diff --git a/_service b/_service index b8e346d..0125cb8 100644 --- a/_service +++ b/_service @@ -3,7 +3,8 @@ https://github.com/cilium/tetragon git .git - v1.1.2 + v1.2.0 + v1.2.0 @PARENT_TAG@ enable v(.*) diff --git a/_servicedata b/_servicedata index 0d0c504..2c82021 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/cilium/tetragon - 2d8f9438b18dff2ec496fda8af65e1620ca68f11 \ No newline at end of file + dc458866c6144881e6b407d7c98f5b417d60075d \ No newline at end of file diff --git a/tetragon-1.1.2.obscpio b/tetragon-1.1.2.obscpio deleted file mode 100644 index 0ce6e90..0000000 --- a/tetragon-1.1.2.obscpio +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:1950e676ca0e469eb0270a7a0d97b5c9f098413d1bd115eb42a9e02d337ee833 -size 178684430 diff --git a/tetragon-1.2.0.obscpio b/tetragon-1.2.0.obscpio new file mode 100644 index 0000000..e3d4196 --- /dev/null +++ b/tetragon-1.2.0.obscpio @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e991b4f330969d2025698af7671cfd194ca56cd06a7cdce22c06f1e2c65748d3 +size 184140814 diff --git a/tetragon.changes b/tetragon.changes index eb33cd3..3615128 100644 --- a/tetragon.changes +++ b/tetragon.changes @@ -1,3 +1,61 @@ +------------------------------------------------------------------- +Fri Sep 13 18:27:13 UTC 2024 - opensuse_buildservice@ojkastl.de + +- Update to version 1.2.0: + Full changelog see + https://github.com/cilium/tetragon/releases/tag/v1.2.0 + * Major Changes + - feat: Username for process_exec events (#2369) by @anfedotoff + - tetragon: Allow persistent enforcement during tetragon + restart (#2600) by @olsajiri + - LSM sensor (#2566) by @anfedotoff + * Bugfixes + - bpf: use CORE for execve hook (#2399) by @kkourt + - Don't create PodInfo if the pod is being deleted (#2431) by + @michi-covalent + - tetragon: allow namespaced and non-namespaced policies to + have the same name (#2337) by @joshuajorel + - operator: Don't start metrics server if Helm value + tetragonOperator.prometheus.enabled is set to false. (#2484) + by @yukinakanaka + - enforcer: fix issue when using multiple calls with fmod_ret + (#2524) by @kkourt + - Reduce the kernel memory footprint (accounted by the cgroup + memory controller) of the stack trace feature when unused. + (#2546) by @mtardy + - Reduce the kernel memory footprint (accounted by the cgroup + memory controller) of the ratelimit feature when unused + (around ~10MB per kprobe). (#2551) by @mtardy + - Reduce the kernel memory footprint (accounted by the cgroup + memory controller) of the fdinstall feature when unused + (around ~11MB per kprobe). (#2563) by @mtardy + - Do not increase the reference count when we cannot find a + parent in kthreads. (#2620) by @tpapagian + - Reduce the kernel memory footprint (accounted by the cgroup + v2 memory controller) of the override feature when unused + (around ~3MB per kprobe). (#2692) by @mtardy + - Fix a bug related to the matchBinaries Prefix operator by + increasing the buffer size used by our dentry walk. Now the + matchBinaries Prefix operator can correctly trigger a match + on any path above 255 chars. (#2764) by @mtardy + - Fix a bug where the tetra getevents command would timeout + even if the connection was successful. (#2765) by @mtardy + - Fix missing cases in the compact encoder for tetra. (#2819) + by @willfindlay + - add support for pod association via cgroup id (#2776) by + @kkourt + - Allow disabling gRPC either by selecting 'enabled:false' in + the helm chart or by passing an empty address to the agent + (#2826) by @kkourt + - Fix tetragon_process_cache_size metric (#2827) by @lambdanis + +------------------------------------------------------------------- +Mon Jul 29 18:36:26 UTC 2024 - Johannes Kastl + +- exclude architectures that fail to build due to + 'pkg/syscallinfo/syscallinfo.go:39:34: undefined: syscallNames' + errors + ------------------------------------------------------------------- Wed Jun 12 16:18:43 UTC 2024 - opensuse_buildservice@ojkastl.de diff --git a/tetragon.obsinfo b/tetragon.obsinfo index 12df11d..08b8711 100644 --- a/tetragon.obsinfo +++ b/tetragon.obsinfo @@ -1,4 +1,4 @@ name: tetragon -version: 1.1.2 -mtime: 1718190407 -commit: 2d8f9438b18dff2ec496fda8af65e1620ca68f11 +version: 1.2.0 +mtime: 1725534176 +commit: dc458866c6144881e6b407d7c98f5b417d60075d diff --git a/tetragon.spec b/tetragon.spec index 2bfc169..de42209 100644 --- a/tetragon.spec +++ b/tetragon.spec @@ -22,17 +22,18 @@ %define cli_package_name tetragon-cli Name: tetragon -Version: 1.1.2 +Version: 1.2.0 Release: 0 Summary: eBPF-based Security Observability and Runtime Enforcement License: Apache-2.0 URL: https://github.com/cilium/tetragon Source: tetragon-%{version}.tar.gz Source1: vendor.tar.gz -BuildRequires: clang +BuildRequires: clang >= 15 BuildRequires: go >= 1.22 BuildRequires: llvm BuildRequires: make +ExcludeArch: i586 ppc64le s390x armv7l armv7hl %description Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security @@ -94,7 +95,7 @@ zsh command line completion support for %{cli_package_name}. # # tetragon # -CGO_ENABLED=0 go build \ +go build \ -mod=vendor \ -buildmode=pie \ -ldflags="-X github.com/cilium/tetragon/pkg/version.Version=%{version}" \ @@ -108,7 +109,7 @@ make -C ./bpf BPF_TARGET_ARCH=x86 %{?_smp_mflags} # # tetra cli # -CGO_ENABLED=0 go build \ +go build \ -mod=vendor \ -buildmode=pie \ -ldflags="-X github.com/cilium/tetragon/pkg/version.Version=%{version}" \ diff --git a/vendor.tar.gz b/vendor.tar.gz index 4908c4f..9aad84c 100644 --- a/vendor.tar.gz +++ b/vendor.tar.gz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:f180e8b2d905bbdf53026da189b19c30d1f1424856ab02770c447ef2bc1a577e -size 13888794 +oid sha256:d3f81bd2866cfd87e729a0afc61912c460e84452d9a69cb856a390b227d162c2 +size 13792023