Sysdig doesn't seem to capture read operations over container process #1 binary file

[mateobur]

Foe example, booting a new nginx container I don't get any file read operation over '/usr/sbin/nginx'

How to reproduce:

Start the capture using:

# sysdig -pc container.name != host -w nginxdump

A couple of seconds later I launch a new nginx cotainer:

# docker run -d -P nginx

The resulting capture doesn't contain any file read for '/usr/sbin/nginx', even though 'lsof' inside the container shows it.

[github-actions[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.