stackrox/collector

Relax lower supported kernel for modern Falco probe

erthalion opened this issue · 0 comments

Currently modern Falco probe have hard coded boundary for oldest supported
kernels, although it can as well work with any kernel that have back patched
needed things (BTF, ring buffer maps, trace programs).

Make modern bpf engine more flexible, verify required features instead of
simply checking the kernel version.

Part of #1008