Note: There is no official Docker image for chkrootkit. However, community-maintained images are available.
Since chkrootkit is a simple shell script and C binary, you can use community images or build your own:
# Example community image (verify before use)
docker run --rm -v /:/host:ro robbertblok/chkrootkit:latest
Create a Dockerfile:
FROM alpine:latest
RUN apk add --no-cache chkrootkit
ENTRYPOINT ["chkrootkit"]
Build and run:
docker build -t chkrootkit .
docker run --rm -v /:/host:ro chkrootkit -q
For rootkit detection, installing directly on the host system is recommended:
# Debian/Ubuntu
sudo apt install chkrootkit
# RHEL/CentOS/Fedora
sudo dnf install chkrootkit
See chkrootkit Setup for installation instructions.