Skip to content

Mount eBPF filesystem by default on 1.27+#1223

Merged
cartermckinnon merged 10 commits intomasterfrom
bpf-mount
Mar 29, 2023
Merged

Mount eBPF filesystem by default on 1.27+#1223
cartermckinnon merged 10 commits intomasterfrom
bpf-mount

Conversation

@cartermckinnon
Copy link
Contributor

Issue #, if available:

Closes #728

Description of changes:

Mounts the eBPF filesystem by default.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Testing Done

> make 1.25
# succeeds, launched an instance
> mount | grep bpf
none on /sys/fs/bpf type bpf (rw,nosuid,nodev,noexec,relatime,mode=700)

@cartermckinnon
Copy link
Contributor Author

cartermckinnon commented Mar 17, 2023

spoke with @mmerkes, I'll change this to a runtime option so that we don't cause issues if folks are already mounting this themselves.

@daisuke-yoshimoto
Copy link

@cartermckinnon @mmerkes

When this PR is completed, will "Container runtime for GurdDuty" be released soon?

@mmerkes
Copy link
Contributor

mmerkes commented Mar 24, 2023

@daisuke-yoshimoto This is a standalone thing and has no relation to anything else on our end.

@cartermckinnon cartermckinnon changed the title Mount eBPF filesystem by default Mount eBPF filesystem by default on 1.26+ Mar 28, 2023
@cartermckinnon cartermckinnon changed the title Mount eBPF filesystem by default on 1.26+ Mount eBPF filesystem by default on 1.27+ Mar 29, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

eBPF filesystem mounted when in use

3 participants