oci-seccomp-bpf-hook
oci-seccomp-bpf-hook copied to clipboard
OCI hook to trace syscalls and generate a seccomp profile
At bottom of [LICENSE](https://github.com/containers/oci-seccomp-bpf-hook/blob/main/LICENSE) is explained how to apply the Apache 2.0 license to some work. The following text should be enclosed in source files: ``` Copyright {yyyy} {name of...
If we utilize [libbpf](https://github.com/libbpf/libbpf), then we can produce a smaller binary which also runs faster and minimizes the runtime dependencies. The overall architecture of the hook could be simplified as...
bcc added two additional parameters to `bcc_func_load` which aren't passed here: ``` [ 141s] GO111MODULE=on go build -mod=vendor -mod=vendor -o bin/oci-seccomp-bpf-hook -ldflags "-X main.version=v1.2.6" github.com/containers/oci-seccomp-bpf-hook [ 141s] # github.com/iovisor/gobpf/bcc [...
```sh # podman run --rm --log-level=info --hooks-dir /usr/share/containers/oci/hooks.d --security-opt label=disable --annotation io.containers.trace-syscall='of:/tmp/foo.json' -it bash sh -c 'ls -al' INFO[0000] podman filtering at log level info INFO[0000] Found CNI network podman...
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Open These updates have all been created already. Click a checkbox below to...
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/containers/common](https://togithub.com/containers/common) | `v0.57.4` -> `v0.59.0` | [](https://docs.renovatebot.com/merge-confidence/)...
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/containers/storage](https://togithub.com/containers/storage) | `v1.52.0` -> `v1.54.0` | [](https://docs.renovatebot.com/merge-confidence/)...
Do you consider migrating to libbpf, https://github.com/cilium/ebpf and eBPF CO-RE to avoid compiling C programs to eBPF bytecode on the fly? Similarly to what Inspektor Gadget did and explained in...
[](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [containers/automation_images](https://togithub.com/containers/automation_images) | major | `20231116t174419z-f39f38d13` -> `20240513t140131z-f40f39d13` | --- ### Release Notes containers/automation_images...
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/containers/common](https://togithub.com/containers/common) | `v0.59.0` -> `v0.59.1` | [](https://docs.renovatebot.com/merge-confidence/)...