Grzegorz Nosek
Grzegorz Nosek
> Not sure how to pass the rust 1.56.1 check, if someone could help with that One way to do this is to use a different feature name so that...
@incertum, > For example making requests directly against the podman socket instead? That's going to be a major effort but we'll probably have to bite the bullet at some point.
@incertum, I can assure you, podman is not one of the less used ones ;) We do require extra hoops with the Docker API socket but it's definitely used out...
Seems like this one and #2821 are intertwined :) @mrgian, please take a look at my comment https://github.com/falcosecurity/libs/pull/1969#discussion_r1687589774 for some ideas about the future direction of libscap/libsinsp and scap_platform. IMO,...
/approve pretty please?
> the low level libscap library is not really thought to be used in the wild Exactly :) This goes double for scap_platform :) > Or a least document that...
Taking a step back: okay, we can't handle $MILLIONS evt/sec right now, but why exactly? Is the bottleneck in scap_next (and dropping the enter events will help a lot) or...
What I'm concerned about is having to look up the event schema before we even know if the event is successful or not. Maybe it's not a real issue, idk...
> Just a suggestion on the dev workflow here, I wouldn't use a single branch with all the changes, that will be a nightmare to review. I suggest you have...
cc @jasondellaluce @Andreagit97