falcosecurity/driverkit

Ubuntu lowlatency-hwe's not working

EXONER4TED opened this issue · 0 comments

Describe the bug
Ubuntu lowlatency-hwe-* kernels don't work with the current Ubuntu template script. Example:

DEBU + curl --silent -o kernel.deb -SL http://security.ubuntu.com/ubuntu/pool/main/l/linux-lowlatency-hwe-5.15/linux-headers-5.15.0-33-lowlatency_5.15.0-33.34~20.04.1_amd64.deb
DEBU + ar x kernel.deb
DEBU + tar -xf data.tar.xz
DEBU �+ curl --silent -o kernel.deb -SL http://mirrors.edge.kernel.org/ubuntu/pool/main/l/linux-lowlatency-hwe-5.15/linux-lowlatency-hwe-5.15-headers-5.15.0-33_5.15.0-33.34~20.04.1_all.deb
DEBU + ar x kernel.deb
DEBU + tar -xf data.tar.xz
DEBU �+ curl --silent -o kernel.deb -SL http://security.ubuntu.com/ubuntu/pool/main/l/linux-lowlatency-hwe-5.15/linux-lowlatency-hwe-5.15-headers-5.15.0-33_5.15.0-33.34~20.04.1_all.deb
DEBU + ar x kernel.deb
DEBU + tar -xf data.tar.xz
DEBU �+ curl --silent -o kernel.deb -SL http://mirrors.edge.kernel.org/ubuntu/pool/main/l/linux-lowlatency-hwe-5.15/linux-headers-5.15.0-33-lowlatency_5.15.0-33.34~20.04.1_amd64.deb
DEBU + ar x kernel.deb
DEBU + tar -xf data.tar.xz
DEBU #+ cd /tmp/kernel-download/usr/src/
DEBU 7++ find . -type d -name 'linux-headers*lowlatency-hwe'
DEBU "++ head -n 1
DEBU ++ xargs readlink -f
DEBU Freadlink: missing operand

The find . -type d -name 'linux-headers*lowlatency-hwe' does not work as the headersPattern needs to actually be linux-headers*lowlatency, not linux-headers*lowlatency-hwe. I'm not sure why, the directory extracted out of the deb just doesn't have the -hwe on the end.

It should be possible to fix this by just splitting the flavor on - and taking the split[0] element for the headersPattern.

How to reproduce it

Example command (kernel urls come from kernel crawler):

_output/bin/driverkit docker --output-module ./test-module.ko --kernelrelease 5.15.0-33-lowlatency-hwe-5.15 --kernelversion 34~20.04.1 --driverversion 2.0.0+driver --target ubuntu --moduledevicename scwx-falco --moduledrivername scwx-falco --kernelurls http://security.ubuntu.com/ubuntu/pool/main/l/linux-lowlatency-hwe-5.15/linux-headers-5.15.0-33-lowlatency_5.15.0-33.34\~20.04.1_amd64.deb --kernelurls http://mirrors.edge.kernel.org/ubuntu/pool/main/l/linux-lowlatency-hwe-5.15/linux-lowlatency-hwe-5.15-headers-5.15.0-33_5.15.0-33.34\~20.04.1_all.deb --kernelurls http://security.ubuntu.com/ubuntu/pool/main/l/linux-lowlatency-hwe-5.15/linux-lowlatency-hwe-5.15-headers-5.15.0-33_5.15.0-33.34\~20.04.1_all.deb --kernelurls http://mirrors.edge.kernel.org/ubuntu/pool/main/l/linux-lowlatency-hwe-5.15/linux-headers-5.15.0-33-lowlatency_5.15.0-33.34\~20.04.1_amd64.deb -l debug

Expected behaviour
That it builds :)

Screenshots

Environment

  • Falco version:
  • System info:
  • Cloud provider or hardware configuration:
  • OS:
  • Kernel:
  • Installation method:

Additional context