[Feature Request] Fall back to eBPF if the current kernel is not supported

CrowdStrike / falcon-operator

https://artifacthub.io/packages/olm/falcon-operator/falcon-operator

Apache License 2.0

49 stars 37 forks source link

[Feature Request] Fall back to eBPF if the current kernel is not supported #517

Closed oleksiytsyban closed 8 months ago

oleksiytsyban commented 8 months ago

Is it possible to automatically switch to eBPF mode if the current kernel is not supported in kernel mode?

redhatrises commented 8 months ago

It is not. Containers aren't designed for switching processes while running. It would be best to use eBPF by default since we will be switching to that soon.