thought-machine / falco-probes

Automated build and mirror of eBPF kernel probes for use as a driver with the Falco runtime security agent (https://falco.org/)
Apache License 2.0
16 stars 4 forks source link

Fix kernel config download for older COS versions #58

Closed markchalloner closed 1 year ago

markchalloner commented 1 year ago

In older versions of COS, the config is found at x86_64_defconfig. This commit changes to kernel config download to attempt retrieval of the lakitu_defconfig file and if that produces a 404 fallback to the older file.

Of the errors in the build action this should fix errors like:

3:58PM ERR error encountered error="could not get kernel package 'cos-89-16108-403-11': could not get 2XX response for kernel config for build id 16108.403.11 (kernel commit c19d150c6bd658510ec786390aec80ad476c7578): 404 Not Found"

and may fix errors like:

3:58PM ERR error encountered error="could not build probe for 'cos-97-16919-103-51': could not build falco probe: non-zero exit-code (1) for: \n* Setting up /usr/src links from host\nFALCO_VERSION: 0.24.0\nDRIVER_NAME: falco\nDRIVER_VERSION: 85c88952b018fdbce2464222c3303229f5bfcfad\n* Running falco-driver-loader for: falco version=0.24.0, driver version=85c88952b018fdbce2464222c3303229f5bfcfad, arch=x86_64, kernel release=5.10.133, kernel version=1\n* Running falco-driver-loader with: driver=bpf, compile=yes, download=no\n* Mounting debugfs\nmount: /sys/kernel/debug: permission denied.\n* Filename 'falco_cos_5.10.133_1.o' is composed of:\n - driver name: falco\n - target identifier: cos\n - kernel release: 5.10.133\n - kernel version: 1\n* COS detected (build 16919.103.51), using COS kernel headers\nCannot find kernel config\n"

although will investigate further on the latter if not.