Upgrade

Upgrading Falco on a Linux system

This section provides upgrading paths for Falco if previously installed following the Install section.

Upgrading

According to the installation method you chose, you first have to remove the active kernel module before upgrading Falco to the latest version:

rmmod falco

Debian/Ubuntu

If you configured the apt repository by having followed the instructions for Falco 0.27.0 or older, you may need to update the repository URL:

sed -i 's,https://dl.bintray.com/falcosecurity/deb,https://download.falco.org/packages/deb,' /etc/apt/sources.list.d/falcosecurity.list
apt-get clean
apt-get -y update

Check in the apt-get update log that https://download.falco.org/packages/deb is present.

If you installed Falco by following the provided instructions:

apt-get --only-upgrade install falco

CentOS/RHEL/Fedora/Amazon Linux

If you configured the yum repository by having followed the instructions for Falco 0.27.0 or older, you may need to update the repository URL:

sed -i 's,https://dl.bintray.com/falcosecurity/rpm,https://download.falco.org/packages/rpm,' /etc/yum.repos.d/falcosecurity.repo
yum clean all

Then check that the falcosecurity-rpm repository is pointing to https://download.falco.org/packages/rpm/:

yum repolist -v falcosecurity-rpm

If you installed Falco by following the provided instructions:

  1. Check for updates:

    yum check-update
    
  2. If a newer Falco version is available:

    yum update falco
    

openSUSE

If you configured the zypper repository by having followed the instructions for Falco 0.27.0 or older, you may need to update the repository URL:

sed -i 's,https://dl.bintray.com/falcosecurity/rpm,https://download.falco.org/packages/rpm,' /etc/zypp/repos.d/falcosecurity.repo
zypper refresh

Then check that the falcosecurity-rpm repository is pointing to https://download.falco.org/packages/rpm/:

zypper lr falcosecurity-rpm

If you installed Falco by following the provided instructions:

zypper update falco