0.14.0

v0.14.0

Released on 2023-12-20

Major Changes

• update(libsinsp)!: k8s fields return a value only when we are in a pod [#1540] - @Andreagit97

• refactor(userspace/libsinsp)!: drop support to protodecoders [#1508] - @jasondellaluce

• refactor!: deprecation of tracers [#1503] - @jasondellaluce

• BREAKING CHANGE: scap_get_proc_table is gone [#1471] - @gnosek

• refactor(userspace/libsinsp)!: remove legacy metadata clients for k8s and mesos [#1478] - @jasondellaluce

• BREAKING CHANGE: sinsp_dumper::open* and scap_dump_open* no longer take a threads_from_sinsp/skip_proc_scan param [#1472] - @gnosek

• BREAKING CHANGE: all scap_platform_api functions now take a scap_platform* rather than scap_t* [#1458] - @gnosek

• BREAKING CHANGE: scap_open no longer takes a scap_platform* [#1458] - @gnosek

• BREAKING CHANGE: m_h->m_platform is no longer valid inside sinsp, use scap_get_platform() instead [#1458] - @gnosek

• BREAKING CHANGE: ../common/falcosecurity/log.h is now scap_log.h [#1454] - @gnosek

• BREAKING CHANGE: ../common/types.h no longer exists (use stdint.h) [#1454] - @gnosek

• BREAKING CHANGE: ../common/strl.h is now strl.h (within libscap) [#1454] - @gnosek

• BREAKING CHANGE: ../common/common_config.h (used only by strl.h) is now scap_strl_config.h [#1454] - @gnosek

• BREAKING CHANGE: scap_init (and related functions) no longer initialize the platform [#1401] - @gnosek

• BREAKING CHANGE: scap_mode_t and its values are now renamed to sinsp_mode_t and SINSP_MODE_* [#1401] - @gnosek

• BREAKING CHANGE: scap_get_stats() no longer exposes information on suppressed tids/events (sinsp::get_capture_stats() still does) [#1422] - @gnosek

• cleanup!: remove ppm_syscall.h file from drivers [#1356] - @Andreagit97

• new(libsinp): add proc.env[ENV_NAME], proc.aenv, proc.aenv[ENV_NAME] filter and display fields [#1561] - @incertum

Minor Changes

• chore(userspace/libsinsp): don't cache filtercheck extractions or comparisons for fields that can have arguments. [#1559] - @mstemm
• chore(build): using libraries sinsp or scap from a client CMake project does not require to specify any specific include path. The two targets will bring their own include path once they are referenced in the target_link_libraries CMake statement. [#1496] - @federico-sysdig
• feat/fix(cri): send correct k8s.pod.id and introduce k8s.pod.uid, expose full container and pod ids [#1575] - @incertum
• Update(prlimit&setrlimit): Add resource arg for exit event [#1348] - @Rohith-Raju
• update(drivers): add cmd to bpf exit event [#1419] - @Rohith-Raju
• cleanup(libsinsp): consolidation and extension of libsinsp stats / metrics sinsp_stats_v2 [#1433] - @incertum
• update(userspace/libsinsp): add factory method for sinsp_evt from a given scap buffer [#1492] - @jasondellaluce
• update(userspace/libsinsp): fix data race in async event queue and avoid potential extra allocation [#1490] - @jasondellaluce
• cleanup(build): you no longer need to include ../common [#1454] - @gnosek
• cleanup(libsinsp): remove potential undefined behavior in parsers buffer access [#1447] - @LucaGuerra
• update(userspace/libsinsp): support timestamp priority in async event injection [#1427] - @jasondellaluce
• refactor(userspace/libsinsp): remove g_filterlist [#1406] - @jasondellaluce

Bug Fixes

• fix(libsinsp): fix some path handling in fs.path [#1571] - @incertum
• fix(libsinsp): prevent extra characters from being added to fs.path.* fields [#1574] - @LucaGuerra
• fix(cmake): solve win32 linking issues with zlib [#1484] - @jasondellaluce

Non user-facing changes

• fix: potentially uninitialized variables [#1553] - @federico-sysdig
• fix(libscap,libsinsp): always initialize threadinfo on the stack [#1593] - @therealbobo
• fix(libsinsp): fix -Wreorder warning [#1584] - @LucaGuerra
• cleanup(ci): remove ssh debug job for actuated [#1591] - @LucaGuerra
• Fix some issues raised by clang-tidy [#1578] - @deepskyblue86
• cleanup(sinsp): remove some dead code [#1585] - @Andreagit97
• update(cmake): Make sure we install our library on Windows [#1580] - @geraldcombs
• new(ci): added actuated ssh workflow. [#1581] - @FedeDP
• cleanup(sinsp): remove unused file [#1579] - @Andreagit97
• chore(cmake): allow user to override GIT_COMMIT from cmake. [#1576] - @FedeDP
• new(libsinsp/test): Start dedicated container engine unit testsuite w/ mock CRI API response [#1544] - @incertum
• fix(tests): include grpc definitions in container tests [#1573] - @Andreagit97
• new(ci): make use of actuated.dev arm64 nodes for arm64 jobs. [#1555] - @FedeDP
• update(libsinsp,libscap): Make our .pc file paths relative [#1570] - @geraldcombs
• chore(libsinsp): remove redundant semicolon [#1572] - @alacuku
• refactor(libsinsp): use smart pointer for m_resolver in sinsp_dns_manager [#1558] - @incertum
• fix(sinsp): avoid a double free when an exception is thrown [#1569] - @Andreagit97
• fix(container/cri-engine): populate labels field for pod sandbox containers [#1564] - @alacuku
• refactor(libsinsp): rewrite concatenate_paths with std::filesystem [#1533] - @LucaGuerra
• update(tests): improve libscap modern bpf tests and CI checks [#1568] - @Andreagit97
• fix(CI): partially revert 404e649 [#1567] - @Andreagit97
• new(test): check k8s.pod.label syntax [#1556] - @Andreagit97
• fix(CI): remove KERNELDIR= since the default should be enough [#1563] - @Andreagit97
• update(libsinsp): Add sinsp_evt::set_num [#1554] - @geraldcombs
• fix(libsinsp): Add a CPU count check [#1552] - @geraldcombs
• build: Fix Clang warnings [#1537] - @federico-sysdig
• fix(libsinsp): memleak in sinsp_dns_manager [#1526] - @incertum
• fix(libsinsp): fix possible segv in parse_connect_exit + cleanups [#1520] - @incertum
• chore(test/vm): update localhost test vm kernels [#1442] - @incertum
• fix(ci): fixed update-syscalls syscalls-bumper action version. [#1549] - @FedeDP
• chore(libbpf): bump libbpf to v1.3.0 [#1548] - @Andreagit97
• fix(test): drop socketcalls in syscall enter events [#1534] - @hbrueckner
• fix(test/drivers): correct socketcall SYS_ACCEPT failures on s390x [#1543] - @hbrueckner
• fix(userspace/libsinsp): zero-init time before string parsing [#1536] - @jasondellaluce
• fix(userspace/libsinsp): restore support to containers [#1535] - @jasondellaluce
• fix(chisel): resolve compilation issue on win32 [#1531] - @therealbobo
• fix(userspace/libsinsp): make sure all destructors are invoked [#1528] - @jasondellaluce
• build: remove some gcc-13 compiler warnings [#1529] - @federico-sysdig
• new(tests): extending the sinsp test framework allowing to link external files [#1525] - @Andreagit97
• fix(userspace): solving batch of recent regressions [#1524] - @jasondellaluce
• cleanup(libsinsp): remove sinsp_evt::get_param_as_json, fix warning [#1523] - @LucaGuerra
• fix(update/drivers): correct s390x build break [#1522] - @hbrueckner
• build: remove some warning suppressions [#1519] - @federico-sysdig
• Build remove unused library b64 [#1518] - @federico-sysdig
• fix(test/drivers): skip unimplemented syscalls tests. [#1517] - @FedeDP
• build: fix several compiler warnings [#1515] - @federico-sysdig
• chore: replace library tinydir with std::filesystem [#1516] - @federico-sysdig
• refactor(libsinsp): safer parameter handling part 2 [#1502] - @LucaGuerra
• fix(tests): return SCAP_TIMEOUT instead of an SCAP_EOF [#1514] - @Andreagit97
• fix(libsinsp): return strings in syslog when they may be stack-allocated [#1511] - @LucaGuerra
• refactor(userspace/libsinsp): remove old meta events implementation [#1495] - @jasondellaluce
• update(libsinsp/tests): support async event generation from sinsp_with_test_input [#1510] - @LucaGuerra
• fix(userspace/libsinsp): elems in mpsc queue with same priority follow push order [#1504] - @jasondellaluce
• cleanup(libsinsp): add scanf formats and fixed size variables in stats.cpp [#1506] - @LucaGuerra
• fix(userspace/libsinsp): remove warning in scanf on uint64_t [#1505] - @jasondellaluce
• chore: remove jq dependency [#1500] - @therealbobo
• cleanup(libsinsp): remove unused sinsp_test.cpp [#1499] - @therealbobo
• cleanup(libsinsp): remove stopwatch [#1493] - @therealbobo
• chore(ci): use syscalls-bumper composite action. [#1491] - @FedeDP
• fix(userspace/libscap): prevent libbf stats from being collected with no bpf stats [#1487] - @jasondellaluce
• chore(docs): add ppc64le arch to architectures badge. [#1486] - @FedeDP
• cleanup(driver, userspace): remove the udig engine [#1485] - @Andreagit97
• update(build): upgrade openssl to 3.1.4 [#1488] - @LucaGuerra
• cleanup(libsinsp): substitute static g_screen_w [#1483] - @therealbobo
• cleanup(libsinsp): remove a few more UB warnings from integer copies [#1481] - @LucaGuerra
• update(cmake): Install libraries into CMAKE_INSTALL_LIBDIR [#1101] - @geraldcombs
• fix(test): Fix small bugs in send_x and socketcall_x [#1479] - @mdafsanhossain
• cleanup(modern_bpf): remove a no longer useful option in the modern bpf engine and introduce some logging functions [#1477] - @Andreagit97
• refactor(userspace): define cleanup [#1473] - @therealbobo
• cleanup(build): enable cmake CMP0135 policy [#1336] - @gnosek
• fix(userspace/libsinsp): avoid macro pollution on sinsp consumers [#1461] - @therealbobo
• fix: grpc ninja build [#1467] - @deepskyblue86
• feature(sinsp): expose container engine list. [#1455] - @Molter73
• fix: ninja build [#1462] - @deepskyblue86
• docs(libscap): fix comment for file descriptor list reader function [#1456] - @mavimo
• fix(sinsp): don't free scap_threadinfo/scap_fdinfo in proc callback [#1457] - @gnosek
• fix(userspace/libscap): fix memleak in scap_linux_get_fdlist [#1451] - @ZhiyuanXin
• docs: fix comment on user list function [#1436] - @mavimo
• fix(libsinsp): ignore maybe-uninitialized for valijson [#1444] - @therealbobo
• cleanup(drivers): driver inconsistencies CHECK_RES [#1388] - @ecbadeaux
• fix(gha): fix bad c&p, upgrade missing actions [#1439] - @LucaGuerra
• fix(userspace/libsinsp): solve user resolution issues with musl [#1432] - @jasondellaluce
• fix(userspace/libscap): add a CI job for musl static builds and fix issues with it [#1429] - @jasondellaluce
• update: collection of minor cleanups across the codebase [#1430] - @jasondellaluce
• update(userspace/libsinsp): lower log severity for failed scap_get_fd… [#1426] - @loresuso
• test(sinsp): add support for cgroups in clone and execve events [#1425] - @Andreagit97
• refactor(userspace/libsinsp): modularize filtercheck.h/.cpp and filter.h/.cpp in many subfiles [#1424] - @jasondellaluce
• fix(libscap/engines): move some checks in start_capture [#1421] - @Andreagit97
• cleanup(scap,sinsp): return event flags directly [#1420] - @gnosek
• fix(userspace/libsinsp): make plugin formatter work again [#1414] - @jasondellaluce
• cleanup(libpman): incorporate libpman to libsinsp logging [#1395] - @mattnite
• fix(userspace/libscap): ensure scap_get_fdlist can return SCAP_SUCCESS [#1418] - @loresuso
• fix(userspace/libscap): use %lu for uint64 as modifier [#1416] - @loresuso
• fix: kernel tests ci [#1410] - @FedeDP
• chore(ci): allow to specify a fork for kernel-testing framework. [#1408] - @FedeDP
• cleanup(readme): drop unused badge. [#1397] - @FedeDP
• cleanup(userspace/libsinsp/filterchecks.cpp): remove useless ifndef [#1398] - @therealbobo
• update(ci): Add a build-shared-libs-others-amd64 job [#1367] - @geraldcombs
• docs: add SPDX license identifier (part 2 of 2) [#1390] - @leogr
• build(modern_bpf): relax bpftool version test. [#1391] - @Molter73
• chore(ci): there is no need to add specific artifact name for kernel testing matrixes [#1389] - @FedeDP
• fix(ci): finally fixed kernel-testing related workflows. [#1386] - @FedeDP
• build(modules): unify uthash module behaviour with other header libraries [#1380] - @Molter73
• fix(ci): fixed download-artifacts for kernel testing matrixes. [#1385] - @FedeDP
• fix(ci): fixed download matrixes step for pages and relase-body-driver. [#1383] - @FedeDP
• new(ci): autogenerate release body [#1372] - @FedeDP
• new(tests): change meaning to actual field_exists test helper [#1378] - @Andreagit97
• update(driver): update syscalls tables and driver report. [#1374] - @github-actions[bot]
• build(minimal-build): allow using eBPF driver with minimal builds [#1325] - @Molter73
• chore(cmake): include tinydir [#1369] - @therealbobo
• new(userspace/libsinsp): implement versions operator <,>,== [#1370] - @loresuso
• fix(cmake): Make some dependency scopes private [#1338] - @geraldcombs
• docs: add some comments to the plugin flow + a cmake option [#1355] - @Andreagit97
• new(ci): append SCHEMA and API versions to drivers release body. [#1339] - @FedeDP

Statistics

MERGED PRS	NUMBER
Not user-facing	114
Release note	26
Total	140

Release Manager @Andreagit97