kubescape / node-agent

Kubescape eBPF agent 🥷🏻
https://kubescape.io/
Apache License 2.0
8 stars 6 forks source link

Improving eBPF support checks #341

Closed amitschendel closed 2 months ago

amitschendel commented 2 months ago

Overview

github-actions[bot] commented 2 months ago

Summary:

amitschendel commented 2 months ago

so instead of checking <5.4 we check <4.4 with BTF?

We are checking for BTF which is mandatory for our sensor and ig. Regarding the kernel version, checking 5.4 is because since 5.4 there is BTF/CO-RE but some kernels "lies" with their version so it's not valuable to check it. Since kernel 4.4 there is eBPF so we can check that just in case but again, it's not too much valuable but it's more for us to have more debugging information, this is why we don't exit on the error but log it.

What do you think? @matthyx

matthyx commented 2 months ago

Fine go ahead

github-actions[bot] commented 2 months ago

Summary: