container defenre inside google's distroless container

[giulianoz]

Hello,

I'm trying to run defender in fargate/sidecar mode. It works fin if I use alpine/ubuntu images as base, but It fails when I try to use google's distroless static/base images

The only log I get is

tandard_init_linux.go:190: exec user process caused "no such file or directory"

The  container works fine if I don't run the defender, so it seems not to be related to my binary

Any hint on how to fix this , if possible at all ?

thanks

update: it seems that the fargate_defender.sh is the issue. I changed the entrypoint to use the defender command directly and it seems to work. However this way I will not have the sleeping loop, so I might end adding some workaround... 

[MDavis29]

Giulianoz,

Thanks for reaching out, can you share more details on you use case? also we offer app embedded defenders for situations a container defender cannot be used.

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/install/install_def...