Release v1.7.2

Docker tag: 1.7.22699

Added

• Support fetching metadata of containers using a socket in the host's filesystem when the sensor is deployed inside a container.

• Support for tracking containers and emitting container metadata for systems using Redhat's forked docker (i.e., systems that use dockerd-current as the docker daemon instead of dockerd).

Fixed

• Do not emit errors if docker socket is too busy to respond to our metadata fetching requests

• Do not emit errors if a containerd socket is currently being replaced when asking it for metadata

• eBPF filemod telemetry:

  • On kernels compiled without CONFIG_SECURITY_PATH (generally older RHEL-like systems), remove error in the fchmod probe when no error actually occurred.

• eBPF filemod telemetry:

  • Fix issue where a mismatch kind warning was being emitted when there wasn't actually any issues. This caused some filemod events to not be emitted for some containers when the overlay filesystem had to copy-up files.

Hashes

MD5

74f7ac726829039bbf2dd97f82444e76 output/x86_64/cfsvcd
dc34f710edd86c1c88cbbe4bd7db8a18 output/x86_64/cwp-launch
36cfff80d497246465c63d03c23dfa94 output/aarch64/cfsvcd
efca028532b7f57332d85aeed7d2be40 output/aarch64/cwp-launch

SHA256

33342a16d89164a7bd59abdfab67ce7198836237ccd3945e4e2fe45131545c89 output/x86_64/cfsvcd
ab25599f70ca28337ff79bc1ec0ffbf45aa1667aed3f18fdb4ac9323623accef output/x86_64/cwp-launch 
81c608a44046698ddc7afcbf9ae9787a2c80f97fb3f9ca4923364bf64c271e37 output/aarch64/cfsvcd
30ff0f6db0dd6919ce4dc3c02f7933b6a827fb12aaa3dd776a073bd070eee796 output/aarch64/cwp-launch