6180a081764ee5fdaba730afe",
            "sha256:dff67b677c403295bf272a2a5b94618db0e9a12fc4366f74476c972186dfebf1",
            "sha256:5b421181b8a2696a29cc23a2baf6900088c3d776646da4043f54daee8bdebe4e",
            "sha256:6298f10bc5a3c259b2bb92ecec37ef032a283ab88e090175dc65a4a11891feeb",
            "sha256:f5348d83a1eff43661aca4a7ec8d1dfc0fdf2ddb4be9c555c69c9e3a56169184",
            "sha256:a69bd3132828a81528b449bac0c35575c80c9e34280557727444f93526348e34",
            "sha256:33e5f38cf1bd8612a33c0b31ccb66a903194ec87c1249f920bebe529e433173b",
            "sha256:f8d0325b7329fdc689c6fc8d728fa93ff58f870d2ffe2f73f6f28c35766fbe80",
            "sha256:467455afa0deb31adb6b4828dc6d79cbd592cb45ec3c62bdfc7cc5bcfee020de",
            "sha256:af11dabe93ae8b7ab1aebd124fe744bc8fc8a2107545ae9603ec3d44fd325ee5",
            "sha256:f7bb12daad9755c9638cb719eb76442939ca66c477cc1c1cdef8980632b62a9e",
            "sha256:3a8dc7b1f7d44e70dd12c90dd5e392fe2336b17504a9a3a605f2fcfda4bab38d",
            "sha256:de8b7ad28582269b1b08e28ee4d414a2a07ed504770dd681d78213f374f4484a",
            "sha256:ed51953013f4ed1113b930e465f467c7bdbde5d14a491b7cf50b1fe0713f3a33",
            "sha256:8f9c14949fdb8a10e5f74d288dcb2070d67b43bb8ccfee5f6e89da4d3eec76a8",
            "sha256:d074f357d04958d4eb6b4350d072be63b9eb0a27ae27274b256b0bf47bb12e5a",
            "sha256:9daffb3d71ec8687dfd18e6e805c226a53cfac25bfb8fc2ab164aca12dd82fca"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-06-13T17:55:11.60033031+08:00"
    }
}

更多版本

ghcr.io/idaholab/malcolm/filebeat-oss:26.06.0

linux/amd64 ghcr.io472.35MB2026-06-13 17:55
8