Navin Chandra

Results 65 comments of Navin Chandra

@DelusionalOptimist I want to work on this issue, please assign me.

@DelusionalOptimist I have bpf as the lsm: ``` $ cat /sys/kernel/security/lsm lockdown,capability,landlock,yama,apparmor,bpf ``` I have tried KubeArmor in `systemd` mode and enforcement works, the only difference I see is that...

`containerd` runtime is currently not supported as mentioned in https://github.com/kubearmor/KubeArmor/issues/1426. Enforcement with `docker` runtime works. Commands: 1. `docker run -v /tmp/:/opt/kubearmor/BPF kubearmor/kubearmor-init:stable` 2. `docker run -v /tmp/:/opt/kubearmor/BPF -v /sys/fs/bpf:/sys/fs/bpf -v...

@DelusionalOptimist `kubearmor` fails to start with error: ``` kubearmor-1 | 2024-06-21 10:05:50.066540 INFO Node Name: kubearmor-1 | 2024-06-21 10:05:50.066545 INFO Node IP: kubearmor-1 | 2024-06-21 10:05:50.066550 INFO OS Image: kubearmor-1...

@VietND96 I would like to take this up and need some more info. Can you explain more about what type of cronjob needs to be added? Do we want a...

Hi @KazuCocoa, what else needs to be changed apart from removing inheritance of the `object`?

@anurag-rajawat @rootxrishabh does KubeArmor policy enforcement works in AppArmor mode in minikube? I tried to install via both `karmor` and helm, it gives the warning: `⚠️ KubeArmor is running in...

@daemon1024 Since `crio` is not officially supported by `microk8s` as per https://github.com/canonical/microk8s/issues/3549 , should I create a CI test for `containerd` only, I ran the [tests](https://github.com/navin772/KubeArmor/actions/runs/9264531328/job/25485329535) and they pass for...

The support for webExtensions in python bindings have landed via https://github.com/SeleniumHQ/selenium/pull/15749 and is available in release 4.33. Firefox and chromium based browsers can utilize this bidi module, but chrome/edge requires...

@kranurag7 regarding the 2 point, we need `gotip` in arm64 case only? Can you test this on an `arm` machine: ```bash # install golang echo "Installing golang binaries..." arch=$(uname -m)...