Cut 0.34.0 Release

[LucaGuerra]

Falco 0.34.0 Release

During the community call of 2023-01-11 I proposed myself as a release manager.
Will keep this issue updated with the current status and progress.

Date

Release date: 2023-02-07

Current Status

• Code freeze in falcosecurity/libs : version 0.10.x
• Code thaw in falcosecurity/libs
• Release libs v0.10.x
  - https://github.com/falcosecurity/libs/releases/tag/0.10.3
• Release drivers v4.x.x
  - https://github.com/falcosecurity/libs/releases/tag/4.0.0%2Bdriver
• Code freeze in falcosecurity/falco
• Open release branch in Falco
• Code thaw in falcosecurity/falco
• Release Falco v0.34.0

Release Steps

Process is described in this document.

Release Blocking PRs

If a PR for a specific issue doesn't exist yet I'll link the issue and change it to PR afterwards

• new: ship falcoctl bundled with Falco #2345
• fix(version): correctly set falcoctl version at build time falcoctl#237
• fix(scripts): fixed falco-driver-loader kmod cleanup #2386
• new(scripts): add Falcoctl config into Falco package #2390
• fix(scripts): use falco-driver-loader only into install scripts #2391
• new: introduce allowedTypes falcoctl#251
• update: add allowed types to falcoctl artifact follow service #2406

Manual Testing Action Items

• Running Falco on Kubernetes with the official Helm Charts
• Running Falco from RPM and DEB artifacts
• Running Falco in a container with the official images
• Running/fuzzing Falco with multiple event sources active in parallel
• Running/fuzzing Falco with variable syscall buffer dimension
• Running Falco in all officially-supported architectures (x86_64, ARM64)
• Running Falco with the supported drivers (kmod, modern eBPF, eBPF, gVisor, trace files)
• Test Falco with event generator
• Test that plugins are correctly loaded
• Test memory and CPU usage (with Valgrind and other tools)
• Test latest version of driver loader
• Test that k8s metadata enrichment client works as expected
• Test that all Falco CLI options work as expected
• Check that Falco log messages are correct and consistent
• Test that Falco ruleset loading and validation works as expected

Action Items

• Pre-Release
  • Milestone: https://github.com/falcosecurity/falco/milestone/27
  • Sync with new falcosecurity/libs release v0.10.3
  • Sync with new falcosecurity/libs driver release 4.0.0
  • Release plugins
  • Prebuilt drivers publish
  • Changelog
• Release
  • Tag
  • Github Release
• Website
  • Create 0.33 snapshot
    • Protect snapshot branch
  • Add Systemd instructions update systemd docs falco-website#799
  • Add modern eBPF probe instructions update(content): support modern bpf probe as a new driver falco-website#800
• Helm
  • Update helm charts new(falco): chart v3.0.0 for Falco 0.34 (falcoctl support and more) charts#453
• Announcements
  • mailing list
  • blog post new(blog): add blog entry for falco 0.34.0 falco-website#802
  • slack channel
• Post-Release
  • Update helm chart value documentation falcosecurity/charts@6a8cd4c
  • Update supported fields and syscall documentation update(content): update fields for 0.34.0 falco-website#810
  • Archive community call meeting notes new(docs): archive 0.33.1 meeting notes community#163

Miscs

/milestone 0.34.0

/assign @LucaGuerra

/kind documentation

[poiana]

@LucaGuerra: You must be a member of the falcosecurity/falco-maintainers GitHub team to set the milestone. If you believe you should be able to issue the /milestone command, please contact your maintainers of falcosecurity/falco and have them propose you as an additional delegate for this responsibility.

In response to this:

Scheduled to happen: ~2023-01-31

During the community call of 2023-01-11 I proposed myself as a release manager.
Will keep this issue updated with the current status and progress.

Current Status

• Code freeze in falcosecurity/libs
• Code thaw in falcosecurity/libs
• Release libs v0.10.x
• Release drivers v4.x.x
• Code freeze in falcosecurity/falco
• Open release branch in Falco
• Code thaw in falcosecurity/falco
• Release Falco v0.34.0

Release Steps

Process is described in this document.

Release Blocking PRs

Manual Testing Action Items

• Running Falco on Kubernetes with the official Helm Charts
• Running Falco from RPM and DEB artifacts
• Running Falco in a container with the official images
• Running/fuzzing Falco with multiple event sources active in parallel
• Running/fuzzing Falco with variable syscall buffer dimension
• Running Falco in all officially-supported architectures (x86_64, ARM64)
• Running Falco with the supported drivers (kmod, eBPF, gVisor, trace files)
• Test Falco with event generator
• Test that plugins are correctly loaded
• Test memory and CPU usage (with Valgrind and other tools)
• Test latest version of driver loader
• Test that k8s metadata enrichment client works as expected
• Test that all Falco CLI options work as expected
• Check that Falco log messages are correct and consistent
• Test that Falco ruleset loading and validation works as expected

Action Items

• Pre-Release
• Milestone: https://github.com/falcosecurity/falco/milestone/24
• Sync with new falcosecurity/libs release v0.10.x:
• Sync with new falcosecurity/libs driver release:
• Release plugins:
• Prebuilt drivers publish
• Changelog
• Release
• Tag
• Github Release
• Website
• Create 0.33 snapshot
  • Protect snapshot branch
• Announcements
• mailing list
• slack channel
• Post-Release
• Update helm charts
• Archive community call meeting notes:

Miscs

/milestone 0.34.0

/assign @LucaGuerra

/kind documentation

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[FedeDP]

/milestone 0.34.0

[FedeDP]

We already have:

• 0.10.1 libs tag: https://github.com/falcosecurity/libs/releases/tag/0.10.1
• 4.0.0+driver libs tag: https://github.com/falcosecurity/libs/releases/tag/4.0.0%2Bdriver
• 4.0.0 drivers built and uploaded on download.falco.org: https://download.falco.org/driver/site/index.html?lib=4.0.0%2Bdriver&target=amazonlinux2&arch=x86_64&kind=ebpf

[Andreagit97]

Documentation:

• systemd: update systemd docs falco-website#799
• modern bpf: update(content): support modern bpf probe as a new driver falco-website#800

[Andreagit97]

we will tag a 0.10.3 with these new patches falcosecurity/libs#850

[leogr]

Update: we should release the last RC of falcoctl very soon! 🥳

[LucaGuerra]

We're going to be a couple days late to wrap up tests and the final version of falcoctl!

[leogr]

We must evaluate if we want this 👇 to happen before the release.
falcosecurity/charts#453 (review)

Other than that, I believe we are good 👍

[LucaGuerra]

The release is live!