Release 1.4.3

Maintenance Release

Assets are available via Docker and the Cribl CDN at the links below.

• Docker: cribl/scope:1.4.3
• x86: https://cdn.cribl.io/dl/scope/1.4.3/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.4.3/linux/aarch64/scope

To obtain the MD5 checksum for any file above, add .md5 to the file path.

Release 1.4.2

Maintenance Release

Assets are available via Docker and the Cribl CDN at the links below.

• Docker: cribl/scope:1.4.2
• x86: https://cdn.cribl.io/dl/scope/1.4.2/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.4.2/linux/aarch64/scope

To obtain the MD5 checksum for any file above, add .md5 to the file path.

Release 1.4.1

Maintenance Release

Assets are available via Docker and the Cribl CDN at the links below.

• Docker: cribl/scope:1.4.1
• x86: https://cdn.cribl.io/dl/scope/1.4.1/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.4.1/linux/aarch64/scope

To obtain the MD5 checksum for any file above, add .md5 to the file path.

New Features and Improvements

Beginning in version 1.4.1, AppScope applies Rules to new processes in existing containers. That is, within any container that exists when you start scoping by Rule, AppScope will automatically begin monitoring any new process that matches the Rule.

This holds true whether you are using the scope rules CLI command, or the AppScope Rules settings in the AppScope Source UI in Cribl Edge or Cribl Stream. Related issue: 1523.

Fixes

• 1584 AppScope 1.4.1 fixes a problem introduced in AppScope 1.4.0 where, while upgrading, multiple AppScope libraries were loaded into one process, causing a crash.

Release 1.4.1-rc0

Maintenance Release

Assets are available via Docker and the Cribl CDN at the links below.

• Docker: cribl/scope:1.4.1-rc0
• x86: https://cdn.cribl.io/dl/scope/1.4.1-rc0/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.4.1-rc0/linux/aarch64/scope

To obtain the MD5 checksum for any file above, add .md5 to the file path.

Release 1.4.0

Minor Release

Assets are available via Docker and the Cribl CDN at the links below.

• Docker: cribl/scope:1.4.0
• x86: https://cdn.cribl.io/dl/scope/1.4.0/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.4.0/linux/aarch64/scope

To obtain the MD5 checksum for any file above, add .md5 to the file path.

New Features and Improvements

AppScope 1.4.0 integrates more deeply with Cribl Edge:

• Using Cribl Edge to "drive," you can now scope individual processes by PID on an Edge Node, and/or scope multiple processes by Rule, on an entire Edge Fleet.
• Using Cribl Edge's Prometheus Scraper Source, you can now obtain metrics in OpenMetrics format from processes running in Kubernetes containers.
• The AppScope CLI has new functionality to support the Cribl Edge integration, including:
  • A new rules command that specifies processes to scope, along with configs to apply to those processes.
  • Improvements to the start, stop, attach, detach, update, and inspect commands.

In general, AppScope 1.4.0 expands support for Kubernetes.

Fixes

• 1567 Scoping top on Fedora no longer produces an unknown terminal type error.
• 1521, 1557 Memory leaks are fixed.
• 1547 scope ps no longer fails to shows child processes.
• 1529 It is now possible to scope postgres using the LD_PRELOAD mechanism.
• 1515 When AppScope is in the user's `$PATH`` and the scoped application performs a fork and exec, AppScope no longer crashes the application.
• 1502 Scoping bash no longer uses an (incorrect) configuration that is other than the one specified.

Pre-Release 1.4.0-rc1

Merge pull request #1579 from criblio/timeout-consume

Increase the IPC message retry limit (library)

v1.4.0-tc11

Merge pull request #1574 from criblio/bug/cli-non-json-in-stdout

Print cli command errors to stderr instead of stdout

Pre-Release 1.4.0-rc0

Minor Release

Assets are available attached to the release here and via Docker and the Cribl CDN at the links below.

• Docker: cribl/scope:1.4.0-rc0
• x86: https://cdn.cribl.io/dl/scope/1.4.0-rc0/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.4.0-rc0/linux/aarch64/scope

New Features and Improvements

New Support for Prometheus

Usability enhancements to Rules (formerly called Filters)

Rules describe sets of processes that should be scoped automatically

• There is a new scope rules CLI command with options to add/remove/view rules
• Rules are now applied to processes in new or restarted containers
• Changes to rules now affect existing processes/containers, with some limitations
• As a protection from misconfiguration, some processes are implicitly denied if rules are in an inconsistent state
• Deny Filters have been depreciated

Improved status capabilities

• scope ps and scope inspect commands now have an -- all option
• the output of scope inspect now contains additional fields describing the process
• a --json option has been added to many scope commands

Improved container capabilities

• With the addition of the --rootdir option, commands no longer need to be root to act (attach, detach, update) or gain visibility (inspect, ps) across container boundaries

Install command

• scope start no longer affects service configurations nor bash profiles

and enhanced Kubernetes deployment

Fixes

Pre-Release 1.4.0-tc10

Merge pull request #1549 from criblio/feat/1537-remove-support-for-tm…

…p-filter

Remove support for tmp filter path (#1537)

Pre-Release 1.4.0-tc9

Merge pull request #1532 from criblio/fix/run-attach-subproc

run attach as subprocess