mirror of
https://github.com/falcosecurity/falco.git
synced 2025-08-02 06:52:10 +00:00
chore: remove http loader code
Co-Authored-By: Leonardo Di Donato <leodidonato@gmail.com> Signed-off-by: Lorenzo Fontana <lo@linux.com>
This commit is contained in:
Lorenzo Fontana
Leo Di Donato
parent
b49ade5627
commit
af27c2bea5
@ -1,60 +0,0 @@
|
||||
package main
|
||||
|
||||
import (
|
||||
"os"
|
||||
"log"
|
||||
"fmt"
|
||||
"github.com/falcosecurity/falco/pkg/falcoloader"
|
||||
)
|
||||
|
||||
// Default behavior: calculate kernel module and download from Falco hosted probe library
|
||||
// ENV FALCO_PROBE_URL = URL to download probe.ko file
|
||||
// ENV FALCO_PROBE_REPO = URL to download probe.ko, probe name derived from `uname -r`
|
||||
|
||||
func main() {
|
||||
falcoVersion := getEnv("FALCO_VERSION","0.17.0")
|
||||
falcoProbePath := getEnv("FALCO_PROBE_PATH","/")
|
||||
falcoProbeFile := getEnv("FALCO_PROBE_FILE","falco-probe.ko")
|
||||
falcoProbeFullpath := falcoProbePath + falcoProbeFile
|
||||
falcoProbeURL := getEnv("FALCO_PROBE_URL","")
|
||||
falcoProbeRepo := getEnv("FALCO_PROBE_REPO","https://s3.amazonaws.com/download.draios.com/stable/sysdig-probe-binaries/")
|
||||
falcoConfigHash, err := falcoloader.GetKernelConfigHash()
|
||||
if err != nil {
|
||||
log.Fatalf("Error getting Kernel Config Hash: %s", err)
|
||||
}
|
||||
falcoKernelRelease, err := falcoloader.GetKernelRelease()
|
||||
if err != nil {
|
||||
log.Fatalf("Error getting Kernel Version: %s", err)
|
||||
}
|
||||
log.Printf("FALCO_VERSION: %s", falcoVersion)
|
||||
log.Printf("FALCO_PROBE_URL: %s", falcoProbeURL)
|
||||
log.Printf("FALCO_PROBE_REPO: %s", falcoProbeRepo)
|
||||
log.Printf("KERNEL_VERSION: %s", falcoKernelRelease)
|
||||
log.Printf("KERNEL_CONFIG_HASH: %s", falcoConfigHash)
|
||||
|
||||
// if FALCO_PROBE_URL not set, build it
|
||||
if falcoProbeURL == "" {
|
||||
falcoProbeURL = fmt.Sprintf("%sfalco-probe-%s-x86_64-%s-%s.ko", falcoProbeRepo, falcoVersion, falcoKernelRelease, falcoConfigHash)
|
||||
}
|
||||
|
||||
// fetch module
|
||||
err = falcoloader.FetchModule(falcoProbeURL, falcoProbeFullpath)
|
||||
if err != nil {
|
||||
log.Fatalf("Error fetching module: %s", err)
|
||||
}
|
||||
|
||||
// load module
|
||||
// Need to implement removal of module, retry loop, and timeout
|
||||
err = falcoloader.LoadModule(falcoProbeFullpath)
|
||||
if err != nil {
|
||||
log.Fatalf("Error loading module: %s", err)
|
||||
}
|
||||
}
|
||||
|
||||
func getEnv(key, def string) string {
|
||||
value, ok := os.LookupEnv(key)
|
||||
if ok {
|
||||
return value
|
||||
}
|
||||
return def
|
||||
}
|
||||
12
go.mod
12
go.mod
@ -1,12 +0,0 @@
|
||||
module github.com/falcosecurity/falco
|
||||
|
||||
go 1.12
|
||||
|
||||
require (
|
||||
golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586 // indirect
|
||||
golang.org/x/lint v0.0.0-20190409202823-959b441ac422 // indirect
|
||||
golang.org/x/net v0.0.0-20190827160401-ba9fcec4b297 // indirect
|
||||
golang.org/x/sys v0.0.0-20190826190057-c7b8b68b1456
|
||||
golang.org/x/text v0.3.2 // indirect
|
||||
golang.org/x/tools v0.0.0-20190827205025-b29f5f60c37a // indirect
|
||||
)
|
||||
20
go.sum
20
go.sum
@ -1,20 +0,0 @@
|
||||
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
|
||||
golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
|
||||
golang.org/x/lint v0.0.0-20190409202823-959b441ac422 h1:QzoH/1pFpZguR8NrRHLcO6jKqfv2zpuSqZLgdm7ZmjI=
|
||||
golang.org/x/lint v0.0.0-20190409202823-959b441ac422/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
|
||||
golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
|
||||
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
|
||||
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
|
||||
golang.org/x/net v0.0.0-20190827160401-ba9fcec4b297/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
|
||||
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
|
||||
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
|
||||
golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
|
||||
golang.org/x/sys v0.0.0-20190826190057-c7b8b68b1456 h1:ng0gs1AKnRRuEMZoTLLlbOd+C17zUDepwGQBb/n+JVg=
|
||||
golang.org/x/sys v0.0.0-20190826190057-c7b8b68b1456/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
|
||||
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
|
||||
golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
|
||||
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
|
||||
golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
|
||||
golang.org/x/tools v0.0.0-20190827205025-b29f5f60c37a h1:0JEq5ZQ3TgsRlFmz4BcD+E6U6cOk4pOImCQSyIG59ZM=
|
||||
golang.org/x/tools v0.0.0-20190827205025-b29f5f60c37a/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
|
||||
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
|
||||
@ -1,142 +0,0 @@
|
||||
package falcoloader
|
||||
|
||||
import (
|
||||
"io"
|
||||
"os"
|
||||
"crypto/md5"
|
||||
"encoding/hex"
|
||||
"net/http"
|
||||
"golang.org/x/sys/unix"
|
||||
"log"
|
||||
"unsafe"
|
||||
"compress/gzip"
|
||||
"bytes"
|
||||
)
|
||||
|
||||
func GetKernelRelease() (release string, err error) {
|
||||
name := &unix.Utsname{}
|
||||
err = unix.Uname(name);
|
||||
if err != nil {
|
||||
return release, err
|
||||
}
|
||||
release = string(name.Release[:bytes.IndexByte(name.Release[:], 0)])
|
||||
return release, err
|
||||
}
|
||||
|
||||
func GetKernelConfigHash() (string, error){
|
||||
var hash string
|
||||
kernelConfigPath, err := getKernelConfigPath()
|
||||
if err != nil {
|
||||
return hash, err
|
||||
}
|
||||
hash, err = genKernelConfigHash(kernelConfigPath)
|
||||
if err != nil {
|
||||
return hash, err
|
||||
}
|
||||
return hash, err
|
||||
}
|
||||
|
||||
func getKernelConfigPath() (string, error) {
|
||||
var err error
|
||||
kernelConfigPath := ""
|
||||
|
||||
version, _ := GetKernelRelease()
|
||||
paths := []string{
|
||||
"/proc/config.gz",
|
||||
"/boot/config-" + version,
|
||||
"/host/boot/config-" + version,
|
||||
"/usr/lib/ostree-boot/config-" + version,
|
||||
"/usr/lib/ostree-boot/config-" + version,
|
||||
"/lib/modules/" + version + "/config" }
|
||||
|
||||
for _, path := range paths {
|
||||
_, err := os.Stat(path)
|
||||
if err != nil {
|
||||
continue;
|
||||
}
|
||||
return path, err
|
||||
}
|
||||
return kernelConfigPath, err
|
||||
}
|
||||
|
||||
func genKernelConfigHash(path string) (string, error) {
|
||||
var md5hash string
|
||||
var err error
|
||||
|
||||
file, err := os.Open(path)
|
||||
if err != nil {
|
||||
return md5hash, err
|
||||
}
|
||||
defer file.Close()
|
||||
|
||||
fileBuf := bytes.NewBuffer(nil)
|
||||
io.Copy(fileBuf, file)
|
||||
|
||||
filetype := http.DetectContentType(fileBuf.Bytes())
|
||||
|
||||
if filetype == "application/x-gzip" {
|
||||
gzipFile, err := gzip.NewReader(fileBuf)
|
||||
if err != nil {
|
||||
return md5hash, err
|
||||
}
|
||||
defer gzipFile.Close()
|
||||
fileBuf = bytes.NewBuffer(nil)
|
||||
io.Copy(fileBuf, gzipFile)
|
||||
}
|
||||
|
||||
hash := md5.New()
|
||||
if _, err := io.Copy(hash, fileBuf); err != nil {
|
||||
return md5hash, err
|
||||
}
|
||||
|
||||
return hex.EncodeToString(hash.Sum(nil)), nil
|
||||
}
|
||||
|
||||
func FetchModule(url string, path string) error {
|
||||
log.Printf("Downloading kernel module from %s", url)
|
||||
resp, err := http.Get(url)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
defer resp.Body.Close()
|
||||
log.Printf("Recevied HTTP Status Code: %d", resp.StatusCode)
|
||||
if resp.StatusCode == http.StatusOK {
|
||||
out, err := os.Create(path)
|
||||
if err != nil {
|
||||
log.Printf("Error creating file: %s", path)
|
||||
return err
|
||||
}
|
||||
defer out.Close()
|
||||
|
||||
_, err = io.Copy(out, resp.Body)
|
||||
if err != nil {
|
||||
log.Printf("Unable to write file: %s", path)
|
||||
return err
|
||||
}
|
||||
log.Printf("Wrote kernel module: %s", path)
|
||||
} else {
|
||||
log.Printf("Non-200 Status code received %d", resp.StatusCode)
|
||||
}
|
||||
return err
|
||||
|
||||
}
|
||||
|
||||
func LoadModule(path string) error {
|
||||
|
||||
file, err := os.Open(path)
|
||||
if err != nil {
|
||||
log.Printf("Error opening kernel module: %s", path)
|
||||
return err
|
||||
}
|
||||
|
||||
log.Printf("Opened probe: ", path)
|
||||
|
||||
p0, err := unix.BytePtrFromString("")
|
||||
|
||||
if _, _, err := unix.Syscall(313, file.Fd(), uintptr(unsafe.Pointer(p0)), 0); err != 0 {
|
||||
log.Printf("Error loading kernel module: %s. The module may already be loaded.", path)
|
||||
return err
|
||||
}
|
||||
|
||||
return err
|
||||
}
|
||||
Loading…
Reference in New Issue
Block a user