Run Velocidex Velociraptor server in Kubernetes https://github.com/Velocidex/velociraptor
Find a file
Tommy Skaug 18d83e4cd4
Some checks failed
Validate and Release Chart / Lint (push) Successful in 4s
Validate and Release Chart / Audit (push) Successful in 4s
Validate and Release Chart / Outdated APIs (push) Successful in 3s
Validate and Release Chart / Publish Helm Chart (push) Failing after 4s
Release / build-image (push) Successful in 9m58s
feat: update Dockerfile and entrypoint for improved client handling and initialization
- Change ENTRYPOINT to use /velociraptor and set CMD for frontend execution
- Refactor entrypoint script to utilize actual paths for client binaries
- Introduce a new ConfigMap for initialization script to set up server and client configurations
- Add initContainer in deployment to run the initialization script before the main container starts
2025-05-05 23:21:22 +02:00
.forgejo refactor: migrate to Velocidex Velociraptor; update Dockerfile for multi-platform builds and cross-compilation; introduce entrypoint script for server configuration; remove legacy forgejo-pages code and dependencies; enhance README with new features and client binaries 2025-05-05 22:44:04 +02:00
chart feat: update Dockerfile and entrypoint for improved client handling and initialization 2025-05-05 23:21:22 +02:00
ci refactor: migrate to Velocidex Velociraptor; update Dockerfile for multi-platform builds and cross-compilation; introduce entrypoint script for server configuration; remove legacy forgejo-pages code and dependencies; enhance README with new features and client binaries 2025-05-05 22:44:04 +02:00
.dockerignore refactor: only support webhook mode and add instructions for serving the static content with nginx via app-template 2025-04-18 19:41:12 +02:00
.gitignore chore: add .gitignore and update Dockerfile for improved build process; enhance README with repository URL handling and authentication instructions 2025-04-20 16:13:13 +02:00
Dockerfile feat: update Dockerfile and entrypoint for improved client handling and initialization 2025-05-05 23:21:22 +02:00
entrypoint feat: update Dockerfile and entrypoint for improved client handling and initialization 2025-05-05 23:21:22 +02:00
README.md refactor: migrate to Velocidex Velociraptor; update Dockerfile for multi-platform builds and cross-compilation; introduce entrypoint script for server configuration; remove legacy forgejo-pages code and dependencies; enhance README with new features and client binaries 2025-05-05 22:44:04 +02:00
renovate.json5 refactor: only support webhook mode and add instructions for serving the static content with nginx via app-template 2025-04-18 19:41:12 +02:00

velociraptor-docker

Run Velocidex Velociraptor server with Docker

This image includes cross-compiled clients for multiple platforms (Windows, macOS, Linux).

Features

  • Multi-arch support with cross-compilation
  • Minimal scratch-based runtime image
  • Volume mounts for configuration, logs and artifacts
  • Pre-built clients for Windows, macOS and Linux

Build

To build the Docker image:

docker buildx build --platform linux/amd64 . -t velociraptor:latest

Run with Docker Compose

  • Ensure docker-compose is installed
  • Adjust credential values in .env if needed
  • Start the service:
    docker-compose up -d
    
  • Access the Velociraptor GUI via https://localhost:8889
    • Default login: admin/admin
    • Change password with:
      docker exec -it velociraptor ./velociraptor --config /config/server.config.yaml user add <username> <password> --role administrator
      

Client Binaries

Pre-built client binaries for Windows, macOS, and Linux are available in the container at /clients/:

  • Linux server: /velociraptor
  • Windows client: /clients/velociraptor-windows.exe
  • macOS client: /clients/velociraptor-darwin

Notes

To use a specific version:

docker pull ghcr.io/username/velociraptor:tag

Based on Velocidex Velociraptor: https://github.com/Velocidex/velociraptor