oci-seccomp-bpf-hook icon indicating copy to clipboard operation
oci-seccomp-bpf-hook copied to clipboard

OCI hook to trace syscalls and generate a seccomp profile

Results 13 oci-seccomp-bpf-hook issues
Sort by recently updated
recently updated
newest added

At bottom of [LICENSE](https://github.com/containers/oci-seccomp-bpf-hook/blob/main/LICENSE) is explained how to apply the Apache 2.0 license to some work. The following text should be enclosed in source files: ``` Copyright {yyyy} {name of...

If we utilize [libbpf](https://github.com/libbpf/libbpf), then we can produce a smaller binary which also runs faster and minimizes the runtime dependencies. The overall architecture of the hook could be simplified as...

bcc added two additional parameters to `bcc_func_load` which aren't passed here: ``` [ 141s] GO111MODULE=on go build -mod=vendor -mod=vendor -o bin/oci-seccomp-bpf-hook -ldflags "-X main.version=v1.2.6" github.com/containers/oci-seccomp-bpf-hook [ 141s] # github.com/iovisor/gobpf/bcc [...

```sh # podman run --rm --log-level=info --hooks-dir /usr/share/containers/oci/hooks.d --security-opt label=disable --annotation io.containers.trace-syscall='of:/tmp/foo.json' -it bash sh -c 'ls -al' INFO[0000] podman filtering at log level info INFO[0000] Found CNI network podman...

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Open These updates have all been created already. Click a checkbox below to...

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/containers/common](https://togithub.com/containers/common) | `v0.57.4` -> `v0.59.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcontainers%2fcommon/v0.59.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)...

dependencies

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/containers/storage](https://togithub.com/containers/storage) | `v1.52.0` -> `v1.54.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcontainers%2fstorage/v1.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)...

dependencies

Do you consider migrating to libbpf, https://github.com/cilium/ebpf and eBPF CO-RE to avoid compiling C programs to eBPF bytecode on the fly? Similarly to what Inspektor Gadget did and explained in...

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [containers/automation_images](https://togithub.com/containers/automation_images) | major | `20231116t174419z-f39f38d13` -> `20240513t140131z-f40f39d13` | --- ### Release Notes containers/automation_images...

dependencies

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/containers/common](https://togithub.com/containers/common) | `v0.59.0` -> `v0.59.1` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcontainers%2fcommon/v0.59.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)...

dependencies