SUSE Linux Enterprise Support

pkg/driverbuilder/builder/sle.go

@@ -0,0 +1,64 @@
+// SPDX-License-Identifier: Apache-2.0
+/*
+Copyright (C) 2023 The Falco Authors.
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+    http://www.apache.org/licenses/LICENSE-2.0
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package builder
+
+import (
+	_ "embed"
+
+	"github.com/falcosecurity/driverkit/pkg/kernelrelease"
+)
+
+//go:embed templates/sle.sh
+var sleTemplate string
+
+// TargetTypeSLE identifies the sle target.
+const TargetTypeSLE Type = "sle"
+
+// sle is a driverkit target.
+type sle struct {
+}
+
+func init() {
+	byTarget[TargetTypeSLE] = &sle{}
+}
+
+type sleTemplateData struct {
+	commonTemplateData
+	KernelPackage string
+}
+
+func (v *sle) Name() string {
+	return TargetTypeSLE.String()
+}
+
+func (v *sle) TemplateScript() string {
+	return sleTemplate
+}
+
+func (v *sle) URLs(kr kernelrelease.KernelRelease) ([]string, error) {
+	return nil, nil
+}
+
+func (v *sle) MinimumURLs() int {
+	// We don't need any url
+	return 0
+}
+
+func (v *sle) TemplateData(c Config, kr kernelrelease.KernelRelease, _ []string) interface{} {
+	return sleTemplateData{
+		commonTemplateData: c.toTemplateData(v, kr),
+		KernelPackage:      kr.Fullversion + kr.FullExtraversion,
+	}
+}

pkg/driverbuilder/builder/templates/sle.sh

@@ -0,0 +1,65 @@
+#!/bin/bash
+# SPDX-License-Identifier: Apache-2.0
+#
+# Copyright (C) 2023 The Falco Authors.
+#
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Simple script that desperately tries to load the kernel instrumentation by
+# looking for it in a bunch of ways. Convenient when running Falco inside
+# a container or in other weird environments.
+#
+set -xeuo pipefail
+
+rm -Rf {{ .DriverBuildDir }}
+mkdir {{ .DriverBuildDir }}
+rm -Rf /tmp/module-download
+mkdir -p /tmp/module-download
+
+curl --silent -SL {{ .ModuleDownloadURL }} | tar -xzf - -C /tmp/module-download
+mv /tmp/module-download/*/driver/* {{ .DriverBuildDir }}
+
+cp /driverkit/module-Makefile {{ .DriverBuildDir }}/Makefile
+bash /driverkit/fill-driver-config.sh {{ .DriverBuildDir }}
+
+# Fetch the kernel
+rm -Rf /tmp/kernel-download
+mkdir /tmp/kernel-download
+cd /tmp/kernel-download
+zypper --non-interactive install --download-only kernel-default-devel={{ .KernelPackage }} kernel-devel={{ .KernelPackage }}
+mv -v $(find /var/cache/zypp/packages -name kernel*.rpm) /tmp/kernel-download
+for rpm in /tmp/kernel-download/*.rpm
+do
+    rpm2cpio $rpm | cpio --extract --make-directories
+done
+
+ls -alh /tmp/kernel-download/usr/src
+sourcedir="$(find . -type d -name "linux-*-obj" | head -n 1 | xargs readlink -f)/*/default"
+
+{{ if .BuildModule }}
+# Build the module
+cd {{ .DriverBuildDir }}
+make CC=/usr/bin/gcc-{{ .GCCVersion }} KERNELDIR=$sourcedir
+mv {{ .ModuleDriverName }}.ko {{ .ModuleFullPath }}
+strip -g {{ .ModuleFullPath }}
+# Print results
+modinfo {{ .ModuleFullPath }}
+{{ end }}
+
+{{ if .BuildProbe }}
+# Build the eBPF probe
+cd {{ .DriverBuildDir }}/bpf
+make KERNELDIR=/tmp/kernel
+ls -l probe.o
+{{ end }}