From 827e84a70098a2aa0dd70bd2cc7ee34eb6b25093 Mon Sep 17 00:00:00 2001 From: Carlos Matos Date: Wed, 22 Oct 2025 14:21:04 -0400 Subject: [PATCH 1/3] feat(container-pull): add unified falcon-sensor format with backward compatibility Introduce falcon-sensor-regional type for traditional format while supporting new unified falcon-sensor format. Includes smart version matching and improved documentation with usage examples. --- .../falcon-container-sensor-pull/README.md | 81 +++++++++++-- .../falcon-container-sensor-pull.sh | 108 +++++++++++++++++- 2 files changed, 175 insertions(+), 14 deletions(-) diff --git a/bash/containers/falcon-container-sensor-pull/README.md b/bash/containers/falcon-container-sensor-pull/README.md index e6953b1..5b52d2f 100644 --- a/bash/containers/falcon-container-sensor-pull/README.md +++ b/bash/containers/falcon-container-sensor-pull/README.md @@ -55,7 +55,7 @@ To check your version of cURL, run the following command: `curl --version` > [!IMPORTANT] > The following API scopes are the minimum required to retrieve the images. If you need to perform other operations post-retrieval, please refer to the CrowdStrike documentation to identify any additional scopes that may be required. -- **falcon-sensor | falcon-container | falcon-kac | falcon-imageanalyzer | falcon-jobcontroller | falcon-registryassessmentexecutor** +- **falcon-sensor | falcon-sensor-regional | falcon-container | falcon-kac | falcon-imageanalyzer | falcon-jobcontroller | falcon-registryassessmentexecutor** - `Sensor Download (read)` - `Falcon Images Download (read)` - **kpagent** @@ -100,6 +100,7 @@ Optional Flags: ----------------------- falcon-container falcon-sensor + falcon-sensor-regional falcon-kac falcon-snapshot falcon-imageanalyzer @@ -138,7 +139,7 @@ Help Options: | `-c`, `--copy ` | `$COPY` | `None` (Optional) | Registry you want to copy the sensor image to. Example: `myregistry.com/mynamespace`.
*\*By default, the image name and tag are appended. Use `--copy-omit-image-name` and/or `--copy-custom-tag` to change that behavior.* | | `-v`, `--version ` | `$SENSOR_VERSION` | `None` (Optional) | Specify sensor version to retrieve from the registry | | `-p`, `--platform ` | `$SENSOR_PLATFORM` | `None` (Optional) | Specify sensor platform to retrieve from the registry | -| `-t`, `--type ` | `$SENSOR_TYPE` | `falcon-container` (Optional) | Specify which sensor to download [`falcon-container`, `falcon-sensor`, `falcon-kac`, `falcon-snapshot`, `falcon-imageanalyzer`, `kpagent`, `fcs`, `falcon-jobcontroller`, `falcon-registryassessmentexecutor`] ([see more details below](#sensor-types)) | +| `-t`, `--type ` | `$SENSOR_TYPE` | `falcon-container` (Optional) | Specify which sensor to download [`falcon-container`, `falcon-sensor`, `falcon-sensor-regional`, `falcon-kac`, `falcon-snapshot`, `falcon-imageanalyzer`, `kpagent`, `fcs`, `falcon-jobcontroller`, `falcon-registryassessmentexecutor`] ([see more details below](#sensor-types)) | | `--runtime` | `$CONTAINER_TOOL` | `docker` (Optional) | Use a different container runtime [docker, podman, skopeo]. **Default is Docker**. | | `--dump-credentials` | `$CREDS` | `False` (Optional) | Print registry credentials to stdout to copy/paste into container tools | | `--get-image-path` | N/A | `None` | Get the full image path including the registry, repository, and latest tag for the specified `SENSOR_TYPE`. | @@ -165,7 +166,8 @@ The following sensor types are available to download: | Sensor Image Name | Description | | :---------------------------------- | :---------------------------------------------------- | -| `falcon-sensor` | The Falcon sensor for Linux as a DaemonSet deployment | +| `falcon-sensor` | The Falcon sensor for Linux as a DaemonSet deployment (unified format - version 7.31+) | +| `falcon-sensor-regional` | The Falcon sensor for Linux as a DaemonSet deployment w/ regions (traditional format) | | `falcon-container` **(default)** | The Falcon Container sensor for Linux | | `falcon-kac` | The Falcon Kubernetes Admission Controller | | `falcon-snapshot` | The Falcon Snapshot scanner | @@ -175,6 +177,41 @@ The following sensor types are available to download: | `falcon-jobcontroller` | The Self Hosted Registry Assessment Jobs Controller | | `falcon-registryassessmentexecutor` | The Self Hosted Registry Assessment Executor | +### Falcon Sensor Image Formats + +Starting with Falcon sensor for Linux version 7.31 and above, CrowdStrike has introduced a unified image format that simplifies the registry path and tag structure. + +#### Unified Format (falcon-sensor) + +The `falcon-sensor` type now uses the new unified format: + +- **Repository Path**: `registry.crowdstrike.com/falcon-sensor/release/falcon-sensor` +- **Tag Format**: `--` +- **Example**: `registry.crowdstrike.com/falcon-sensor/release/falcon-sensor:7.31.0-15501-1` + +**Key Changes:** + +- Removes the region section from the repository path +- Simplifies the tag format by removing `.falcon-linux.Release.` +- Uses a single, unified image that works across all regions + +#### Regional Format (falcon-sensor-regional) + +The `falcon-sensor-regional` type maintains the traditional regional format for backward compatibility: + +- **Repository Path**: `registry.crowdstrike.com/falcon-sensor//release/falcon-sensor` +- **Tag Format**: `--.falcon-linux.Release.` +- **Example**: `registry.crowdstrike.com/falcon-sensor/us-1/release/falcon-sensor:7.29.0-15501-1.falcon-linux.Release.US-1` + +**When to Use:** + +- Use `falcon-sensor` for new deployments (recommended for version 7.31+) +- Use `falcon-sensor-regional` for backward compatibility or when you specifically need the regional sensor image format +- Both types provide the same functionality; the difference is in the image format and repository structure + +> [!NOTE] +> **Backward Compatibility**: Existing users of the `falcon-sensor` type will now automatically receive the new unified format. If you need to maintain the traditional regional format for any reason, simply change `-t falcon-sensor` to `-t falcon-sensor-regional` in your commands. No other changes to your scripts or workflows are required. + ### Examples #### Example downloading the Falcon Kubernetes Admission Controller @@ -188,9 +225,9 @@ The following example will attempt to autodiscover the region and download the l --type falcon-kac ``` -#### Example getting the full image path for the Falcon DaemonSet sensor +#### Example getting the full image path for the Falcon DaemonSet sensor (unified format) -The following example will print the image repository path with the latest image tag of the Falcon DaemonSet sensor. +The following example will print the image repository path with the latest image tag of the Falcon DaemonSet sensor using the new unified format. ```shell ./falcon-container-sensor-pull.sh \ @@ -200,19 +237,47 @@ The following example will print the image repository path with the latest image --get-image-path ``` -#### Example downloading the Falcon DaemonSet sensor +Example output: `registry.crowdstrike.com/falcon-sensor/release/falcon-sensor:7.31.0-15501-1` -The following example will download the latest version of the Falcon DaemonSet sensor container image and copy it to another registry. +#### Example getting the full image path for the Falcon DaemonSet sensor (regional format) + +The following example will print the image repository path with the latest image tag of the Falcon DaemonSet sensor using the traditional regional format. + +```shell +./falcon-container-sensor-pull.sh \ +--client-id \ +--client-secret \ +--type falcon-sensor-regional \ +--get-image-path +``` + +Example output: `registry.crowdstrike.com/falcon-sensor/us-1/release/falcon-sensor:7.29.0-15501-1.falcon-linux.Release.US-1` + +#### Example downloading the Falcon DaemonSet sensor (unified format) + +The following example will download the latest version of the Falcon DaemonSet sensor container image using the unified format and copy it to another registry. ```shell ./falcon-container-sensor-pull.sh \ --client-id \ --client-secret \ ---region us-2 \ --type falcon-sensor \ --copy myregistry.com/mynamespace ``` +#### Example downloading the Falcon DaemonSet sensor (regional format) + +The following example will download the latest version of the Falcon DaemonSet sensor container image using the regional format and copy it to another registry. + +```shell +./falcon-container-sensor-pull.sh \ +--client-id \ +--client-secret \ +--region us-2 \ +--type falcon-sensor-regional \ +--copy myregistry.com/mynamespace +``` + #### Example generating a pull token for K8s The following example will generate a pull token for the Falcon Container sensor for use in Kubernetes. diff --git a/bash/containers/falcon-container-sensor-pull/falcon-container-sensor-pull.sh b/bash/containers/falcon-container-sensor-pull/falcon-container-sensor-pull.sh index 039a90c..ff7995b 100755 --- a/bash/containers/falcon-container-sensor-pull/falcon-container-sensor-pull.sh +++ b/bash/containers/falcon-container-sensor-pull/falcon-container-sensor-pull.sh @@ -30,6 +30,7 @@ Optional Flags: ----------------------- falcon-container falcon-sensor + falcon-sensor-regional falcon-kac falcon-snapshot falcon-imageanalyzer @@ -443,7 +444,7 @@ detect_container_tool() { display_api_scopes() { local sensor_type=$1 case "${sensor_type}" in - falcon-sensor | falcon-container | falcon-kac | falcon-imageanalyzer | falcon-jobcontroller | falcon-registryassessmentexecutor) + falcon-sensor | falcon-sensor-regional | falcon-container | falcon-kac | falcon-imageanalyzer | falcon-jobcontroller | falcon-registryassessmentexecutor) echo "Sensor Download [read], Falcon Images Download [read]" ;; kpagent) @@ -461,6 +462,68 @@ display_api_scopes() { esac } +# Smart version matching function +match_sensor_version() { + local requested_version="$1" + local all_tags + local matched_tags + local version_pattern + + # Get all available tags by properly parsing JSON output from list_tags + all_tags=$(list_tags | awk ' + /^[[:space:]]*"[0-9]/ { + # Extract quoted tag (lines starting with version numbers), remove surrounding quotes and whitespace + gsub(/^[[:space:]]*"/, "") + gsub(/"[[:space:]]*,?[[:space:]]*$/, "") + if (length($0) > 0) print $0 + } + ') + + if [ -z "$requested_version" ]; then + # If no version specified, get the latest version + if [ -n "$all_tags" ]; then + echo "$all_tags" | sort -V | tail -1 + return 0 + else + return 1 + fi + fi + + # First try: exact version match (e.g., 6.35.0 matches 6.35.0-*) + version_pattern="^${requested_version}[.-]" + matched_tags=$(echo "$all_tags" | grep -E "$version_pattern") + + if [ -n "$matched_tags" ]; then + echo "$matched_tags" | sort -V | tail -1 + return 0 + fi + + # Second try: partial version match (e.g., 6.35 matches 6.35.* versions) + # Count dots in requested version to determine specificity + dot_count=$(echo "$requested_version" | tr -cd '.' | wc -c) + + if [ "$dot_count" -eq 1 ]; then + # For major.minor (e.g., 6.35), match 6.35.* versions + version_pattern="^${requested_version}\.[0-9]" + matched_tags=$(echo "$all_tags" | grep -E "$version_pattern") + elif [ "$dot_count" -eq 0 ]; then + # For major only (e.g., 6), match 6.* versions + version_pattern="^${requested_version}\.[0-9]" + matched_tags=$(echo "$all_tags" | grep -E "$version_pattern") + else + # For more specific versions, try prefix matching + matched_tags=$(echo "$all_tags" | grep "^${requested_version}") + fi + + if [ -n "$matched_tags" ]; then + echo "$matched_tags" | sort -V | tail -1 + return 0 + fi + + # No matches found - fail explicitly + return 1 +} + # shellcheck disable=SC2086 FALCON_CLOUD=$(echo ${FALCON_CLOUD:-'us-1'} | tr '[:upper:]' '[:lower:]') @@ -489,12 +552,13 @@ fi # Check if SENSOR_TYPE is set to a valid value case "${SENSOR_TYPE}" in - falcon-container | falcon-sensor | falcon-kac | falcon-snapshot | falcon-imageanalyzer | kpagent | fcs | falcon-jobcontroller | falcon-registryassessmentexecutor) ;; + falcon-container | falcon-sensor | falcon-sensor-regional | falcon-kac | falcon-snapshot | falcon-imageanalyzer | kpagent | fcs | falcon-jobcontroller | falcon-registryassessmentexecutor) ;; *) die """ Unrecognized sensor type: ${SENSOR_TYPE} Valid values are: falcon-container falcon-sensor + falcon-sensor-regional falcon-kac falcon-snapshot falcon-imageanalyzer @@ -504,6 +568,11 @@ case "${SENSOR_TYPE}" in falcon-registryassessmentexecutor""" ;; esac +# Add deprecation warning for falcon-sensor-regional +if [ "${SENSOR_TYPE}" = "falcon-sensor-regional" ]; then + echo "WARNING: Use 'falcon-sensor' for the new unified sensor image as the regional sensor images will eventually be EOL." +fi + #Check all mandatory variables set VARIABLES="FALCON_CLIENT_ID FALCON_CLIENT_SECRET" { @@ -536,7 +605,7 @@ cs_falcon_oauth_token=$( region_hint=$(grep -i ^x-cs-region: "$response_headers" | head -n 1 | tr '[:upper:]' '[:lower:]' | tr -d '\r' | sed 's/^x-cs-region: //g') rm "${response_headers}" -if [ "x${FALCON_CLOUD}" != "x${region_hint}" ] && [ "${region_hint}" != "" ]; then +if [ "${FALCON_CLOUD}" != "${region_hint}" ] && [ -n "${region_hint}" ]; then if [ -z "${region_hint}" ]; then die "Unable to obtain region hint from CrowdStrike Falcon OAuth API, Please provide FALCON_CLOUD environment variable as an override." fi @@ -544,8 +613,20 @@ if [ "x${FALCON_CLOUD}" != "x${region_hint}" ] && [ "${region_hint}" != "" ]; th fi registry_opts=$( - # Account for govcloud api mismatch - if [ "${FALCON_CLOUD}" = "us-gov-1" ]; then + # Handle unified falcon-sensor format (no region) + if [ "${SENSOR_TYPE}" = "falcon-sensor" ]; then + echo "falcon-sensor" + # Handle falcon-sensor-regional with traditional regional paths + elif [ "${SENSOR_TYPE}" = "falcon-sensor-regional" ]; then + if [ "${FALCON_CLOUD}" = "us-gov-1" ]; then + echo "falcon-sensor/gov1" + elif [ "${FALCON_CLOUD}" = "us-gov-2" ]; then + echo "falcon-sensor/gov2" + else + echo "falcon-sensor/$FALCON_CLOUD" + fi + # Account for govcloud api mismatch for other sensor types + elif [ "${FALCON_CLOUD}" = "us-gov-1" ]; then echo "$SENSOR_TYPE/gov1" elif [ "${FALCON_CLOUD}" = "us-gov-2" ]; then echo "$SENSOR_TYPE/gov2" @@ -738,7 +819,22 @@ if [ "${ERROR}" = "true" ]; then fi #Get latest sensor version -LATESTSENSOR=$(list_tags | awk -v RS=" " '{print}' | grep -i "$SENSOR_VERSION" | grep -o "[0-9a-zA-Z_\.\-]*" | tail -1) +set +e # Temporarily disable exit-on-error for version matching +LATESTSENSOR=$(match_sensor_version "$SENSOR_VERSION") +set -e # Re-enable exit-on-error + +# Check if version matching was successful +if [ -z "$LATESTSENSOR" ]; then + die "No sensor version found matching: ${SENSOR_VERSION} + +Available versions can be listed with: $0 --list-tags -t ${SENSOR_TYPE} + +Tips for version matching: + - Use exact version: -v 7.31.0 + - Use partial version: -v 7.31 (matches latest 7.31.x) + - Use major version: -v 7 (matches latest 7.x.x) + - Omit -v flag to get the latest available version" +fi #Construct full image path FULLIMAGEPATH="${REPOSITORY}:${LATESTSENSOR}" From 14f0300233c12fcf335f8c651b484bb3824d112d Mon Sep 17 00:00:00 2001 From: Carlos Matos Date: Thu, 23 Oct 2025 10:56:57 -0400 Subject: [PATCH 2/3] docs: moved unified section to top for better visibility --- .../falcon-container-sensor-pull/README.md | 65 +++++++++---------- 1 file changed, 30 insertions(+), 35 deletions(-) diff --git a/bash/containers/falcon-container-sensor-pull/README.md b/bash/containers/falcon-container-sensor-pull/README.md index 5b52d2f..77dc495 100644 --- a/bash/containers/falcon-container-sensor-pull/README.md +++ b/bash/containers/falcon-container-sensor-pull/README.md @@ -10,6 +10,7 @@ Please refer to the [Deprecation](DEPRECATION.md) document for more information - [Table of Contents](#table-of-contents) - [Multi-Architecture Support :rocket:](#multi-architecture-support-rocket) +- [Unified Falcon Sensor Image Support](#unified-falcon-sensor-image-support) - [Security recommendations](#security-recommendations) - [Prerequisites](#prerequisites) - [Auto-Discovery of Falcon Cloud Region](#auto-discovery-of-falcon-cloud-region) @@ -35,6 +36,35 @@ Refer to the [examples](#examples) section for more information on how to use th > [!NOTE] > While we do support copying the multi-arch image to a different registry using Podman, Docker, or Skopeo, we recommend using Skopeo for this purpose. Skopeo is a tool specifically designed for copying container images between registries and supports multi-arch images. +## Unified Falcon Sensor Image Support + +Starting with Falcon sensor for Linux version 7.31 and above, CrowdStrike has introduced a unified image format that simplifies the registry path and tag structure. + +### Unified Format (falcon-sensor) + +The `falcon-sensor` type now uses the new unified format: + +- **Repository Path**: `registry.crowdstrike.com/falcon-sensor/release/falcon-sensor` +- **Tag Format**: `--` +- **Example**: `registry.crowdstrike.com/falcon-sensor/release/falcon-sensor:7.31.0-15501-1` + +**Key Changes:** + +- Removes the region section from the repository path +- Simplifies the tag format by removing `.falcon-linux.Release.` +- Uses a single, unified image that works across all regions + +### Regional Format (falcon-sensor-regional) + +The `falcon-sensor-regional` type maintains the traditional regional format for backward compatibility: + +- **Repository Path**: `registry.crowdstrike.com/falcon-sensor//release/falcon-sensor` +- **Tag Format**: `--.falcon-linux.Release.` +- **Example**: `registry.crowdstrike.com/falcon-sensor/us-1/release/falcon-sensor:7.29.0-15501-1.falcon-linux.Release.US-1` + +> [!IMPORTANT] +> **Backward Compatibility**: Existing users of the `falcon-sensor` type will now automatically receive the new unified format. If you need to maintain the traditional regional format for any reason, simply change `-t falcon-sensor` to `-t falcon-sensor-regional` in your commands. No other changes to your scripts or workflows are required. + ## Security recommendations ### Use cURL version 7.55.0 or later @@ -177,41 +207,6 @@ The following sensor types are available to download: | `falcon-jobcontroller` | The Self Hosted Registry Assessment Jobs Controller | | `falcon-registryassessmentexecutor` | The Self Hosted Registry Assessment Executor | -### Falcon Sensor Image Formats - -Starting with Falcon sensor for Linux version 7.31 and above, CrowdStrike has introduced a unified image format that simplifies the registry path and tag structure. - -#### Unified Format (falcon-sensor) - -The `falcon-sensor` type now uses the new unified format: - -- **Repository Path**: `registry.crowdstrike.com/falcon-sensor/release/falcon-sensor` -- **Tag Format**: `--` -- **Example**: `registry.crowdstrike.com/falcon-sensor/release/falcon-sensor:7.31.0-15501-1` - -**Key Changes:** - -- Removes the region section from the repository path -- Simplifies the tag format by removing `.falcon-linux.Release.` -- Uses a single, unified image that works across all regions - -#### Regional Format (falcon-sensor-regional) - -The `falcon-sensor-regional` type maintains the traditional regional format for backward compatibility: - -- **Repository Path**: `registry.crowdstrike.com/falcon-sensor//release/falcon-sensor` -- **Tag Format**: `--.falcon-linux.Release.` -- **Example**: `registry.crowdstrike.com/falcon-sensor/us-1/release/falcon-sensor:7.29.0-15501-1.falcon-linux.Release.US-1` - -**When to Use:** - -- Use `falcon-sensor` for new deployments (recommended for version 7.31+) -- Use `falcon-sensor-regional` for backward compatibility or when you specifically need the regional sensor image format -- Both types provide the same functionality; the difference is in the image format and repository structure - -> [!NOTE] -> **Backward Compatibility**: Existing users of the `falcon-sensor` type will now automatically receive the new unified format. If you need to maintain the traditional regional format for any reason, simply change `-t falcon-sensor` to `-t falcon-sensor-regional` in your commands. No other changes to your scripts or workflows are required. - ### Examples #### Example downloading the Falcon Kubernetes Admission Controller From 8cb16c993dffaddd327c891005833c65f84a4fc8 Mon Sep 17 00:00:00 2001 From: Carlos Matos Date: Thu, 23 Oct 2025 12:47:35 -0400 Subject: [PATCH 3/3] docs: grammar updates for readme --- .../falcon-container-sensor-pull/README.md | 45 ++++++------------- 1 file changed, 13 insertions(+), 32 deletions(-) diff --git a/bash/containers/falcon-container-sensor-pull/README.md b/bash/containers/falcon-container-sensor-pull/README.md index 77dc495..61070c3 100644 --- a/bash/containers/falcon-container-sensor-pull/README.md +++ b/bash/containers/falcon-container-sensor-pull/README.md @@ -38,32 +38,13 @@ Refer to the [examples](#examples) section for more information on how to use th ## Unified Falcon Sensor Image Support -Starting with Falcon sensor for Linux version 7.31 and above, CrowdStrike has introduced a unified image format that simplifies the registry path and tag structure. +Starting with Falcon sensor for Linux version 7.31 and above, CrowdStrike has introduced a new unified Falcon sensor that utilizes a single container image as opposed to the regional based sensors. -### Unified Format (falcon-sensor) -The `falcon-sensor` type now uses the new unified format: - -- **Repository Path**: `registry.crowdstrike.com/falcon-sensor/release/falcon-sensor` -- **Tag Format**: `--` -- **Example**: `registry.crowdstrike.com/falcon-sensor/release/falcon-sensor:7.31.0-15501-1` - -**Key Changes:** - -- Removes the region section from the repository path -- Simplifies the tag format by removing `.falcon-linux.Release.` -- Uses a single, unified image that works across all regions - -### Regional Format (falcon-sensor-regional) - -The `falcon-sensor-regional` type maintains the traditional regional format for backward compatibility: - -- **Repository Path**: `registry.crowdstrike.com/falcon-sensor//release/falcon-sensor` -- **Tag Format**: `--.falcon-linux.Release.` -- **Example**: `registry.crowdstrike.com/falcon-sensor/us-1/release/falcon-sensor:7.29.0-15501-1.falcon-linux.Release.US-1` +For additional context and information, please see the [Tech Alert](https://supportportal.crowdstrike.com/s/article/Tech-Alert-60-day-notice-Unified-installer-image-for-Falcon-sensor-for-Linux). > [!IMPORTANT] -> **Backward Compatibility**: Existing users of the `falcon-sensor` type will now automatically receive the new unified format. If you need to maintain the traditional regional format for any reason, simply change `-t falcon-sensor` to `-t falcon-sensor-regional` in your commands. No other changes to your scripts or workflows are required. +> **Backward Compatibility**: Existing users of the `falcon-sensor` type will now automatically receive the new unified sensor. If you need to maintain the traditional regional sensor for any reason, simply change `-t falcon-sensor` to `-t falcon-sensor-regional` in your commands. No other changes to your scripts or workflows are required. ## Security recommendations @@ -196,8 +177,8 @@ The following sensor types are available to download: | Sensor Image Name | Description | | :---------------------------------- | :---------------------------------------------------- | -| `falcon-sensor` | The Falcon sensor for Linux as a DaemonSet deployment (unified format - version 7.31+) | -| `falcon-sensor-regional` | The Falcon sensor for Linux as a DaemonSet deployment w/ regions (traditional format) | +| `falcon-sensor` | The Falcon sensor for Linux as a DaemonSet deployment (unified - version 7.31+) | +| `falcon-sensor-regional` | The Falcon sensor for Linux as a DaemonSet deployment w/ regions (traditional) | | `falcon-container` **(default)** | The Falcon Container sensor for Linux | | `falcon-kac` | The Falcon Kubernetes Admission Controller | | `falcon-snapshot` | The Falcon Snapshot scanner | @@ -220,9 +201,9 @@ The following example will attempt to autodiscover the region and download the l --type falcon-kac ``` -#### Example getting the full image path for the Falcon DaemonSet sensor (unified format) +#### Example getting the full image path for the Falcon DaemonSet sensor (unified) -The following example will print the image repository path with the latest image tag of the Falcon DaemonSet sensor using the new unified format. +The following example will print the image repository path with the latest image tag of the Falcon DaemonSet sensor using the new unified sensor. ```shell ./falcon-container-sensor-pull.sh \ @@ -234,9 +215,9 @@ The following example will print the image repository path with the latest image Example output: `registry.crowdstrike.com/falcon-sensor/release/falcon-sensor:7.31.0-15501-1` -#### Example getting the full image path for the Falcon DaemonSet sensor (regional format) +#### Example getting the full image path for the Falcon DaemonSet sensor (regional) -The following example will print the image repository path with the latest image tag of the Falcon DaemonSet sensor using the traditional regional format. +The following example will print the image repository path with the latest image tag of the Falcon DaemonSet sensor using the traditional regional sensor. ```shell ./falcon-container-sensor-pull.sh \ @@ -248,9 +229,9 @@ The following example will print the image repository path with the latest image Example output: `registry.crowdstrike.com/falcon-sensor/us-1/release/falcon-sensor:7.29.0-15501-1.falcon-linux.Release.US-1` -#### Example downloading the Falcon DaemonSet sensor (unified format) +#### Example downloading the Falcon DaemonSet sensor (unified) -The following example will download the latest version of the Falcon DaemonSet sensor container image using the unified format and copy it to another registry. +The following example will download the latest version of the Falcon DaemonSet sensor container image using the unified sensor and copy it to another registry. ```shell ./falcon-container-sensor-pull.sh \ @@ -260,9 +241,9 @@ The following example will download the latest version of the Falcon DaemonSet s --copy myregistry.com/mynamespace ``` -#### Example downloading the Falcon DaemonSet sensor (regional format) +#### Example downloading the Falcon DaemonSet sensor (regional) -The following example will download the latest version of the Falcon DaemonSet sensor container image using the regional format and copy it to another registry. +The following example will download the latest version of the Falcon DaemonSet sensor container image using the regional sensor and copy it to another registry. ```shell ./falcon-container-sensor-pull.sh \