rapidfort/oncall repository overview

⁠RapidFort hardened image for Grafana Oncall

RapidFort has optimized and hardened this Grafana Oncall container image. This container is free to use and has no license limitations.

This optimized image is functionally equivalent to Grafana Grafana Oncall⁠ image but more secure with a significantly smaller software attack surface.

Every day, RapidFort automatically optimizes and hardens a growing bank of Docker Hub’s most important container images.

Check out our entire library of secured container images.⁠

Get the full report here or click on the image below⁠

⁠What is Grafana Oncall?

Overview of Grafana Oncall⁠

Trademarks: This software listing is packaged by RapidFort. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.

⁠How do I use this hardened Grafana Oncall image?

The runtime instructions for this hardened container image are the same as the official release. Follow the instructions provided with the Grafana Grafana Oncall⁠.

#1. Download docker-compose.yaml:
curl -fsSL https://raw.githubusercontent.com/grafana/oncall/dev/docker-compose.yml -o docker-compose.yml

#2. Set variables:
echo "DOMAIN=http://localhost:8080
SECRET_KEY=my_random_secret_must_be_more_than_32_characters_long
RABBITMQ_PASSWORD=rabbitmq_secret_pw
MYSQL_PASSWORD=mysql_secret_pw
COMPOSE_PROFILES=with_grafana  # Remove this line if you want to use existing grafana
GRAFANA_USER=admin
GRAFANA_PASSWORD=admin" > .env_hobby

#3. Launch services:
docker-compose --env-file .env_hobby -f docker-compose.yml up --build -d

#4. Issue one-time invite token:
docker-compose --env-file .env_hobby -f docker-compose.yml run engine python manage.py issue_invite_for_the_frontend --override

#5. Go to [OnCall Plugin Configuration](http://localhost:3000/plugins/grafana-oncall-app), using log in credentials as defined above: `admin`/`admin` (or find OnCall plugin in configuration->plugins) and connect OnCall _plugin_ with OnCall _backend_:

Invite token: ^^^ from the previous step.
OnCall backend URL: http://engine:8080
Grafana Url: http://grafana:3000

#6. Enjoy! Check our [OSS docs](https://grafana.com/docs/grafana-cloud/oncall/open-source/) if you want to set up Slack, Telegram, Twilio or SMS/calls through Grafana Cloud.

⁠What is a hardened image?

A hardened container image is a functionally equivalent copy of a container image that has been optimized by removing unnecessary software components, significantly reducing its software attack surface and improving its security. Removing unnecessary software components is a critical practice to protect your infrastructure from attacks and limiting the blast radius of any attacks.

This image is a hardened version of the official Grafana Grafana Oncall⁠ image on Docker Hub.

Vulnerability reports for RapidFort's hardened images are updated daily to include newly discovered vulnerabilities and fixes.

⁠What’s the difference between the official Grafana Grafana Oncall⁠ image and this hardened image?

RapidFort’s hardened rapidfort/oncall⁠ image has been optimized by RapidFort's SASM platform and is functionally equivalent to the original image.

We are big fans of open-source software and secure software development. RapidFort's community images are our way of giving back to the community and helping reduce the burden on security and development teams.

⁠Supported tags and respective Dockerfile links

• v1.3.1, latest (engine/Dockerfile)⁠

⁠Need support

Join our slack community for any questions.

⁠🌟 Support this project

⁠⏫⭐️ Scroll to the star button⁠

If you find this project useful, please star this repo just like many amazing people⁠ have.

⁠Have questions?

Learn more about RapidFort's pioneering Software Attack Surface Management platform at RapidFort.com⁠.