Installing falcon image analyzer exec /bin/imageanalyzer: exec format error

[katie-rychlicki]

I'm trying to install the falcon image analyzer. When I try to use latest tag it says it does not exist so I pulled docker pull registry.crowdstrike.com/falcon-imageanalyzer/eu-1/release/falcon-imageanalyzer:1.0.21

When the container runs in k8s, the logs show exec /bin/imageanalyzer: exec format error

My k8s is using eks amazon/amazon-eks-node-al2023-x86_64-standard-1.32-v20251007

Any ideas?

[redhatrises]

Hello,

This is because the image analyzer is a multi-arch image and requires you to either copy the entire or image or pull only the architecture specific image. I would recommend using https://github.com/CrowdStrike/falcon-scripts/tree/main/bash/containers/falcon-container-sensor-pull to assist. IIRC, you can also use --platform linux/amd64 directly to pull the x86 specific image.

[katie-rychlicki]

perfect, thank you

[katie-rychlicki]

actually that platform doesnt exist per the script but you can use platform x86_64 directly