search

kubearmor / KubeArmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).
https://kubearmor.io/
Apache License 2.0
1.5k stars 345 forks source link

Publish a debug image with reach stable/latest release. #1059

Open achrefbensaad opened 1 year ago

achrefbensaad commented 1 year ago

Feature Request

Short Description

We want to have a debuggable release (pprof enabled) along side the nomal release.

Describe the solution you'd like

We would like to enable pprof conditionally when compiling KubeArmor binary. e.g: ENABLE_PPROF=true make run to enable pprof and run KubeArmor.

We also would like to push for each release(stable or latest) a second image with pprof enabled. The image should be named as follow: <version/state>-debug eg: latest-debug stable-debug v0.8-debug

MdSahil-oss commented 1 year ago

@achrefbensaad I would like to work on this.

achrefbensaad commented 1 year ago

Sure.

MdSahil-oss commented 1 year ago

@achrefbensaad is there kubeArmor using pprof? I don't see any usage of pprofin this repository. If so, Please show me the path so that I can proceed further with this issue.

achrefbensaad commented 1 year ago

Hi @MdSahil-oss , we dont have pprof implemented in this repository. We would like to implement it.

MdSahil-oss commented 1 year ago

Thanks @achrefbensaad for the confirmation, I would like to implement it but first let me know, How would it be implemented as a server or something else.

MdSahil-oss commented 1 year ago

@achrefbensaad As I can see previously pprof was available in this repo as web server by the commit. if pprof has to be added as server then I can take refrence of this commit

achrefbensaad commented 1 year ago

@MdSahil-oss , yes we can use that commit as a base and extend it to expose the following functions on these API's