0.25

New features

• Support Linux 5.0
  • Redefine asm_volatile_goto needed for 5.0 kernels (#1332)
  • Update for change to access_ok in Linux 5.0 (#1302)
• CRI container runtime support
  • runtimeSpec.linux returned by containerd is an object, not an array (#1343)
  • Fix gRPC build with gcc 7 (#1322)
  • CRI-O container support (#1310)
  • Fix check for Docker pause containers [SMAGENT-1305] (#1306)
  • Detect CRI pod sandbox containers (#1297)
  • Container Runtime Interface support (#1277)
• Prebuilt probes
  • Prebuild minikube kernel modules (#1294)
  • Build probe modification to include Fedora-Atomic. [SMAGENT-1251] (#1293)

Bug fixes

• Fix for newer versions of LXC not being detected (#1345)
• Build fixes
  • [SMAGENT-1433] pull legacy GCC artifacts from local cache as debian no longer supports (#1342)
  • Use TBB_INCLUDE_DIR for consistency w/ falco agent (#1329)
  • SMAGENT-1297: Rebuild gcc-plugins before building kernel module (#1305)
  • Modified BPF probe builder (#1301)
• Stability fixes
  • Call set*ent() before reading the user/group NSS database (#1341)
  • Properly initialize default settings for tracers (#1339)
  • Fix bpf ptrace filler (#1338)
  • Fix potential memory leak in libelf (#1337)
  • Fix case where fclose could be called twice. (#1330)
  • Handle mmap failure gracefully (#1324)

Internal changes

• Add stream event details in csysdig output (#1335)
• SMAGENT-1400: Make sinsp_logger thread-safe (#1333)
• Never drop socket syscalls to ensure we have fdinfo for subsequent binds. SMAGENT-1270 (#1312)
• Infer fd info for sendto system call [SMAGENT-1282] (#1304)
• Async framework base [SMAGENT-1247] (#1303)
• Handle events for unknown threads after scap start [SMAGENT-1082] (#1296)
• Add ability to print filtercheck field names only (#1288)