falco-no-driver/0.40.0 package update

[octo-sts]

[octo-sts]

⚠️ EXPERIMENTAL

Please use 👍 or 👎 on this comment to indicate if you agree or disagree with the recommendation.

To provide more detailed feedback please comment on the recommendation prefixed with /ai-verify:

e.g. /ai-verify partially helpful but I also added bash to the build environment

Gen AI suggestions to solve the build error:

• Detected Error: "make[3]: *** No rule to make target 'c-ares-prefix/src/c-ares/lib/libcares.a', needed by 'userspace/falco/falco'. Stop."

• Error Category: Dependency/Build Configuration

• Failure Point: Missing c-ares static library during linking phase

• Root Cause Analysis: The build system is unable to find the static c-ares library that's required for building Falco. This is likely because c-ares is being built as a shared library instead of a static library.

• Suggested Fix:
Add these build flags to the CMake configuration in the pipeline:

pipeline:
  - runs: |
      mkdir build && cd build
      cmake \
        -DCMAKE_BUILD_TYPE=Release \
        -DUSE_BUNDLED_DEPS=On \
        -DFALCO_ETC_DIR=/etc/falco \
        -DBUILD_FALCO_MODERN_BPF=ON \
        -DMODERN_BPF_SKEL_DIR=/tmp \
        -DBUILD_DRIVER=Off \
        -DBUILD_BPF=Off \
        -DBUILD_SHARED_LIBS=OFF \    # Add this line
        -DCARES_SHARED=OFF \         # Add this line
        -DFALCO_VERSION=${{package.version}} \
        ..

• Explanation:
The added flags will force c-ares and other dependencies to be built as static libraries instead of shared libraries, which is what Falco expects in this configuration. The -DBUILD_SHARED_LIBS=OFF ensures all libraries are built statically by default.

• Additional Notes:

• The warnings about deprecated iterator usage are from gRPC and can be ignored
• Make sure c-ares-dev package is installed in the environment section
• Consider adding -DCMAKE_POSITION_INDEPENDENT_CODE=ON if you encounter any PIC-related errors

• References:

• c-ares build options: https://c-ares.org/docs/cmake.html
• Falco build documentation: https://falco.org/docs/getting-started/source/
• Related Falco issue: update: bump libs and driver versions falcosecurity/falco#2177

[OddBloke]

Marking as Blocked pending a conversation about whether we still need this package in addition to falco.

[powersj]

@OddBloke what is the status of this one?

[OddBloke]

@OddBloke what is the status of this one?

We're blocked on testing the changes to confirm the changes to the build are acceptable, due to a latent issue in the image configuration.

[cmwilson21]

Just saw that the escalation (https://github.com/chainguard-dev/internal-dev/issues/9057) was closed last week after this PR was merged. Did that clear the path on this one, @OddBloke?