github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-28 07:37:32 +00:00
Code Issues Projects Releases Wiki Activity

feat(scripts): --clean option for falco-driver-loader

Browse Source 
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
This commit is contained in:
Leonardo Grasso 2020-11-17 17:33:41 +01:00 committed by poiana
parent 645f51b296
commit fb126cb730
1 changed files with 75 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

65
scripts/falco-driver-loader
View File

@ -266,6 +266,48 @@ load_kernel_module() {
fi fi
} }
clean_kernel_module() {
if ! hash lsmod > /dev/null 2>&1; then
>&2 echo "This program requires lsmod"
exit 1
fi
if ! hash rmmod > /dev/null 2>&1; then
>&2 echo "This program requires rmmod"
exit 1
fi
KMOD_NAME=$(echo "${DRIVER_NAME}" | tr "-" "_")
if lsmod | cut -d' ' -f1 | grep -qx "${KMOD_NAME}"; then
if rmmod "${DRIVER_NAME}" 2>/dev/null; then
echo "* Unloading ${DRIVER_NAME} module succeeded"
else
echo "* Unloading ${DRIVER_NAME} module failed"
fi
else
echo "* No ${DRIVER_NAME} module loaded"
fi
if ! hash dkms &>/dev/null; then
echo "* Skipping dkms remove (dkms not found)"
return
fi
DRIVER_VERSIONS=$(dkms status -m "${DRIVER_NAME}" | cut -d',' -f2 | sed -e 's/^[[:space:]]*//')
if [ -z "${DRIVER_VERSIONS}" ]; then
echo "* No ${DRIVER_NAME} module found in dkms"
return
fi
for CURRENT_VER in ${DRIVER_VERSIONS}; do
if dkms remove -m "${DRIVER_NAME}" -v "${CURRENT_VER}" --all 2>/dev/null; then
echo "* Removing ${DRIVER_NAME}/${CURRENT_VER} succeeded"
else
echo "* Removing ${DRIVER_NAME}/${CURRENT_VER} failed"
exit 1
fi
done
}
load_bpf_probe_compile() { load_bpf_probe_compile() {
local BPF_KERNEL_SOURCES_URL="" local BPF_KERNEL_SOURCES_URL=""
local STRIP_COMPONENTS=1 local STRIP_COMPONENTS=1
@ -463,6 +505,7 @@ print_usage() {
echo "" echo ""
echo "Options:" echo "Options:"
echo " --help show brief help" echo " --help show brief help"
echo " --clean try to remove an already present driver installation"
echo " --compile try to compile the driver locally" echo " --compile try to compile the driver locally"
echo " --download try to download a prebuilt driver" echo " --download try to download a prebuilt driver"
echo " --source-only skip execution and allow sourcing in another script" echo " --source-only skip execution and allow sourcing in another script"
@ -505,6 +548,7 @@ fi
ENABLE_COMPILE= ENABLE_COMPILE=
ENABLE_DOWNLOAD= ENABLE_DOWNLOAD=
clean=
has_args= has_args=
has_opts= has_opts=
source_only= source_only=
@ -525,6 +569,10 @@ while test $# -gt 0; do
print_usage print_usage
exit 0 exit 0
;; ;;
--clean)
clean="true"
shift
;;
--compile) --compile)
ENABLE_COMPILE="yes" ENABLE_COMPILE="yes"
has_opts="true" has_opts="true"
@ -563,6 +611,22 @@ if [ -z "$source_only" ]; then
exit 1 exit 1
fi fi
if [ -n "$clean" ]; then
if ! [ -z "$has_opt"]; then
>&2 echo "Cannot use --clean with other options"
exit 1
fi
echo "* Running falco-driver-loader with: driver=$DRIVER, clean=yes"
case $DRIVER in
module)
clean_kernel_module
;;
bpf)
>&2 echo "--clean not supported for driver=$DRIVER"
exit 1
esac
else
if ! hash curl > /dev/null 2>&1; then if ! hash curl > /dev/null 2>&1; then
>&2 echo "This program requires curl" >&2 echo "This program requires curl"
exit 1 exit 1
@ -577,6 +641,7 @@ if [ -z "$source_only" ]; then
load_bpf_probe load_bpf_probe
;; ;;
esac esac
fi
fi fi
echo "* Running falco-driver-loader for: falco version=${FALCO_VERSION}, driver version=${DRIVER_VERSION}" echo "* Running falco-driver-loader for: falco version=${FALCO_VERSION}, driver version=${DRIVER_VERSION}"