Run multiarch builds natively rather than via QEMU #1479
Closed
Commits on Jan 3, 2024
-
This change makes it so collector compiles and runs using upstream Falco directly. There are a few minor tweaks still required in Falco itself, but they are things that are either on their way to upstream or should be real ease to upstream. List of changes needed for vanilla to be compatible: - Remove sinsp-wrapper and link directly to sinsp. - Remove sinsp_filter_check_iface in favor of sinsp_filter_check. - Use MINIMAL_BUILD instead of MINIMAL_BUILD_WITH_EBPF. - Remove g_bpf_drop_syscalls. - eBPF probe is compiled directly instead of via cmake.
-
-
-
Add uthash submodule
-
-
Mounts /sys/kernel/debug directly
Fix locations for BTF symbols
-
-
Configure build process to enable socket only fd optimization
-
As an optimization, use only a certain subset of cgroup subsystems.
-
Skip some cgroups to avoid overhead
It could be expesinve to pass large cgroup names from the kernel to user space.
-
-
-
Needed to include the arm64 builder image
-
One side effect of [1] is that procexit is not included by default any more if ppm_sc is not empty. Which means to continue receiving procexit we need to explicitly add it into the list of interesting events. procexit is essential for memory management, as its handlers perform threadinfo cache clean up. [1]: falcosecurity/libs#1001
-
Turn on Falco assert logging for all build types. Make _DEBUG dependent on the Debug build type, it would impact asserts logic when asserts logging is disabled.
-
Fix exit code in the debug mode
If CMAKE_BUILD_TYPE is debug, the condition for stripping the binary is not invoked, and the resulting exit code is 1, stopping the build. Ignore this branch and return exit code 0.
-
-
This change makes it so collector compiles and runs using upstream Falco directly. There are a few minor tweaks still required in Falco itself, but they are things that are either on their way to upstream or should be real ease to upstream. List of changes needed for vanilla to be compatible: - Remove sinsp-wrapper and link directly to sinsp. - Remove sinsp_filter_check_iface in favor of sinsp_filter_check. - Use MINIMAL_BUILD instead of MINIMAL_BUILD_WITH_EBPF. - Remove g_bpf_drop_syscalls. - eBPF probe is compiled directly instead of via cmake.
-
Add uthash submodule
-
Add uthash submodule
-
-
Rename multiarch-integration-tests to s390x-integration-tests, for si…
…mplification and clarity
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
This change makes it so collector compiles and runs using upstream Falco directly. There are a few minor tweaks still required in Falco itself, but they are things that are either on their way to upstream or should be real ease to upstream. List of changes needed for vanilla to be compatible: - Remove sinsp-wrapper and link directly to sinsp. - Remove sinsp_filter_check_iface in favor of sinsp_filter_check. - Use MINIMAL_BUILD instead of MINIMAL_BUILD_WITH_EBPF. - Remove g_bpf_drop_syscalls. - eBPF probe is compiled directly instead of via cmake.
-
Add uthash submodule
-
Add uthash submodule
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.