error creating Tracee: failed to load BPF object

[ceeeeb-hao]

docker run --name tracee -it --rm --pid=host --cgroupns=host --privileged -v /etc/os-release:/etc/os-release-host:ro -v /var/run:/var/run:ro -p 3366:3366 aquasec/tracee:latest --metrics

mkfifo: cannot create fifo '/tmp/tracee/pipe': No such file or directory
starting tracee-ebpf...
libbpf: failed to parse target BTF: -22
libbpf: failed to perform CO-RE relocations: -22
libbpf: failed to load object 'embedded-core'
2024/06/08 13:43:19 error creating Tracee: failed to load BPF object

[geyslan]

@ceeeeb-hao the same command line presented worked here in my Manjaro env. What's your env?

❯ uname -a
Linux hb0 6.6.32-1-MANJARO #1 SMP PREEMPT_DYNAMIC Mon May 27 03:41:25 UTC 2024 x86_64 GNU/Linux

❯ docker run --name tracee -it --rm --pid=host --cgroupns=host --privileged -v /etc/os-release:/etc/os-release-host:ro -v /var/run:/var/run:ro -p 3366:3366 aquasec/tracee:latest --metrics
TIME             UID    COMM             PID     TID     RET              EVENT                     ARGS
11:23:37:435599  0      nmcli            2902203 2902203 0                sched_process_exec        cmdpath: /usr/bin/nmcli, pathname: /usr/bin/nmcli, dev: 271581187, inode: 14973392, ctime: 1710188855744427510, inode_mode: 33261, interpreter_pathname: /usr/lib/ld-linux-x86-64.so.2, interpreter_dev: 271581187, interpreter_inode: 14953465, interpreter_ctime: 1717159086501860775, argv: [nmcli --terse --fields active,ssid,bssid,mode,chan,freq,signal,security,wpa-flags,rsn-flags,device device wifi], interp: /usr/bin/nmcli, stdin_type: S_IFSOCK, stdin_path: UNIX-STREAM, invoked_from_kernel: 0, env: <nil>
...

[geyslan]

Duplicate of aquasecurity/tracee#4107