Cannot run Neuvector on Talos due to missing "grep"

siderolabs / pkgs

Mozilla Public License 2.0

33 stars 108 forks source link

Cannot run Neuvector on Talos due to missing "grep" #620

Open ShaunMaher opened 1 year ago

ShaunMaher commented 1 year ago

Hi team.

What are the chances of having "grep", "pgrep" and "sed" added to the Talos Linux rootfs? Neuvector (security product bought by Suse) seems to need these to exist on the Kubernetes host for it's Enforcer process to run.

Related issue I have raised with Neuvector: https://github.com/neuvector/neuvector/issues/541

Cheers. Shaun.

smira commented 1 year ago

We try to avoid polluting rootfs with stuff, as the list never stops. Proper solution should ship with its own tools in the container filesystem.

You could still develop a system extension which has these tools overlaid on top of Talos rootfs.