You are viewing documentation for Falco version: v0.33.1

Falco v0.33.1 documentation is no longer actively maintained. The version you are currently viewing is a static snapshot. For up-to-date documentation, see the latest version.

Installation Tools

Last modified January 22, 2021
Installation tools that are required for integrations built on the Falco core

Scripted install

To install Falco on Linux, you can download a shell script that takes care of the necessary steps:

curl -o install_falco -s

Then verify the SHA256 checksum of the script using the sha256sum tool (or something analogous):

sha256sum install_falco

It should be 59201c1339cc53e86edcd7d2e7273e52f784b3cf7d4a3142059112b3b9062f6d.

Then run the script either as root or with sudo:

sudo bash install_falco


You can install Falco in Kubernetes using Helm. The Falco community supports a helm chart and documentation on how to use it can be found here.

See Installing Helm for information about how to download and install Helm.

View Installing Helm Guide


A Puppet module for Falco, sysdig-falco, is available on Puppet Forge.


@juju4 has helpfully written an Ansible role for Falco, juju4.falco. It's available on GitHub and Ansible Galaxy. The latest version of Ansible Galaxy (v0.7) doesn't work with Falco 0.9, but the version on GitHub does.


The Kubernetes command-line tool, kubectl, allows you to run commands against Kubernetes clusters. You can use kubectl to deploy applications, inspect and manage cluster resources, and view logs.

See Install and Set Up kubectl for information about how to download and install kubectl and set it up for accessing your cluster.

View kubectl Install and Set Up Guide

Last modified January 22, 2021: added DCO signoff (e9d58f5)