search

genuinetools / bpfd

Framework for running BPF programs with rules on Linux as a daemon. Container aware.
MIT License
472 stars 39 forks source link

Docker Detection Easily Broken #16

Open sargun opened 5 years ago

sargun commented 5 years ago

It appears like Docker detection happens by inspecting /proc/1/cgroup. If the cgroup paths themselves don't include "docker", then the detection fails. This happens if the user decides to control / configure the cgroup path.

I think there may be a couple other heuristics that we can use. Some other options:

Silvanoc commented 3 years ago

Please read https://github.com/GoogleContainerTools/kaniko/pull/1686#issuecomment-909399071. The proposed and implemented heuristic has its issues... Just a heads-up.