Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Beyla: inform that CAP_NET_ADMIN is required #1221

Open
mariomac opened this issue Oct 3, 2024 · 2 comments
Open

Beyla: inform that CAP_NET_ADMIN is required #1221

mariomac opened this issue Oct 3, 2024 · 2 comments

Comments

@mariomac
Copy link
Contributor

mariomac commented Oct 3, 2024

In the error message that Beyla shows when some capabilities are missing, it is not currently showing that CAP_NET_ADMIN is required, as tc_ingress and tc_egress ebpf programs require that extra capability.

@rafaelroquetto
Copy link
Contributor

Because the bpf programs tc_ingress and tc_egress are part of ktracer, they are being unconditionally loaded. When fixing this issue, we need to make sure they are not loaded when cfg.EBPF.UseLinuxTC is set to false, as the loading of these programs is what requires CAP_NET_ADMIN.

@grcevski
Copy link
Contributor

grcevski commented Oct 7, 2024

Ah good catch @rafaelroquetto, I think we should add a separate issue to make sure we don't miss this part.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants