support for Alibaba Cloud VM/clusters

[nyrahul]

Alibaba Cloud, also known as Aliyun, is a cloud computing company, a subsidiary of Alibaba Group. Alibaba Cloud provides cloud computing services to online businesses and Alibaba's own e-commerce ecosystem.

Users of KubeArmor have requested support for Alibaba Cloud deployments such as ACK (Alibaba Cloud k8s), Elastic Compute Services (Virtual Machines).

Tasks

Beta Give feedback

1. Alibaba Elastic Compute Services (Alibaba Cloud Linux 3.2104 LTS 64 bit)
2. Alibaba k8s clusters
3. Get detailed linux-kernel-config
4. Audit/Observability supported?
5. enforcement supported? What is the LSM used?
6. Paste the output of karmor probe

[nyrahul]

The latest image of Alibaba Cloud Linux 3 contains BPF-LSM enabled by default as part of the kernel config but not enabled by default as part of the boot parameter. Thus the user has to enable the bpf-lsm boot parameter for all the nodes for which they desire that the enforcement should work. This (and this for k8s) FAQ helps user with enabling bpf-lsm for VM and k8s env. Note that the nodes will be restarted once for the bpf-lsm boot parameter to come into effect.

The detailed linux-kernel-config for Alibaba Cloud Linux 3 can be found here.