Run Velocidex Velociraptor server in Kubernetes
https://github.com/Velocidex/velociraptor
|
Some checks failed
Validate and Release Chart / Lint (push) Successful in 4s
Validate and Release Chart / Audit (push) Successful in 4s
Validate and Release Chart / Outdated APIs (push) Successful in 3s
Validate and Release Chart / Publish Helm Chart (push) Failing after 4s
Release / build-image (push) Successful in 9m58s
- Change ENTRYPOINT to use /velociraptor and set CMD for frontend execution - Refactor entrypoint script to utilize actual paths for client binaries - Introduce a new ConfigMap for initialization script to set up server and client configurations - Add initContainer in deployment to run the initialization script before the main container starts |
||
|---|---|---|
| .forgejo | ||
| chart | ||
| ci | ||
| .dockerignore | ||
| .gitignore | ||
| Dockerfile | ||
| entrypoint | ||
| README.md | ||
| renovate.json5 | ||
velociraptor-docker
Run Velocidex Velociraptor server with Docker
This image includes cross-compiled clients for multiple platforms (Windows, macOS, Linux).
Features
- Multi-arch support with cross-compilation
- Minimal scratch-based runtime image
- Volume mounts for configuration, logs and artifacts
- Pre-built clients for Windows, macOS and Linux
Build
To build the Docker image:
docker buildx build --platform linux/amd64 . -t velociraptor:latest
Run with Docker Compose
- Ensure docker-compose is installed
- Adjust credential values in
.envif needed - Start the service:
docker-compose up -d - Access the Velociraptor GUI via https://localhost:8889
- Default login:
admin/admin - Change password with:
docker exec -it velociraptor ./velociraptor --config /config/server.config.yaml user add <username> <password> --role administrator
- Default login:
Client Binaries
Pre-built client binaries for Windows, macOS, and Linux are available in the container at /clients/:
- Linux server:
/velociraptor - Windows client:
/clients/velociraptor-windows.exe - macOS client:
/clients/velociraptor-darwin
Notes
To use a specific version:
docker pull ghcr.io/username/velociraptor:tag
Based on Velocidex Velociraptor: https://github.com/Velocidex/velociraptor