When using docker on Mac OS X, you may need to tweak Docker to use the aufs filesystem driver (to avoid issues unpacking tar files on overlayfs) Changing Filesystem Driver
MozDef consists of ~10 containers, so it’s encouraged to have at least 4GB of memory provided to the Docker daemon.
If you have MozDef source code downloaded locally, you can build the docker containers locally:
If you want to use pre-built images that are on docker-hub:
make build BUILD_MODE=pull
You’re done! Now go to:
If you want to stop MozDef:
To cleanup all of the existing docker resources used by MozDef: