charts: (Debian/Ubuntu) Attempt to download a version which doesn't exist

Describe the bug

The initialisation container falco-driver-loader fails because the code attempts to download version falco_debian_5.15.0-1034-gcp_42.ko. That version is not present on the file server

How to reproduce it

helm repo add falcosecurity https://falcosecurity.github.io/charts
helm repo update
helm install falco falcosecurity/falco --namespace falco --create-namespace

Expected behaviour

The code should try to download the newest version which seems to be (at least at the moment): falco_ubuntu-gcp_5.19.0-1025-gcp_27.o

The pod is initialised and the runtime security completes the installation.

Environment

  • Falco version:
  • System info:
  • Cloud provider or hardware configuration: GCP
  • OS: 20.04.5 LTS (Focal Fossa)
  • Kernel: Linux testing-u20 5.15.0-1034-gcp # 42~20.04.1-Ubuntu SMP Thu May 18 05:40:21 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
  • Installation method: Helm chart

Additional context

$ kubectl logs falco-2455k -n falco -c falco-driver-loader
* Setting up /usr/src links from host
* Running falco-driver-loader for: falco version=0.34.1, driver version=4.0.0+driver, arch=x86_64, kernel release=5.15.0-1034-gcp, kernel version=42
* Running falco-driver-loader with: driver=module, compile=yes, download=yes

================ Cleaning phase ================

* 1. Check if kernel module 'falco' is still loaded:
- OK! There is no 'falco' module loaded.

* 2. Check all versions of kernel module 'falco' in dkms:
- OK! There are no 'falco' module versions in dkms.

[SUCCESS] Cleaning phase correctly terminated.

================ Cleaning phase ================

* Looking for a falco module locally (kernel 5.15.0-1034-gcp)
* Filename 'falco_debian_5.15.0-1034-gcp_42.ko' is composed of:
 - driver name: falco
 - target identifier: debian
 - kernel release: 5.15.0-1034-gcp
 - kernel version: 42
* Trying to download a prebuilt falco module from https://download.falco.org/driver/4.0.0%2Bdriver/x86_64/falco_debian_5.15.0-1034-gcp_42.ko
curl: (22) The requested URL returned error: 404 
Unable to find a prebuilt falco module
install: /usr/lib/gcc/x86_64-linux-gnu/5/
* Trying to dkms install falco module with GCC /usr/bin/gcc
DIRECTIVE: MAKE="'/tmp/falco-dkms-make'"

Creating symlink /var/lib/dkms/falco/4.0.0+driver/source ->
                 /usr/src/falco-4.0.0+driver

DKMS: add completed.
* Running dkms build failed, couldn't find /var/lib/dkms/falco/4.0.0+driver/build/make.log (with GCC /usr/bin/gcc)
install: /usr/lib/gcc/x86_64-linux-gnu/5/
* Trying to dkms install falco module with GCC /usr/bin/gcc-5
DIRECTIVE: MAKE="'/tmp/falco-dkms-make'"
* Running dkms build failed, couldn't find /var/lib/dkms/falco/4.0.0+driver/build/make.log (with GCC /usr/bin/gcc-5)
install: /usr/lib/gcc/x86_64-linux-gnu/6/
* Trying to dkms install falco module with GCC /usr/bin/gcc-6
DIRECTIVE: MAKE="'/tmp/falco-dkms-make'"
* Running dkms build failed, couldn't find /var/lib/dkms/falco/4.0.0+driver/build/make.log (with GCC /usr/bin/gcc-6)
install: /usr/lib/gcc/x86_64-linux-gnu/8/
* Trying to dkms install falco module with GCC /usr/bin/gcc-8
DIRECTIVE: MAKE="'/tmp/falco-dkms-make'"
* Running dkms build failed, couldn't find /var/lib/dkms/falco/4.0.0+driver/build/make.log (with GCC /usr/bin/gcc-8)
* Trying to load a system falco module, if present
Consider compiling your own falco driver and loading it or getting in touch with the Falco community

About this issue

  • Original URL
  • State: closed
  • Created a year ago
  • Comments: 22 (11 by maintainers)

Most upvoted comments

Hey @FedeDP - apologies for the delay. I’m no longer pursuing this route. I’m fine with closing this. Thank you!