2026-07-03 10:27:52 UTC
847 MB
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
[#000] sha256:43a4ccfcda545d0357b8595db01c68db022db4283c68d08e06427e6c91ac7063 - 6.15% (52 MB)
[#001] sha256:fac73c8e3fcbffadc6543f48fb0b899aedab3fbda2184d54f10cf842b4fd0147 - 0.0% (149 Bytes)
[#002] sha256:bfd5e56cf7aff23767415a2ce260a2faf24007c1a0498f4a8c87c08f88722f54 - 0.72% (6.09 MB)
[#003] sha256:e925e95893fab6b85019e2af545930fe90db3f11f610cf442f88b4dc5e260bc1 - 0.0% (531 Bytes)
[#004] sha256:003e3de80158e262f14201a2dc3a887b951cd7299d6035d0fe04821f62f2956b - 0.0% (464 Bytes)
[#005] sha256:127018d50c8060af8946269d7d59e73723e96731c83f93320abf81444cda0fc0 - 0.0% (1.46 KB)
[#006] sha256:a647534261479fe5a07b74dd77720ea758387924a85a59e8d0068264d255a220 - 0.0% (531 Bytes)
[#007] sha256:7ab38649b7832ad543320de706ca3080c221641513eede523ea417fb30e9bfed - 0.12% (1020 KB)
[#008] sha256:a6c114ae63fdb1df99e7f690699f0e7e65b262fea4203366dcc06c83f61c95c0 - 92.97% (787 MB)
[#009] sha256:5dc0b6ce44056aff4f20de095511cb5ca54edcb056a51b2a192d3e69227c6ede - 0.0% (4.01 KB)
[#010] sha256:0dfcb3d68dfd1ba89fa654d8163449a653d72bf583bd9a03c8c16d602f7377e5 - 0.0% (1.21 KB)
[#011] sha256:b9bd3cc811327f7a35c09c25cdb97fd0dda90cc6ddbbc43b963d4f833dbe5b41 - 0.0% (456 Bytes)
[#012] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#013] sha256:31a0ca9946d697de4ff4710d663e59e8834bdd945718b71166d22fa9229d89ed - 0.0% (8.83 KB)
[#014] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#015] sha256:cc950af4e2f35a9ce15ee7a6f0160a2082c8ca69cd3dff42a5ad32504dc3992a - 0.05% (402 KB)
[#016] sha256:4357a897844f6dd0c343f0b2245bf9faf539ec7c6d13ce9037be1d1ddb17ac3a - 0.0% (155 Bytes)
COPY /rootfs/ / # buildkit
2026-06-22 17:59:34 UTC (buildkit.dockerfile.v0)CMD ["/bin/bash"]
2026-07-03 10:25:59 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c rm /bin/sh && ln -s /bin/bash /bin/sh # buildkit
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)ARG WAZUH_VERSION=4.14.6
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)ARG WAZUH_TAG_REVISION=1
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)ARG FILEBEAT_TEMPLATE_BRANCH=v4.14.6
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)ARG FILEBEAT_CHANNEL=filebeat-oss
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)ARG FILEBEAT_VERSION=7.10.2
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)ARG FILEBEAT_REVISION=2
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)ARG WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)ARG S6_VERSION=v2.2.0.3
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)ARG TARGETARCH=amd64
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=amd64 /bin/sh -c yum install curl-minimal xz gnupg tar gzip openssl findutils procps -y && yum clean all # buildkit
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)COPY config/check_repository.sh / # buildkit
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)COPY config/filebeat_module.sh / # buildkit
2026-07-03 10:26:17 UTC (buildkit.dockerfile.v0)COPY config/permanent_data.env config/permanent_data.sh / # buildkit
2026-07-03 10:26:18 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=amd64 /bin/sh -c chmod 775 /check_repository.sh # buildkit
2026-07-03 10:26:18 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=amd64 /bin/sh -c source /check_repository.sh # buildkit
2026-07-03 10:27:50 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=amd64 /bin/sh -c yum install wazuh-manager-${WAZUH_VERSION}-${WAZUH_TAG_REVISION} -y && yum clean all && chmod 775 /filebeat_module.sh && source /filebeat_module.sh && rm /filebeat_module.sh && S6_ARCH="amd64" && if [ "${TARGETARCH}" = "arm64" ]; then S6_ARCH="aarch64"; fi && curl --fail --silent -L https://github.com/just-containers/s6-overlay/releases/download/${S6_VERSION}/s6-overlay-${S6_ARCH}.tar.gz -o /tmp/s6-overlay-${S6_ARCH}.tar.gz && tar xzf /tmp/s6-overlay-${S6_ARCH}.tar.gz -C / --exclude="./bin" && tar xzf /tmp/s6-overlay-${S6_ARCH}.tar.gz -C /usr ./bin && rm /tmp/s6-overlay-${S6_ARCH}.tar.gz && rm -f /var/ossec/etc/sslmanager.key && rm -f /var/ossec/etc/sslmanager.cert # buildkit
2026-07-03 10:27:50 UTC (buildkit.dockerfile.v0)COPY config/etc/ /etc/ # buildkit
2026-07-03 10:27:50 UTC (buildkit.dockerfile.v0)COPY --chown=root:wazuh config/create_user.py /var/ossec/framework/scripts/create_user.py # buildkit
2026-07-03 10:27:50 UTC (buildkit.dockerfile.v0)COPY config/filebeat.yml /etc/filebeat/ # buildkit
2026-07-03 10:27:51 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=amd64 /bin/sh -c chmod go-w /etc/filebeat/filebeat.yml # buildkit
2026-07-03 10:27:51 UTC (buildkit.dockerfile.v0)ADD https://raw.githubusercontent.com/wazuh/wazuh/v4.14.6/extensions/elasticsearch/7.x/wazuh-template.json /etc/filebeat # buildkit
2026-07-03 10:27:51 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=amd64 /bin/sh -c chmod go-w /etc/filebeat/wazuh-template.json # buildkit
2026-07-03 10:27:52 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=amd64 /bin/sh -c mkdir -p /var/ossec/var/multigroups && chown root:wazuh /var/ossec/var/multigroups && chmod 770 /var/ossec/var/multigroups && mkdir -p /var/ossec/agentless && chown root:wazuh /var/ossec/agentless && chmod 770 /var/ossec/agentless && mkdir -p /var/ossec/active-response/bin && chown root:wazuh /var/ossec/active-response/bin && chmod 770 /var/ossec/active-response/bin && chmod 755 /permanent_data.sh && sync && /permanent_data.sh && sync && rm /permanent_data.sh # buildkit
2026-07-03 10:27:52 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=amd64 /bin/sh -c rm /etc/yum.repos.d/wazuh.repo # buildkit
2026-07-03 10:27:52 UTC (buildkit.dockerfile.v0)EXPOSE [1514/tcp 1515/tcp 1516/tcp 514/udp 55000/tcp]
2026-07-03 10:27:52 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/init"]
2026-07-03 10:43:56 UTC
836 MB
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
[#000] sha256:9d73cc96eee98f0257861d2c8c5e7eac1d4fd5e92dd1ed16608b0040908eb5e0 - 6.1% (51 MB)
[#001] sha256:89e231c58123539ee9e2e08fd5fc9048901a49758014e5eb26f257cd5df858cb - 0.0% (148 Bytes)
[#002] sha256:73ed9b2cb84ee8026d55a1edf484d37aec02b1c810fc287976cd583120c919d2 - 0.73% (6.07 MB)
[#003] sha256:e925e95893fab6b85019e2af545930fe90db3f11f610cf442f88b4dc5e260bc1 - 0.0% (531 Bytes)
[#004] sha256:003e3de80158e262f14201a2dc3a887b951cd7299d6035d0fe04821f62f2956b - 0.0% (464 Bytes)
[#005] sha256:127018d50c8060af8946269d7d59e73723e96731c83f93320abf81444cda0fc0 - 0.0% (1.46 KB)
[#006] sha256:a647534261479fe5a07b74dd77720ea758387924a85a59e8d0068264d255a220 - 0.0% (531 Bytes)
[#007] sha256:65a418960e387ffe17dfd4eb61512f232f606dfc11d5af29f1fccfdf0ce56583 - 0.12% (1010 KB)
[#008] sha256:f4ce0224ae75819cc55052bab99268fedcf7f04f4679471c3b29f282b6d6750f - 93.01% (778 MB)
[#009] sha256:5dc0b6ce44056aff4f20de095511cb5ca54edcb056a51b2a192d3e69227c6ede - 0.0% (4.01 KB)
[#010] sha256:625c4805953e210b7e5bc6113631b7e4b1e2f910a65e0043306bed155b54bfb5 - 0.0% (1.22 KB)
[#011] sha256:f821fe2824ee989ef95a17cb5fc69ae362a8f44e72b78b5fe901df2eac4d95db - 0.0% (458 Bytes)
[#012] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#013] sha256:113124adbab4a835607dbc24c34a2e4cc4da116062e53b65aea850001963e938 - 0.0% (8.83 KB)
[#014] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#015] sha256:9b020cbaa81144cb5b607ae69ed6adcbdd1ca6afc431807dc0ec0b83a7ba29bf - 0.05% (455 KB)
[#016] sha256:ae49bf703d2daec3337efd0485ce9adcdf306f749e434ce194888f73dec6cb80 - 0.0% (156 Bytes)
COPY /rootfs/ / # buildkit
2026-06-22 17:59:55 UTC (buildkit.dockerfile.v0)CMD ["/bin/bash"]
2026-07-03 10:26:00 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c rm /bin/sh && ln -s /bin/bash /bin/sh # buildkit
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)ARG WAZUH_VERSION=4.14.6
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)ARG WAZUH_TAG_REVISION=1
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)ARG FILEBEAT_TEMPLATE_BRANCH=v4.14.6
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)ARG FILEBEAT_CHANNEL=filebeat-oss
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)ARG FILEBEAT_VERSION=7.10.2
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)ARG FILEBEAT_REVISION=2
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)ARG WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)ARG S6_VERSION=v2.2.0.3
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)ARG TARGETARCH=arm64
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=arm64 /bin/sh -c yum install curl-minimal xz gnupg tar gzip openssl findutils procps -y && yum clean all # buildkit
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)COPY config/check_repository.sh / # buildkit
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)COPY config/filebeat_module.sh / # buildkit
2026-07-03 10:29:20 UTC (buildkit.dockerfile.v0)COPY config/permanent_data.env config/permanent_data.sh / # buildkit
2026-07-03 10:29:21 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=arm64 /bin/sh -c chmod 775 /check_repository.sh # buildkit
2026-07-03 10:29:22 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=arm64 /bin/sh -c source /check_repository.sh # buildkit
2026-07-03 10:43:46 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=arm64 /bin/sh -c yum install wazuh-manager-${WAZUH_VERSION}-${WAZUH_TAG_REVISION} -y && yum clean all && chmod 775 /filebeat_module.sh && source /filebeat_module.sh && rm /filebeat_module.sh && S6_ARCH="amd64" && if [ "${TARGETARCH}" = "arm64" ]; then S6_ARCH="aarch64"; fi && curl --fail --silent -L https://github.com/just-containers/s6-overlay/releases/download/${S6_VERSION}/s6-overlay-${S6_ARCH}.tar.gz -o /tmp/s6-overlay-${S6_ARCH}.tar.gz && tar xzf /tmp/s6-overlay-${S6_ARCH}.tar.gz -C / --exclude="./bin" && tar xzf /tmp/s6-overlay-${S6_ARCH}.tar.gz -C /usr ./bin && rm /tmp/s6-overlay-${S6_ARCH}.tar.gz && rm -f /var/ossec/etc/sslmanager.key && rm -f /var/ossec/etc/sslmanager.cert # buildkit
2026-07-03 10:43:46 UTC (buildkit.dockerfile.v0)COPY config/etc/ /etc/ # buildkit
2026-07-03 10:43:46 UTC (buildkit.dockerfile.v0)COPY --chown=root:wazuh config/create_user.py /var/ossec/framework/scripts/create_user.py # buildkit
2026-07-03 10:43:46 UTC (buildkit.dockerfile.v0)COPY config/filebeat.yml /etc/filebeat/ # buildkit
2026-07-03 10:43:47 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=arm64 /bin/sh -c chmod go-w /etc/filebeat/filebeat.yml # buildkit
2026-07-03 10:43:47 UTC (buildkit.dockerfile.v0)ADD https://raw.githubusercontent.com/wazuh/wazuh/v4.14.6/extensions/elasticsearch/7.x/wazuh-template.json /etc/filebeat # buildkit
2026-07-03 10:43:47 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=arm64 /bin/sh -c chmod go-w /etc/filebeat/wazuh-template.json # buildkit
2026-07-03 10:43:56 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=arm64 /bin/sh -c mkdir -p /var/ossec/var/multigroups && chown root:wazuh /var/ossec/var/multigroups && chmod 770 /var/ossec/var/multigroups && mkdir -p /var/ossec/agentless && chown root:wazuh /var/ossec/agentless && chmod 770 /var/ossec/agentless && mkdir -p /var/ossec/active-response/bin && chown root:wazuh /var/ossec/active-response/bin && chmod 770 /var/ossec/active-response/bin && chmod 755 /permanent_data.sh && sync && /permanent_data.sh && sync && rm /permanent_data.sh # buildkit
2026-07-03 10:43:56 UTC (buildkit.dockerfile.v0)RUN |9 WAZUH_VERSION=4.14.6 WAZUH_TAG_REVISION=1 FILEBEAT_TEMPLATE_BRANCH=v4.14.6 FILEBEAT_CHANNEL=filebeat-oss FILEBEAT_VERSION=7.10.2 FILEBEAT_REVISION=2 WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.5.tar.gz S6_VERSION=v2.2.0.3 TARGETARCH=arm64 /bin/sh -c rm /etc/yum.repos.d/wazuh.repo # buildkit
2026-07-03 10:43:56 UTC (buildkit.dockerfile.v0)EXPOSE [1514/tcp 1515/tcp 1516/tcp 514/udp 55000/tcp]
2026-07-03 10:43:56 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/init"]
Please be careful as this will not just delete the reference but also the actual content!
For example when you have latest and v1.2.3 both pointing to the same image
the deletion of latest will also permanently remove v1.2.3.