Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tetragon: store cgroup ID of current tasks so we can check if they belong to same container context #2999

Draft
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

tixxdz
Copy link
Member

@tixxdz tixxdz commented Oct 14, 2024

Add cgroup ID to execve_map_value so we can later at kernel time
build use cases where we can check if two processes belong to
same container and probably same environment and security context.

@tixxdz tixxdz added the release-note/minor This PR introduces a minor user-visible change label Oct 14, 2024
@tixxdz tixxdz requested a review from a team as a code owner October 14, 2024 16:08
@tixxdz tixxdz requested a review from tpapagian October 14, 2024 16:08
Copy link

netlify bot commented Oct 14, 2024

Deploy Preview for tetragon ready!

Name Link
🔨 Latest commit d3879ac
🔍 Latest deploy log https://app.netlify.com/sites/tetragon/deploys/674714efa39e8c000852e7ca
😎 Deploy Preview https://deploy-preview-2999--tetragon.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@tixxdz tixxdz marked this pull request as draft October 14, 2024 16:10
@tixxdz tixxdz changed the title WIP Tetragon: add cgroup id in execve map to identify if processes belong to same container in kernel space Oct 16, 2024
@tixxdz tixxdz force-pushed the pr/tixxdz/2024-10-process-tracking branch from 088f183 to 8637656 Compare October 29, 2024 09:12
@tixxdz tixxdz changed the title Tetragon: add cgroup id in execve map to identify if processes belong to same container in kernel space Tetragon: store cgroup ID of current tasks so we can check if they belong to same container context Oct 29, 2024
@tixxdz tixxdz marked this pull request as ready for review October 29, 2024 09:14
@tixxdz tixxdz requested a review from kkourt October 29, 2024 09:14
@kkourt kkourt marked this pull request as draft November 25, 2024 09:18
Add cgroup ID to execve_map_value so we can later at kernel time
build use cases where we can check if two processes belong to
same container and probably same environment and security context.

Signed-off-by: Djalal Harouni <[email protected]>
@tixxdz tixxdz force-pushed the pr/tixxdz/2024-10-process-tracking branch from 8637656 to d3879ac Compare November 27, 2024 12:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release-note/minor This PR introduces a minor user-visible change
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant