Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing syscall tracing facility #1617

Open
arilou opened this issue Jan 21, 2025 · 2 comments
Open

Missing syscall tracing facility #1617

arilou opened this issue Jan 21, 2025 · 2 comments
Labels
kind/bug Something isn't working platform/arm64

Comments

@arilou
Copy link

arilou commented Jan 21, 2025

Description

On the arm64 images there is a missing config which does not produce the syscalls tracepoints CONFIG_FTRACE_SYSCALLS.
(It does exist on the amd64 config, so the issue is for the arm64 images only)

Impact

These tracepoints are used by different security and observability tools, with the lack of these tracepoints they fail to operate the way they should.
(Mainly used as a BPF hook on the tracepoint)

Environment and steps to reproduce

Arm64 machines with one of flatcar kernels

Check that all the syscall tracepoints exist

ls -l /sys/kernel/tracing/events/syscalls/

Should list each syscall tracepoint (enter and exit for each one)

Expected behavior

The syscall tracepoints should be compiled and available (check /sys/kernel/tracing/events/syscalls/)

@tormath1
Copy link
Contributor

Hello and thanks for raising this. I don't see any counter indication to not enable this on ARM64 platform.

Would you be interested to do the contribution yourself? It's just a matter of moving this line:
https://github.com/flatcar/scripts/blob/8d418321dd129f529f27ab0b79c75d780a220f86/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/amd64_defconfig-6.6#L44

To this file: https://github.com/flatcar/scripts/blob/main/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/commonconfig-6.6

Then I'll kick-off a build for you to test if works as expected.

@arilou
Copy link
Author

arilou commented Jan 22, 2025

Thank you @tormath1 I sent a PR
flatcar/scripts#2600

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Something isn't working platform/arm64
Projects
Status: 📝 Needs Triage
Development

No branches or pull requests

2 participants