2026-07-03 10:05:07 UTC
824 MB
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
[#000] sha256:43a4ccfcda545d0357b8595db01c68db022db4283c68d08e06427e6c91ac7063 - 6.31% (52 MB)
[#001] sha256:1be00f25e18e996ab2f6fe79065b7a09ece150c84de1da4fe7aedf955c04c22f - 0.0% (148 Bytes)
[#002] sha256:027060c46934e10ce3ba18d00ca5b63bd25b82f0138e916bff2e3b3480ae28fb - 0.74% (6.09 MB)
[#003] sha256:d06a386ad16736258a20a7a30696cf922432a55c2146a4dc1646edfee06bcfe8 - 0.0% (532 Bytes)
[#004] sha256:013aa67b191760fc9678939a7e8663104342211bc81ce3e8ce09cd1fdde77d51 - 0.0% (517 Bytes)
[#005] sha256:3c014a3749e8cdcd6648e70e5747e8aa83b13669fe8cef939f1ee42403df3e9d - 0.0% (1.41 KB)
[#006] sha256:be9e16b55c804adb75b24d7460922a19f9875087d70bc6e317466c28f4c5ea11 - 0.0% (532 Bytes)
[#007] sha256:337ae02f3ae97e421696d1a1859f5a3efe0c552c85c84168638b1e46444961fb - 0.12% (1020 KB)
[#008] sha256:06caa8e3c11e4c2419aa6b5f893df10490f337aa8c87d0acd40e07cac6077323 - 92.78% (765 MB)
[#009] sha256:9f458636f3ef0f01ffd21caa71dc2cc0d9cc0d46911c05c0357e52c66b3162ef - 0.0% (3.91 KB)
[#010] sha256:7cfa99a8aa61b92af51308b0ac277535300b3adebc368311e43f301f486a8d36 - 0.0% (1.21 KB)
[#011] sha256:e4c3127ebbb5bf7eea937b3f737ef0d8fb2b7ee21650a0c74657d060a35cb0cb - 0.0% (458 Bytes)
[#012] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#013] sha256:2ea21b519b786e837d10d76a130fc732007847889d977f5e695204931678c274 - 0.0% (8.82 KB)
[#014] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#015] sha256:a83a9affcd0d32a33e5d98eaadce1cccfc0b218a183d51463e6097691814a27c - 0.05% (384 KB)
[#016] sha256:3f0b8829141c42ec45485d779b5770da0b25f06d5bb9f0a903bc45a805720c2e - 0.0% (156 Bytes)
COPY /rootfs/ / # buildkit
2026-06-22 17:59:34 UTC (buildkit.dockerfile.v0)CMD ["/bin/bash"]
2026-07-03 10:03:27 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c rm /bin/sh && ln -s /bin/bash /bin/sh # buildkit
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)ARG WAZUH_VERSION=4.10.4
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)ARG WAZUH_TAG_REVISION=1
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)ARG FILEBEAT_TEMPLATE_BRANCH=v4.10.4
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)ARG FILEBEAT_CHANNEL=filebeat-oss
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)ARG FILEBEAT_VERSION=7.10.2
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)ARG WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.4.tar.gz
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)ARG S6_VERSION=v2.2.0.3
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)RUN |7 WAZUH_VERSION=4.10.4 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.10.4 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.4.tar.gz S6_VERSION=v2.2.0.3 /bin/sh -c yum install curl-minimal xz gnupg tar gzip openssl findutils procps -y && yum clean all # buildkit
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)COPY config/check_repository.sh / # buildkit
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)COPY config/filebeat_module.sh / # buildkit
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)COPY config/permanent_data.env config/permanent_data.sh / # buildkit
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)RUN |7 WAZUH_VERSION=4.10.4 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.10.4 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.4.tar.gz S6_VERSION=v2.2.0.3 /bin/sh -c chmod 775 /check_repository.sh # buildkit
2026-07-03 10:03:42 UTC (buildkit.dockerfile.v0)RUN |7 WAZUH_VERSION=4.10.4 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.10.4 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.4.tar.gz S6_VERSION=v2.2.0.3 /bin/sh -c source /check_repository.sh # buildkit
2026-07-03 10:05:06 UTC (buildkit.dockerfile.v0)RUN |7 WAZUH_VERSION=4.10.4 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.10.4 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.4.tar.gz S6_VERSION=v2.2.0.3 /bin/sh -c yum install wazuh-manager-${WAZUH_VERSION}-${WAZUH_TAG_REVISION} -y && yum clean all && chmod 775 /filebeat_module.sh && source /filebeat_module.sh && rm /filebeat_module.sh && curl --fail --silent -L https://github.com/just-containers/s6-overlay/releases/download/${S6_VERSION}/s6-overlay-amd64.tar.gz -o /tmp/s6-overlay-amd64.tar.gz && tar xzf /tmp/s6-overlay-amd64.tar.gz -C / --exclude="./bin" && tar xzf /tmp/s6-overlay-amd64.tar.gz -C /usr ./bin && rm /tmp/s6-overlay-amd64.tar.gz && rm -f /var/ossec/etc/sslmanager.key && rm -f /var/ossec/etc/sslmanager.cert # buildkit
2026-07-03 10:05:06 UTC (buildkit.dockerfile.v0)COPY config/etc/ /etc/ # buildkit
2026-07-03 10:05:06 UTC (buildkit.dockerfile.v0)COPY --chown=root:wazuh config/create_user.py /var/ossec/framework/scripts/create_user.py # buildkit
2026-07-03 10:05:06 UTC (buildkit.dockerfile.v0)COPY config/filebeat.yml /etc/filebeat/ # buildkit
2026-07-03 10:05:06 UTC (buildkit.dockerfile.v0)RUN |7 WAZUH_VERSION=4.10.4 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.10.4 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.4.tar.gz S6_VERSION=v2.2.0.3 /bin/sh -c chmod go-w /etc/filebeat/filebeat.yml # buildkit
2026-07-03 10:05:06 UTC (buildkit.dockerfile.v0)ADD https://raw.githubusercontent.com/wazuh/wazuh/v4.10.4/extensions/elasticsearch/7.x/wazuh-template.json /etc/filebeat # buildkit
2026-07-03 10:05:06 UTC (buildkit.dockerfile.v0)RUN |7 WAZUH_VERSION=4.10.4 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.10.4 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.4.tar.gz S6_VERSION=v2.2.0.3 /bin/sh -c chmod go-w /etc/filebeat/wazuh-template.json # buildkit
2026-07-03 10:05:07 UTC (buildkit.dockerfile.v0)RUN |7 WAZUH_VERSION=4.10.4 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.10.4 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.4.tar.gz S6_VERSION=v2.2.0.3 /bin/sh -c mkdir -p /var/ossec/var/multigroups && chown root:wazuh /var/ossec/var/multigroups && chmod 770 /var/ossec/var/multigroups && mkdir -p /var/ossec/agentless && chown root:wazuh /var/ossec/agentless && chmod 770 /var/ossec/agentless && mkdir -p /var/ossec/active-response/bin && chown root:wazuh /var/ossec/active-response/bin && chmod 770 /var/ossec/active-response/bin && chmod 755 /permanent_data.sh && sync && /permanent_data.sh && sync && rm /permanent_data.sh # buildkit
2026-07-03 10:05:07 UTC (buildkit.dockerfile.v0)RUN |7 WAZUH_VERSION=4.10.4 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.10.4 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.4.tar.gz S6_VERSION=v2.2.0.3 /bin/sh -c rm /etc/yum.repos.d/wazuh.repo # buildkit
2026-07-03 10:05:07 UTC (buildkit.dockerfile.v0)EXPOSE map[1514/tcp:{} 1515/tcp:{} 1516/tcp:{} 514/udp:{} 55000/tcp:{}]
2026-07-03 10:05:07 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/init"]
Please be careful as this will not just delete the reference but also the actual content!
For example when you have latest and v1.2.3 both pointing to the same image
the deletion of latest will also permanently remove v1.2.3.