Federico Di Pierro
Federico Di Pierro
/remove-lifecycle rotten
Since nobody asked for this from the community, we can close this one. /close Feel free to reopen if needed.
+1 from me! Welcome!!
Note: i am still trying to understand how to test these changes; i am currently building all images and pushing them under my own dockerhub account; then i might switch...
/remove-lifecycle stale Sorry i still hadn't a chance to test this.
/remove-lifecycle rotten
/milestone TBD
Hi! Thanks for opening this issue! What's happening is that every now and then, we drop the cache for the loaded users and groups: https://github.com/falcosecurity/libs/blob/master/userspace/libsinsp/sinsp.cpp#L1404; note the implementation of [clean_host_users_groups](https://github.com/falcosecurity/libs/blob/master/userspace/libsinsp/user.cpp#L175)...
I will give that codepath a review, and report back!