FROM python:3.12-slim WORKDIR /harvester RUN pip install --no-cache-dir pyyaml COPY harvester.py . # Default volume mounts expected at runtime: # /var/log → host /var/log (read-only) # /run/log/journal → host /run/log/journal (read-only) # /patterns → sources.yaml directory (read-only) ENV TURNSTONE_URL=http://turnstone:8534 ENV TURNSTONE_SOURCES=/patterns/sources.yaml ENTRYPOINT ["python", "harvester.py"] CMD ["push"]