Mahé

`LoadPinned*` silently succeeds on objects of wrong type

3

I was writing something to parse objects from a `/sys/fs/bpf` fs and was expecting to receive an error when using `ebpf.LoadPinnedMap` on a prog and `ebpf.LoadPinnedProg` on a map. Instead,...

pkg/sensors: fix memory use of unloaded sensors

1

Fixes #3013 Sensors that are disabled are not loaded and should not use memory, thus we clear the LoadedMapsInfo on unloading programs.

Thanks to Anna for helping me see this issue. _Originally posted by @lambdanis in https://github.com/cilium/tetragon/pull/2984#discussion_r1803875560_

standalone-tarball-tests is flaky

1

See https://github.com/cilium/tetragon/actions/runs/11123370825/job/30906850837?pr=2955. Sometimes we see: ``` sudo tetra status sudo tetra tracingpolicy list | grep bpf - sudo tetra bugtool test $(stat -c %a /var/run/tetragon/tetragon.sock) -eq "[6](https://github.com/cilium/tetragon/actions/runs/11123370825/job/30906850837?pr=2955#step:10:6)60" sudo tetra tracingpolicy...

See https://github.com/cilium/tetragon/actions/runs/11140592974/job/30960129675?pr=296. [tetragon-vmtests-bpf-next-20240624.013140-0-results.zip](https://github.com/user-attachments/files/17231337/tetragon-vmtests-bpf-next-20240624.013140-0-results.zip)

🐛 pkg/crd: fix a missed type casting panic with new *types.Alias

3

Fixes #1076. This is a follow up on 0a52475258f0 ("pkg/crd: fix type casting panic with new default *types.Alias"). Look for the commit message of the cited commit for more context....

🐛 pkg/crd: support validation on type alias to basic types

3

Fixes #1071 Without the type Alias being its own type (Go 1.22 see gotypesalias), in localNamedToSchema, the link is missing. [ Upstream port of d944debcff34 ("Support type aliasing to basic...

validation on type alias is ignored when `GODEBUG=gotypealias=0` (Go < 1.23)

1

Here is how to repro: 1. Create a a repro directory `mkdir repro` and put `repro.go` inside of it with: ```golang // +groupName=repro.io package repro import ( metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" )...

missing zstd library when building statically on Ubuntu 24.04

4

When building bpftool statically on Ubuntu 24.04 (note that it works fine on 22.04), `-lzstd` must be added to `LIBS` and `BOOTSTRAP_LIBS`. See my "live patch" https://github.com/cilium/tetragon/pull/2777/commits/8e994cf0bc2ad2ccd88ba9a490913052a1b9a825. Would it make...

Add documentation for the official CVE feed

2

Fixes https://github.com/kubernetes/sig-security/issues/133