You are viewing documentation for Falco version: v0.37.1

Falco v0.37.1 documentation is no longer actively maintained. The version you are currently viewing is a static snapshot. For up-to-date documentation, see the latest version.

Featured Image for Falco Weekly 48 - 2023
Aldo Lacuku, Federico Di Pierro

Falco Weekly 48 - 2023

What happened in Falco this week?

Let's go through the major changes that happened in various repositories under the falcosecurity organization.

Libs

The anticipated 0.14.0 libs tag (and its driver counterpart) are still a bit late, unfortunately.

Anyway, spring cleaning went on once again this week!

The big safer parameter handling PR was merged, making libs much more robust! Moreover, ppc64le support was extended to kmod and legacy ebpf probe, and we added CI jobs to test the build of drivers on it! Thanks to Afsan Hossain for his big contribution!

Finally, some more fixes:

Rumors have it coming next week:

Falco

We bumped libs and driver to latest master: https://github.com/falcosecurity/falco/pull/2929.
Moreover, Falco will now print system info during startup: https://github.com/falcosecurity/falco/pull/2927.
Falco does now expose a new config option to enable libsinsp state metrics: https://github.com/falcosecurity/falco/pull/2883 Finally, the new driver selection mechanism PR was merged!

Falcoctl

Some fixes on top of the new driver-loader happened:

Join relevant discussions!

Let's meet 🤝

We meet every week in our community calls, if you want to know the latest and the greatest you should join us there!

If you have any questions

Thanks to all the amazing contributors!

Cheers 🎊

Aldo, Federico