When using docker on Mac OS X, you may need to tweak Docker to use the aufs filesystem driver (to avoid issues unpacking tar files on overlayfs) Changing Filesystem Driver


MozDef consists of ~10 containers, so it’s encouraged to have at least 4GB of memory provided to the Docker daemon.

If you have MozDef source code downloaded locally, you can build the docker containers locally:

make build

If you want to use pre-built images that are on docker-hub:

make build BUILD_MODE=pull

Start MozDef:

make run

You’re done! Now go to:

If you want to stop MozDef:

make stop

To cleanup all of the existing docker resources used by MozDef:

make clean