diff --git a/README.md b/README.md index 024c6df..a80dff7 100644 --- a/README.md +++ b/README.md @@ -31,8 +31,8 @@ You can leverage **vArmor** in the following scenarios to provide sandbox protec ## Prerequisites |Enforcer|Requirements|Recommendations| |------------|--------------------------------------------|--------| -|AppArmor |1. Linux Kernel 4.15 and above
2. The AppArmor LSM is enabled|GKE with Container-Optimized OS
AKS with Ubuntu 22.04 LTS
[VKE](https://www.volcengine.com/product/vke) with veLinux
Debian 10 and above
Ubuntu 18.04.0 LTS and above
[veLinux](https://www.volcengine.com/docs/6396/74967) etc. -|BPF |1. Linux Kernel 5.10 and above (x86_64)
2. containerd v1.6.0 and above
3. The BPF LSM is enabled|EKS with Amazon Linux 2
GKE with Container-Optimized OS
AKS with Ubuntu 22.04 LTS \*
ACK with Alibaba Cloud Linux 3 \*
OpenSUSE 15.4 \*
Debian 11 \*
Fedora 37 etc

* *Manual enabling of BPF LSM is required* +|AppArmor |1. Linux Kernel 4.15 and above
2. The AppArmor LSM is enabled|GKE with Container-Optimized OS
AKS with Ubuntu 22.04 LTS
[VKE](https://www.volcengine.com/product/vke) with veLinux
Debian 10 and above
Ubuntu 18.04.0 LTS and above
[veLinux 1.0](https://www.volcengine.com/docs/6396/74967) etc. +|BPF |1. Linux Kernel 5.10 and above (x86_64)
2. containerd v1.6.0 and above
3. The BPF LSM is enabled|EKS with Amazon Linux 2
GKE with Container-Optimized OS
AKS with Ubuntu 22.04 LTS \*
ACK with Alibaba Cloud Linux 3 \*
OpenSUSE 15.4 \*
Debian 11 \*
Fedora 37
[veLinux 1.0 with 5.10](https://www.volcengine.com/docs/6396/74967) etc.

* *Manual enabling of BPF LSM is required* ## The Built-in Rules @@ -58,6 +58,7 @@ helm pull oci://elkeid-cn-beijing.cr.volces.com/varmor/varmor --version 0.5.4 ``` ### Step 2. Install +*You can use the domain `elkeid-ap-southeast-1.cr.volces.com` outside of the CN region.* ``` helm install varmor varmor-0.5.4.tgz \ --namespace varmor --create-namespace \ diff --git a/README.zh_CN.md b/README.zh_CN.md index 0fb6c48..1a84b76 100644 --- a/README.zh_CN.md +++ b/README.zh_CN.md @@ -29,8 +29,8 @@ ## 前置条件 |强制访问控制器|要求|推荐| |------------|--------------------------------------------|--------| -|AppArmor |1. Linux Kernel 4.15 及以上版本
2. 系统需开启 AppArmor LSM|GKE with Container-Optimized OS
AKS with Ubuntu 22.04 LTS
[VKE](https://www.volcengine.com/product/vke) with veLinux
Debian 10 及以上版本
Ubuntu 18.04.0 LTS 及以上版本
[veLinux](https://www.volcengine.com/docs/6396/74967) 等 -|BPF |1. Linux Kernel 5.10 及以上版本 (x86_64)
2. containerd v1.6.0 及以上版本
3. 系统需开启 BPF LSM|EKS with Amazon Linux 2
GKE with Container-Optimized OS
AKS with Ubuntu 22.04 LTS \*
ACK with Alibaba Cloud Linux 3 \*
OpenSUSE 15.4 \*
Debian 11 \*
Fedora 37 等

* *需手动启用节点的 BPF LSM* +|AppArmor |1. Linux Kernel 4.15 及以上版本
2. 系统需开启 AppArmor LSM|GKE with Container-Optimized OS
AKS with Ubuntu 22.04 LTS
[VKE](https://www.volcengine.com/product/vke) with veLinux
Debian 10 及以上版本
Ubuntu 18.04.0 LTS 及以上版本
[veLinux 1.0](https://www.volcengine.com/docs/6396/74967) 等 +|BPF |1. Linux Kernel 5.10 及以上版本 (x86_64)
2. containerd v1.6.0 及以上版本
3. 系统需开启 BPF LSM|EKS with Amazon Linux 2
GKE with Container-Optimized OS
AKS with Ubuntu 22.04 LTS \*
ACK with Alibaba Cloud Linux 3 \*
OpenSUSE 15.4 \*
Debian 11 \*
Fedora 37
[veLinux 1.0 with 5.10](https://www.volcengine.com/docs/6396/74967) 等

* *需手动启用节点的 BPF LSM* ## 内置规则