Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Start building standalone falco kernel modules. #789

Merged
merged 2 commits into from
Mar 24, 2017
Merged

Start building standalone falco kernel modules. #789

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
7ad04bd
Start building standalone falco kernel modules.
mstemm Mar 20, 2017
bf77b92
Add autoconf for falco builds.
mstemm Mar 23, 2017
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions scripts/Dockerfile.ol6
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@ RUN yum -y install \
git \
gcc \
gcc-c++ \
autoconf \
make \
cmake \
libdtrace-ctf \
Expand Down
1 change: 1 addition & 0 deletions scripts/Dockerfile.ol7
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@ RUN yum -y install \
git \
gcc \
gcc-c++ \
autoconf \
make \
cmake \
libdtrace-ctf \
Expand Down
119 changes: 39 additions & 80 deletions scripts/build-probe-binaries
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,106 +29,65 @@ if [ ! -d $BASEDIR/output ]; then
mkdir $BASEDIR/output
fi

function build_probe {
if [ "$PROBE_NAME" = "sysdig-probe" ]; then
build_sysdig
elif [ "$PROBE_NAME" = "sysdigcloud-probe" ]; then
build_sysdigcloud
else
exit 1
fi
}

function build_sysdig {

if [ ! -f $BASEDIR/output/$PROBE_NAME-$PROBE_VERSION-$ARCH-$KERNEL_RELEASE-$HASH.ko ] || [ ! -f $BASEDIR/output/$PROBE_NAME-$PROBE_VERSION-$ARCH-$KERNEL_RELEASE-$HASH_ORIG.ko ]; then

echo Building $PROBE_NAME-$PROBE_VERSION-$ARCH-$KERNEL_RELEASE-$HASH.ko [${FUNCNAME[1]}]

if [ ! -d sysdig ]; then
git clone git@github.com:draios/sysdig.git
fi
if [ $PROBE_NAME = "sysdigcloud-probe" ]; then
PROBE_REPO_NAME="agent"
else
PROBE_REPO_NAME=$(echo $PROBE_NAME | cut -f1 -d-)
fi

cd sysdig
git checkout master
# The UEK builder container doesn't have git credentials
# It relies on the non-UEK builds doing the pull earlier
if [[ ! "$KERNEL_TYPE" =~ "UEK" ]]; then
git pull
fi
git checkout $PROBE_VERSION
make -C driver clean || true
rm -rf build || true
mkdir build
cd build
cmake -DCMAKE_BUILD_TYPE=Release -DSYSDIG_VERSION=$PROBE_VERSION ..
make driver
strip -g driver/$PROBE_NAME.ko
function update_code_for {
repo=$1
if [ ! -d $repo ]; then
git clone git@github.com:draios/$repo.git
fi

KO_VERSION=$(/sbin/modinfo driver/$PROBE_NAME.ko | grep vermagic | tr -s " " | cut -d " " -f 2)
if [ "$KO_VERSION" != "$KERNEL_RELEASE" ]; then
echo "Corrupted probe, KO_VERSION " $KO_VERSION ", KERNEL_RELEASE " $KERNEL_RELEASE
exit 1
fi
cd $repo
git checkout master
# The UEK builder container doesn't have git credentials
# It relies on the non-UEK builds doing the pull earlier
if [[ ! "$KERNEL_TYPE" =~ "UEK" ]]; then
git pull
fi

cp driver/$PROBE_NAME.ko $BASEDIR/output/$PROBE_NAME-$PROBE_VERSION-$ARCH-$KERNEL_RELEASE-$HASH.ko
cp driver/$PROBE_NAME.ko $BASEDIR/output/$PROBE_NAME-$PROBE_VERSION-$ARCH-$KERNEL_RELEASE-$HASH_ORIG.ko
if [ $PROBE_REPO_NAME = $repo ]; then
git checkout $PROBE_VERSION
else
echo Skipping $PROBE_NAME-$PROBE_VERSION-$ARCH-$KERNEL_RELEASE-$HASH.ko \(already built\)
git checkout $PROBE_REPO_NAME/$PROBE_VERSION
fi

cd $BASEDIR
# Remove everything other than the files actually belonging to
# the repo.
git clean -d -f -x

# Reset the state of the files belonging to the repo to the
# state associated with the tag.
git reset --hard

cd ..
}

function build_sysdigcloud {
function build_probe {

if [ ! -f $BASEDIR/output/$PROBE_NAME-$PROBE_VERSION-$ARCH-$KERNEL_RELEASE-$HASH.ko ] || [ ! -f $BASEDIR/output/$PROBE_NAME-$PROBE_VERSION-$ARCH-$KERNEL_RELEASE-$HASH_ORIG.ko ]; then

echo Building $PROBE_NAME-$PROBE_VERSION-$ARCH-$KERNEL_RELEASE-$HASH.ko [${FUNCNAME[1]}]

if [ ! -d sysdig ]; then
git clone git@github.com:draios/sysdig.git
fi

if [ ! -d falco ]; then
git clone git@github.com:draios/falco.git
fi
update_code_for sysdig

if [ ! -d agent ]; then
git clone git@github.com:draios/agent.git
if [ $PROBE_NAME != "sysdig-probe" ]; then
update_code_for falco
fi

cd sysdig
git checkout master
# The UEK builder container doesn't have git credentials
# It relies on the non-UEK builds doing the pull earlier
if [[ ! "$KERNEL_TYPE" =~ "UEK" ]]; then
git pull
if [ $PROBE_NAME = "sysdigcloud-probe" ]; then
update_code_for agent
fi
git checkout agent/$PROBE_VERSION
make -C driver clean || true
rm -rf build || true
cd ..

cd falco
git checkout master
if [[ ! "$KERNEL_TYPE" =~ "UEK" ]]; then
git pull
fi
git checkout agent/$PROBE_VERSION
rm -fr build || true
cd ..

cd agent
git checkout master
if [[ ! "$KERNEL_TYPE" =~ "UEK" ]]; then
git pull
fi
git checkout $PROBE_VERSION
rm -rf build || true
cd $PROBE_REPO_NAME
mkdir build
cd build
cmake -DCMAKE_BUILD_TYPE=Release -DAGENT_VERSION=$PROBE_VERSION ..
version_name=-D$(echo $PROBE_REPO_NAME | tr [a-z] [A-Z])_VERSION

cmake -DCMAKE_BUILD_TYPE=Release $version_name=$PROBE_VERSION ..
make driver
strip -g driver/$PROBE_NAME.ko

Expand Down
6 changes: 5 additions & 1 deletion scripts/sysdig-probe-loader
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,8 +46,12 @@ elif [ "$SCRIPT_NAME" = "sysdigcloud-probe-loader" ]; then
SYSDIG_VERSION=$(/opt/draios/bin/dragent --version)
PROBE_NAME="sysdigcloud-probe"
PACKAGE_NAME="draios-agent"
elif [ "$SCRIPT_NAME" = "falco-probe-loader" ]; then
SYSDIG_VERSION=$(falco --version | cut -d' ' -f3)
PROBE_NAME="falco-probe"
PACKAGE_NAME="falco"
else
echo "This script must be called as sysdig-probe-loader or sysdigcloud-probe-loader"
echo "This script must be called as sysdig-probe-loader, sysdigcloud-probe-loader, or falco-probe-loader"
exit 1
fi

Expand Down