Extend existing sinsp-example based tests

erthalion commented 1 year ago

Falco library features two sets of tests for probes:

e2e tests based on sinsp-example. They allow to simulate a variety of low-level events relatively easy, don't support modern probes directly.
drivers test suite. More basic unit-tests following the strategy "fire a syscall and verify what the driver has captured", supports modern probes as well.

Figure out of those two cover the functionality of modern probes good enough, and if not, extend to improve that and include into the testing pipeline.

Part of #1008

Molter73 commented 1 year ago

I'll start working on adding the modern probe to the e2e tests now, it's been in my todo list for far too long.

The drivers test suite was born as a way to test the modern probe, so AFAIK, it should have 100% coverage (or close to it) for the features implemented in it. I'll take a look and make sure it does though.

Molter73 commented 1 year ago

I've created a PR upstream to run the e2e tests with the modern probe: https://github.com/falcosecurity/libs/pull/967

stackrox / collector

Extend existing sinsp-example based tests #1043