Installation Tools

Installation tools that are required for integrations built on the Falco core

Scripted install

To install Falco on Linux, you can download a shell script that takes care of the necessary steps:

curl -o install_falco -s

Then verify the SHA256 checksum of the script using the sha256sum tool (or something analogous):

sha256sum install_falco

It should be 21e8053c37e32f95d91c9393d961af1c63b5839d795c8cac314d05daadea9779.

Then run the script either as root or with sudo:

sudo bash install_falco


You can install Falco in Kubernetes using Helm. The Falco community supports a helm chart and documentation on how to use it can be found here.

See Installing Helm for information about how to download and install Helm.

View Installing Helm Guide


A Puppet module for Falco, sysdig-falco, is available on Puppet Forge.


@juju4 has helpfully written an Ansible role for Falco, juju4.falco. It's available on GitHub and Ansible Galaxy. The latest version of Ansible Galaxy (v0.7) doesn't work with Falco 0.9, but the version on GitHub does.


The Kubernetes command-line tool, kubectl, allows you to run commands against Kubernetes clusters. You can use kubectl to deploy applications, inspect and manage cluster resources, and view logs.

See Install and Set Up kubectl for information about how to download and install kubectl and set it up for accessing your cluster.

View kubectl Install and Set Up Guide

Last modified January 22, 2021: added DCO signoff (e9d58f5)