Melissa Kilby
Melissa Kilby
Someone else brought that up a while ago, had started something here https://github.com/falcosecurity/falco/pull/2670/files maybe let's discuss? I can see a bit of a better cleanup even under the hood than...
My best bet is that there are issues with downloading and/or loading the kernel driver. Incidentally we just added more info to the following 2 repos, perhaps useful as well:...
Suggesting some Kubernetes deployment templates updates here https://github.com/falcosecurity/deploy-kubernetes/issues/95 re https://github.com/falcosecurity/falco/blob/master/docker/driver-loader/docker-entrypoint.sh Suggesting to add some preconditions checks, similar to this VM testing [dependency check script](https://github.com/falcosecurity/libs/blob/ee01ba2b66b06835924379a9359ce3ef4a9ddb9b/test/vm/scripts/dependency_check.sh). - For example if `--download` is...
When I started looking at https://fluxcd.io/flux/get-started/ for the CNCF TAG testing I really loved the `flux check --pre` -- could be interesting not just for the `driver-loader`, but also the...
See https://github.com/falcosecurity/cncf-green-review-testing/pull/6/files#r1441219090 seems we have a small regression.
On a different node for very recent kernels the driver-loader container doesn't seem to cut it anymore. For example a `6.6.7-200.fc39.x86_64` kernel that was compiled with gcc 13 complains about...
Re the discussion here https://github.com/falcosecurity/cncf-green-review-testing/pull/6#discussion_r1447012757 When using minikube I get these error messages: ``` root@falco-driver-ebpf-5f79f:/# /usr/bin/falcoctl driver config --type ebpf && /usr/bin/falcoctl driver install --compile=true --download=false 2024-01-10 05:53:06 INFO Running...
Understood @alacuku and @leogr that we don't support minikube in that way. Just for the records, it's still possible to actually build both eBPF and kmod even when running minikube...
More feedback -> Falco 0.38 dev cycle: @Andreagit97 @alacuku if we want to consider `modern_ebpf` as default, also for the helm chart, I believe we need to add `modern_ebpf` as...
Oh nice agreed @leogr and @FedeDP! Also nice that `falcoctl` already has everything in place and we just need minor adjustments to the container entrypoint 🚀 > Ideally, it would...