Skip to content

Commit

Permalink
new(content): added Falco weekly higlhlight for week 47.
Browse files Browse the repository at this point in the history
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
  • Loading branch information
FedeDP authored and poiana committed Nov 24, 2023
1 parent 0116a90 commit 2992694
Showing 1 changed file with 65 additions and 0 deletions.
65 changes: 65 additions & 0 deletions content/en/blog/falco-week-47.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,65 @@
---
title: Falco Weekly 47
date: 2023-11-24
author: Federico Di Pierro
slug: falco-w-47
tags: ["Falco"]
---

Another week, another load of improvements everywhere in the falcosecurity!

## What happened in Falco this week?

Let's go through the major changes that happened in various repositories under the falcosecurity organization.

### [Libs](https://github.com/falcosecurity/libs)

The anticipated 0.14.0 libs tag (and its driver counterpart) are a bit late, unfortunately.

Anyway, spring cleaning went on this week!
* removed `stopwatch` implementation, now unused: https://github.com/falcosecurity/libs/pull/1493
* removed unused `sinsp_test.cpp` file: https://github.com/falcosecurity/libs/pull/1499
* removed `jq` dep: https://github.com/falcosecurity/libs/pull/1500

Moreover, some fixes on the recently introduced async event queue class happened: https://github.com/falcosecurity/libs/pull/1490, https://github.com/falcosecurity/libs/pull/1504.
Finally, some fixes around the stats code: https://github.com/falcosecurity/libs/pull/1505, https://github.com/falcosecurity/libs/pull/1506.

Rumors have it coming next week:
* New big cleanup: deprecation of tracers: https://github.com/falcosecurity/libs/pull/1503
* `ppc64le` support for bpf and kmod + CI build jobs: https://github.com/falcosecurity/libs/pull/1497
* remove old metaevents implementation: https://github.com/falcosecurity/libs/pull/1495
* Small fix on top of ia32 work: https://github.com/falcosecurity/libs/pull/1501

**Second part of an effort by Luca Guerra to clean up libsinsp from potential undefined behavior**: https://github.com/falcosecurity/libs/pull/1502.
This is so important that deserved to be left alone :)

### [Falco](https://github.com/falcosecurity/falco)

We have a new official adopter! Welcome to `Thought Machine`: https://github.com/falcosecurity/falco/pull/2919
Small cleanup to avoid Falco configuratiom to be inited twice: https://github.com/falcosecurity/falco/pull/2917

### [Falcoctl](https://github.com/falcosecurity/falcoctl)

The new `driver` command was merged! https://github.com/falcosecurity/falcoctl/pull/343
We are now in the process of [adding tests](https://github.com/falcosecurity/falcoctl/pull/355) and eventually fixing spotted bugs :)
Also, the new `asset` artifact type PR is being reviewed: https://github.com/falcosecurity/falcoctl/pull/309.

### Others

[Driverkit](https://github.com/falcosecurity/driverkit) [v0.16.0](https://github.com/falcosecurity/driverkit/releases/tag/v0.16.0) was just released, and contains [some fixes](https://github.com/falcosecurity/driverkit/pull/305), a new [`local` build processor](https://github.com/falcosecurity/driverkit/pull/306) and preliminary [SLES support](https://github.com/falcosecurity/driverkit/pull/304).

## Let's meet 🤝

We meet every week in our [community calls](https://github.com/falcosecurity/community),
if you want to know the latest and the greatest you should join us there!

If you have any questions

* Join the [#falco channel](https://kubernetes.slack.com/messages/falco) on the [Kubernetes Slack](https://slack.k8s.io)
* Join the [Falco mailing list](https://lists.cncf.io/g/cncf-falco-dev)

Thanks to all the amazing contributors!

Cheers 🎊

Federico

0 comments on commit 2992694

Please sign in to comment.