Skip to content

Conversation

@ekoops
Copy link
Contributor

@ekoops ekoops commented Dec 16, 2025

This PR fixes broken mirrors and replace unavailable versions for linux headers, linux tools and kernel modules/sources. Moreover, it pins the installed cmake version to version 3.24.4, that is the current minimum supported version by libs.

Thank you to @irozzo-1A for the big support.

ekoops and others added 13 commits December 16, 2025 18:45
The generated rootfs and kernel artifacts don't seem to work with
the actual firecracker configuration. Generate them leveraging
different mirrors and using an aws different version.

Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
Contextually, replace `rootfs` base image with `ubuntu:22.04`.

Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
Contextually, replace `rootfs` base image with `ubuntu:22.04`.

Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
The source directory works only for the current shell, and `gcc-9`
is never used in that RUN step after activation, so remove the
directive.

Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
In order to be sure that shell instructions in RUN steps run as
intended, replace the default shell at build time with bash, enabling
some safety options (`-euo pipefail`). At the moment, this is done
only on rootfs images and builders.

Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
Install the same `cmake` version in rootfs and builder (`builder` and
`modernprobe-builder` images. The `cmake` version to be installed is
passed to Dockerfiles through build-args, and is kept in a separate
`images/CMAKE_VERSION` file. User can override it at build time using
`make CMAKE_VERSION=...`.

Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>
Co-Authored-By: irozzo-1A <iacopo@sysdig.com>
Copy link
Collaborator

@therealbobo therealbobo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm!

@poiana
Copy link

poiana commented Dec 16, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ekoops, therealbobo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@poiana poiana merged commit e8c6f26 into falcosecurity:main Dec 16, 2025
4 of 5 checks passed
@ekoops
Copy link
Contributor Author

ekoops commented Dec 16, 2025

/hold
EDIT: too late 😔

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants