cilium / tetragon

eBPF-based Security Observability and Runtime Enforcement
https://tetragon.io
Apache License 2.0
3.66k stars 369 forks source link

rthooks: Fix rootDir in createRuntime hook #3057

Closed tpapagian closed 3 weeks ago

tpapagian commented 3 weeks ago

When using the createContainer hook in containerd or cri-o the rootDir points to the root directory of the container that is created.

In the case where we use the createRuntime hook in containerd the roodDir points to the location of the config.json file which is not the same as the container root directory. In order to fix that, we need to append the Root.Path from the spec.