Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add the --prefix option to scope daemon #1381

Open
michalbiesek opened this issue Mar 14, 2023 · 1 comment
Open

Add the --prefix option to scope daemon #1381

michalbiesek opened this issue Mar 14, 2023 · 1 comment
Labels
cli enhancement New feature or request

Comments

@michalbiesek
Copy link
Contributor

michalbiesek commented Mar 14, 2023

Related to #1361.

This will allow to use daemon in following environment:

  • in k8s scope daemon can be used as a container in separate pod with proper privileges related to Ebpf code:
  • privileges
  • mountPath /sys/kernel/debug
    This is sufficient to handle snapshot file but to retrieve the files generated by the library from other containers/pods we need to have access to /proc view from host.

There is the comment in the code which describes this issue:

// If process is in a parallel container or a host above (i.e. in an above / parallel namespace) // proc/pid not visible unless hostfs
// (pid provided must be of the hosts perspective)
// (requires --privileged flag? or mounted hostfs?)
// get crash files - use /proc/pid/root or --getfiles
// get hostname file - use /proc/pid/root or --getfiles
// generate snapshot - call gensnapshot
// get process username,environ - from /proc using --getfiles
// Unsupported at this time.

@michalbiesek michalbiesek added enhancement New feature or request cli labels Mar 14, 2023
@michalbiesek
Copy link
Contributor Author

The second thing besides above is after discussion with @jrcheli is when run scope k8s we should ensure that scope daemon should run in every node - this thing can be done I think via https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cli enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant