github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-05-16 11:50:20 +00:00
Code Issues Projects Releases Wiki Activity
4,872 Commits 116 Branches 166 Tags 103 MiB
master
Commit Graph

248 Commits

Author SHA1 Message Date
Federico Di Pierro
cd81c52dde chore(docker,scripts): moved scripts/falco to config/ folder. 
Updated dockerignore to point to whole config folder.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2025-02-12 18:13:06 +01:00
Federico Di Pierro
050431425f cleanup(scripts): drop unmaintained and useless script. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2025-02-12 18:13:06 +01:00
Federico Di Pierro
3d70a2cbd0 new(docker,scripts,ci): use an override config file to enable ISO 8601 output timeformat on docker images. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2025-02-12 18:13:06 +01:00
Poiana
50b98b30e5 chore(falco): apply code formatting 
Signed-off-by: Poiana <poiana.bot@gmail.com>
 2024-09-30 13:25:31 +02:00
Leonardo Di Giovanna
d66c4ceb23 update(systemd): add falco.service alias to all systemd units 
Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
 2024-09-18 15:44:53 +02:00
Luca Guerra
b5461e11a7 new(ci): sign .tar.gz packages 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2024-05-17 10:17:56 +02:00
Federico Di Pierro
bdcfbba90b chore(docker,scripts): set old eBPF probe as lowest priority driver. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-04-18 11:18:54 +02:00
Federico Di Pierro
ac61543276 fix(docker,scripts): do not load falcoctl driver loader when installing Falco deb package in docker image. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-04-15 17:22:44 +02:00
Federico Di Pierro
7cc57a9fa0 docs(scripts): leave a small comment. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-04-15 15:13:44 +02:00
Federico Di Pierro
2ede48ccfc chore(scripts): updated debian and rpm post installation scripts to deal with new automatic driver selection as default behavior. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-04-15 15:13:44 +02:00
Federico Di Pierro
53d13f8bfc chore(scripts): dynamically set falcoctl allowed driver types based on cmake configuration. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-04-15 15:13:44 +02:00
Federico Di Pierro
2eb519380a update(cmake,scripts): bumped falcoctl to v0.8.0-rc1. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2024-04-15 15:13:44 +02:00
Aldo Lacuku
185075bfd8 update(scrips/falcoctl): bump falco-rules version to 3 
Signed-off-by: Aldo Lacuku <aldo@lacuku.eu>
 2024-03-06 07:35:54 +01:00
Luca Guerra
d69f329b54 fix(ci): update sync in deb and rpm scripts with acl 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2024-02-09 10:33:04 +01:00
Luca Guerra
b091522398 new(build): prune deb-dev and rpm-dev directories 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2024-02-07 16:46:57 +01:00
RohithRaju
195116fa09 update(scripts): address review requests 
Signed-off-by: RohithRaju <rohithraju488@gmail.com>
 2024-02-07 14:31:57 +01:00
RohithRaju
1b9c2da601 update(CI): publish wasm package as dev-wasm 
Signed-off-by: RohithRaju <rohithraju488@gmail.com>
 2024-02-07 14:31:57 +01:00
Federico Di Pierro
96f50ddac5 chore(scripts): integrate back master changes FALCO_DRIVER_CHOICE and FALCOCTL_ENABLED . 
Also, env variables always have precedence over dialog (ie: if they are set, we always skip dialog).

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-11 16:37:39 +01:00
Federico Di Pierro
ade27c2546 chore(scripts): use new default value for falcoctl driver.host-root config key. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-11 16:37:39 +01:00
Federico Di Pierro
1dd47668dd chore(scripts): only configure falcoctl driver type when a driver is selected. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-11 16:37:39 +01:00
Federico Di Pierro
33451cf0bc fix(scripts): fixed driver names for new falcoctl/Falco naming. 
But keep old systemd units names to avoid a breaking change.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-11 16:37:39 +01:00
Federico Di Pierro
27161bb508 chore(scripts/systemd): properly make use of new config keys in systemd units. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-11 16:37:39 +01:00
Federico Di Pierro
be100f7ad5 new(docker,scripts): dropped falco-driver-loader in favor of new falcoctl driver command. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-12-11 16:37:39 +01:00
Vicente J. Jiménez Miras
13991f1ea7 Add use of FALCO_DRIVER_CHOICE and FALCOCTL_ENABLED env vars 
Signed-off-by: Vicente J. Jiménez Miras <vjjmiras@gmail.com>
 2023-12-06 10:13:25 +01:00
Leonardo Grasso
fe50ac22ee update: add SPDX license identifier 
See https://github.com/falcosecurity/evolution/issues/318

Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-09-21 13:21:47 +02:00
hjenkins
63ba15962b fix(scripts): falco-driver-loader add print env 
Fixes #2352

Needed to refactor the target_id code paths to allow this to be used in
env printing and sourcing.

Signed-off-by: hjenkins <henry@henryjenkins.name>
 2023-08-31 12:10:28 +02:00
jabdr
66841d8009 Support reload in falco-modern-bpf.service 
Signed-off-by: jabdr <jd@q321.de>
 2023-08-30 15:28:26 +02:00
jabdr
43ae8b0cac Support reload in falco-custom.service 
Signed-off-by: jabdr <jd@q321.de>
 2023-08-30 15:28:26 +02:00
jabdr
9a5f625d5f Support reload in falco-bpf.service 
Signed-off-by: jabdr <jd@q321.de>
 2023-08-30 15:28:26 +02:00
jabdr
799c09e638 Support reload in falco-kmod.service 
Signed-off-by: jabdr <jd@q321.de>
 2023-08-30 15:28:26 +02:00
Andrea Terzolo
ba1528e3c2 cleanup: remove unused --pidfile option 
Signed-off-by: Andrea Terzolo <andreaterzolo3@gmail.com>
 2023-08-28 17:06:19 +02:00
Jason Dellaluce
527c42c030 chore: polish conditional compilation flags for emscripten 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-08-24 10:30:40 +02:00
Jason Dellaluce
0faa45669b update(build): setup cpack for emscripten build 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
Co-authored-by: Rohith Raju <rohithraju488@gmail.com>
 2023-08-24 10:30:40 +02:00
Johanan Liebermann
e7c5139563 Allow specifying kernel release and version 
Signed-off-by: Johanan Liebermann <jliebermann@microsoft.com>
 2023-08-24 09:17:39 +02:00
Johanan Liebermann
f4c8833a0e Relocate tools on Flatcar in BPF mode 
In https://github.com/falcosecurity/falco/pull/2043 we've added logic
for relocating tools on Flatcar when running falco-driver-loader in kmod
mode. This logic is relevant for BPF mode, too, which is currently
broken on Flatcar. Call flatcar_relocate_tools in BPF mode, too.

Signed-off-by: Johanan Liebermann <jliebermann@microsoft.com>
 2023-08-21 10:48:20 +02:00
Federico Di Pierro
fbcb971751 fix(scripts): fix falco-driver-loader for debian. 
Support debian `rt` and `cloud` flavors.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-06-23 16:14:59 +02:00
Roberto Scolaro
c2af4c3a21 fix(scripts/falco-driver-loader): fixed ubuntu kernel version 
Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>
 2023-06-22 15:17:55 +02:00
Federico Di Pierro
577bccabd0 new(scripts): updated falco-driver-loader to properly support talos. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-05-16 16:49:55 +02:00
jabdr
f25c057ce8 Remove MAKEWRAPPER var 
Signed-off-by: jabdr <jd@q321.de>
 2023-05-04 13:14:32 +02:00
jabdr
e1492ae9df Use TMPDIR for falco-driver-loader 
Signed-off-by: jabdr <jd@q321.de>
 2023-05-04 13:14:32 +02:00
jabdr
b83b1e2578 falco-driver-loader add TMPDIR support 
Closes 2517
Make wrapper now uses $TMPDIR if set.

Signed-off-by: jabdr <jd@q321.de>
 2023-05-04 13:14:32 +02:00
Federico Di Pierro
53c9f3a743 fix(scripts): fix falco-driver-loader for some debian kernels. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 11:46:14 +02:00
Federico Di Pierro
0d73f9624d update(scripts): updated falco-driver-loader to support al2022 and al2023. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-14 20:00:08 +02:00
Lorenzo Susini
de63a36ead update: add allowed types to falcoctl artifact follow service 
Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>
 2023-02-06 20:05:27 +01:00
Federico Di Pierro
dcaf24164f fix(scripts): force rpm postinstall script to always show dialog, even on upgrade. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-02-03 18:09:20 +01:00
Federico Di Pierro
89b54555d4 fix(scripts): fixed falcoctl config install dir. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-02-02 18:19:16 +01:00
Roberto Scolaro
3cba495e62 fix(scripts): add retrocompatibility to make /usr/share/falco writable 
Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>
 2023-02-02 17:59:16 +01:00
Roberto Scolaro
ab8ab8fbd0 fix(scripts): make /usr/share/falco writable 
Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>
 2023-02-02 17:59:16 +01:00
Andrea Terzolo
7ebf4b8dff fix(scripts): revert part of 7a794b70a71896a3eb1971ca66cc0c19b9a104e6 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-31 14:48:05 +01:00
Andrea Terzolo
d8fc259309 cleanup: improve falcoctl yaml readability 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
Co-authored-by: Aldo Lacuku <aldo@lacuku.eu>
 2023-01-30 17:20:02 +01:00