Skip to content

Instantly share code, notes, and snippets.

@krnowak
Last active January 26, 2024 14:14
Show Gist options
  • Save krnowak/7f308d8bfc9cf2af161ce55be9135606 to your computer and use it in GitHub Desktop.
Save krnowak/7f308d8bfc9cf2af161ce55be9135606 to your computer and use it in GitHub Desktop.
falco log
* Setting up /usr/src links from host
* Running falco-driver-loader for: falco version=0.36.2, driver version=6.0.1+driver, arch=x86_64, kernel release=3859.0.0, kernel version=1
* Running falco-driver-loader with: driver=module, compile=yes, download=yes
================ Cleaning phase ================
* 1. Check if kernel module 'falco' is still loaded:
- OK! There is no 'falco' module loaded.
* 2. Check all versions of kernel module 'falco' in dkms:
- OK! There are no 'falco' module versions in dkms.
[SUCCESS] Cleaning phase correctly terminated.
================ Cleaning phase ================
* Looking for a falco module locally (kernel 3859.0.0)
* Filename 'falco_flatcar_3859.0.0_1.ko' is composed of:
- driver name: falco
- target identifier: flatcar
- kernel release: 3859.0.0
- kernel version: 1
* Trying to download a prebuilt falco module from https://download.falco.org/driver/6.0.1%2Bdriver/x86_64/falco_flatcar_3859.0.0_1.ko
curl: (22) The requested URL returned error: 404
Unable to find a prebuilt falco module
* Flatcar detected (version 3859.0.0); relocating kernel tools
** Found host dl interpreter: /host/usr/lib64/ld-linux-x86-64.so.2
** Setting host dl interpreter for /lib/modules/6.6.12-flatcar/build/scripts/basic/fixdep
/usr/bin/falco-driver-loader: line 256: patchelf: command not found
** Setting host dl interpreter for /lib/modules/6.6.12-flatcar/build/scripts/mod/modpost
/usr/bin/falco-driver-loader: line 256: patchelf: command not found
** Setting host dl interpreter for /lib/modules/6.6.12-flatcar/build/tools/objtool/objtool
/usr/bin/falco-driver-loader: line 256: patchelf: command not found
install: /usr/lib/gcc/x86_64-linux-gnu/12/
* Trying to dkms install falco module with GCC /usr/bin/gcc
Sign command: /lib/modules/6.6.12-flatcar/build/scripts/sign-file
Signing key: /var/lib/dkms/mok.key
Public certificate (MOK): /var/lib/dkms/mok.pub
Certificate or key are missing, generating self signed certificate for MOK...
DIRECTIVE: MAKE="'/tmp/falco-dkms-make'"
Creating symlink /var/lib/dkms/falco/6.0.1+driver/source -> /usr/src/falco-6.0.1+driver
Building module:
Cleaning build area...
'/tmp/falco-dkms-make'....(bad exit status: 2)
* Running dkms build failed, dumping /var/lib/dkms/falco/6.0.1+driver/build/make.log (with GCC /usr/bin/gcc)
DKMS make.log for falco-6.0.1+driver for kernel 6.6.12-flatcar (x86_64)
Fri Jan 26 13:26:41 UTC 2024
'/tmp/falco-dkms-make' -C /lib/modules/6.6.12-flatcar/build M=/var/lib/dkms/falco/6.0.1+driver/build modules
make[1]: Entering directory '/host/lib/modules/6.6.12-flatcar/build'
warning: the compiler differs from the one used to build the kernel
The kernel was built by: x86_64-cros-linux-gnu-gcc (Gentoo Hardened 13.2.1_p20230826 p7) 13.2.1 20230826
You are using: gcc (Debian 12.2.0-14) 12.2.0
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/main.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/dynamic_params_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/fillers_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/flags_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_events.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_fillers.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/event_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/syscall_table32.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/syscall_table64.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_cputime.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_tp.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/socketcall_to_syscall.o
LD [M] /var/lib/dkms/falco/6.0.1+driver/build/falco.o
./tools/objtool/objtool: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.38' not found (required by ./tools/objtool/objtool)
make[3]: *** [/host/lib/modules/6.6.12-flatcar/source/scripts/Makefile.build:438: /var/lib/dkms/falco/6.0.1+driver/build/falco.o] Error 1
make[3]: *** Deleting file '/var/lib/dkms/falco/6.0.1+driver/build/falco.o'
make[2]: *** [/host/lib/modules/6.6.12-flatcar/source/Makefile:1915: /var/lib/dkms/falco/6.0.1+driver/build] Error 2
make[1]: *** [../source/Makefile:234: __sub-make] Error 2
make[1]: Leaving directory '/host/lib/modules/6.6.12-flatcar/build'
make: *** [Makefile:16: all] Error 2
install: /usr/lib/gcc/x86_64-linux-gnu/11/
* Trying to dkms install falco module with GCC /usr/bin/gcc-11
Sign command: /lib/modules/6.6.12-flatcar/build/scripts/sign-file
Signing key: /var/lib/dkms/mok.key
Public certificate (MOK): /var/lib/dkms/mok.pub
DIRECTIVE: MAKE="'/tmp/falco-dkms-make'"
Building module:
Cleaning build area...
'/tmp/falco-dkms-make'....(bad exit status: 2)
* Running dkms build failed, dumping /var/lib/dkms/falco/6.0.1+driver/build/make.log (with GCC /usr/bin/gcc-11)
DKMS make.log for falco-6.0.1+driver for kernel 6.6.12-flatcar (x86_64)
Fri Jan 26 13:26:46 UTC 2024
'/tmp/falco-dkms-make' -C /lib/modules/6.6.12-flatcar/build M=/var/lib/dkms/falco/6.0.1+driver/build modules
make[1]: Entering directory '/host/lib/modules/6.6.12-flatcar/build'
warning: the compiler differs from the one used to build the kernel
The kernel was built by: x86_64-cros-linux-gnu-gcc (Gentoo Hardened 13.2.1_p20230826 p7) 13.2.1 20230826
You are using: gcc-11 (Debian 11.3.0-12) 11.3.0
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/main.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/dynamic_params_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/fillers_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/flags_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_events.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_fillers.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/event_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/syscall_table32.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/syscall_table64.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_cputime.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_tp.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/socketcall_to_syscall.o
LD [M] /var/lib/dkms/falco/6.0.1+driver/build/falco.o
./tools/objtool/objtool: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.38' not found (required by ./tools/objtool/objtool)
make[3]: *** [/host/lib/modules/6.6.12-flatcar/source/scripts/Makefile.build:438: /var/lib/dkms/falco/6.0.1+driver/build/falco.o] Error 1
make[3]: *** Deleting file '/var/lib/dkms/falco/6.0.1+driver/build/falco.o'
make[2]: *** [/host/lib/modules/6.6.12-flatcar/source/Makefile:1915: /var/lib/dkms/falco/6.0.1+driver/build] Error 2
make[1]: *** [../source/Makefile:234: __sub-make] Error 2
make[1]: Leaving directory '/host/lib/modules/6.6.12-flatcar/build'
make: *** [Makefile:16: all] Error 2
install: /usr/lib/gcc/x86_64-linux-gnu/12/
* Trying to dkms install falco module with GCC /usr/bin/gcc-12
Sign command: /lib/modules/6.6.12-flatcar/build/scripts/sign-file
Signing key: /var/lib/dkms/mok.key
Public certificate (MOK): /var/lib/dkms/mok.pub
DIRECTIVE: MAKE="'/tmp/falco-dkms-make'"
Building module:
Cleaning build area...
'/tmp/falco-dkms-make'....(bad exit status: 2)
* Running dkms build failed, dumping /var/lib/dkms/falco/6.0.1+driver/build/make.log (with GCC /usr/bin/gcc-12)
DKMS make.log for falco-6.0.1+driver for kernel 6.6.12-flatcar (x86_64)
Fri Jan 26 13:26:51 UTC 2024
'/tmp/falco-dkms-make' -C /lib/modules/6.6.12-flatcar/build M=/var/lib/dkms/falco/6.0.1+driver/build modules
make[1]: Entering directory '/host/lib/modules/6.6.12-flatcar/build'
warning: the compiler differs from the one used to build the kernel
The kernel was built by: x86_64-cros-linux-gnu-gcc (Gentoo Hardened 13.2.1_p20230826 p7) 13.2.1 20230826
You are using: gcc-12 (Debian 12.2.0-14) 12.2.0
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/main.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/dynamic_params_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/fillers_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/flags_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_events.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_fillers.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/event_table.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/syscall_table32.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/syscall_table64.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_cputime.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/ppm_tp.o
CC [M] /var/lib/dkms/falco/6.0.1+driver/build/socketcall_to_syscall.o
LD [M] /var/lib/dkms/falco/6.0.1+driver/build/falco.o
./tools/objtool/objtool: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.38' not found (required by ./tools/objtool/objtool)
make[3]: *** [/host/lib/modules/6.6.12-flatcar/source/scripts/Makefile.build:438: /var/lib/dkms/falco/6.0.1+driver/build/falco.o] Error 1
make[3]: *** Deleting file '/var/lib/dkms/falco/6.0.1+driver/build/falco.o'
make[2]: *** [/host/lib/modules/6.6.12-flatcar/source/Makefile:1915: /var/lib/dkms/falco/6.0.1+driver/build] Error 2
make[1]: *** [../source/Makefile:234: __sub-make] Error 2
make[1]: Leaving directory '/host/lib/modules/6.6.12-flatcar/build'
make: *** [Makefile:16: all] Error 2
* Trying to load a system falco module, if present
Consider compiling your own falco driver and loading it or getting in touch with the Falco community
DKMS make.log for falco-7.0.0+driver for kernel 6.6.12-flatcar (x86_64)
Fri Jan 26 14:12:12 UTC 2024
'/tmp/falco-dkms-make' -C /lib/modules/6.6.12-flatcar/build M=/var/lib/dkms/falco/7.0.0+driver/build modules
make[1]: Entering directory '/host/lib/modules/6.6.12-flatcar/build'
warning: the compiler differs from the one used to build the kernel
The kernel was built by: x86_64-cros-linux-gnu-gcc (Gentoo Hardened 13.2.1_p20230826 p7) 13.2.1 20230826
You are using: gcc-12 (Debian 12.2.0-14) 12.2.0
CC [M] /var/lib/dkms/falco/7.0.0+driver/build/main.o
CC [M] /var/lib/dkms/falco/7.0.0+driver/build/dynamic_params_table.o
CC [M] /var/lib/dkms/falco/7.0.0+driver/build/fillers_table.o
CC [M] /var/lib/dkms/falco/7.0.0+driver/build/flags_table.o
CC [M] /var/lib/dkms/falco/7.0.0+driver/build/ppm_events.o
CC [M] /var/lib/dkms/falco/7.0.0+driver/build/ppm_fillers.o
CC [M] /var/lib/dkms/falco/7.0.0+driver/build/event_table.o
CC [M] /var/lib/dkms/falco/7.0.0+driver/build/syscall_table64.o
CC [M] /var/lib/dkms/falco/7.0.0+driver/build/ppm_cputime.o
CC [M] /var/lib/dkms/falco/7.0.0+driver/build/ppm_tp.o
CC [M] /var/lib/dkms/falco/7.0.0+driver/build/syscall_ia32_64_map.o
LD [M] /var/lib/dkms/falco/7.0.0+driver/build/falco.o
./tools/objtool/objtool: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.38' not found (required by ./tools/objtool/objtool)
make[3]: *** [/host/lib/modules/6.6.12-flatcar/source/scripts/Makefile.build:438: /var/lib/dkms/falco/7.0.0+driver/build/falco.o] Error 1
make[3]: *** Deleting file '/var/lib/dkms/falco/7.0.0+driver/build/falco.o'
make[2]: *** [/host/lib/modules/6.6.12-flatcar/source/Makefile:1915: /var/lib/dkms/falco/7.0.0+driver/build] Error 2
make[1]: *** [../source/Makefile:234: __sub-make] Error 2
make[1]: Leaving directory '/host/lib/modules/6.6.12-flatcar/build'
make: *** [Makefile:17: all] Error 2
* Setting up /usr/src links from host
2024-01-26 14:05:11 INFO Running falcoctl driver install
├ driver version: 7.0.0+driver
├ driver type: kmod
├ driver name: falco
├ compile: true
├ download: true
├ arch: x86_64
├ kernel release: 6.6.12-flatcar
└ kernel version: #1 SMP PREEMPT_DYNAMIC Thu Jan 25 19:54:04 -00 2024
2024-01-26 14:05:11 INFO Found distro target: flatcar
2024-01-26 14:05:11 INFO Check if kernel module is still loaded.
2024-01-26 14:05:11 INFO OK! There is no module loaded.
2024-01-26 14:05:11 INFO Check all versions of kernel module in dkms.
2024-01-26 14:05:11 INFO OK! There are no module versions in dkms.
2024-01-26 14:05:11 INFO Trying to download a driver.
└ url: https://download.falco.org/driver/7.0.0%2Bdriver/x86_64/falco_flatcar_3859.0.0_1.ko
2024-01-26 14:05:12 WARN Non-200 response from url. code: 404
2024-01-26 14:05:12 WARN unable to find a prebuilt driver
2024-01-26 14:05:12 INFO Flatcar detected; relocating kernel tools.
└ version: 3859.0.0
2024-01-26 14:05:12 INFO Trying to dkms install module. gcc: /usr/bin/gcc
Sign command: /lib/modules/6.6.12-flatcar/build/scripts/sign-file
Signing key: /var/lib/dkms/mok.key
Public certificate (MOK): /var/lib/dkms/mok.pub
Certificate or key are missing, generating self signed certificate for MOK...
DIRECTIVE: MAKE="'/tmp/falco-dkms-make'"
Creating symlink /var/lib/dkms/falco/7.0.0+driver/source -> /usr/src/falco-7.0.0+driver
Building module:
make -C /lib/modules/6.6.12-flatcar/build M=/var/lib/dkms/falco/7.0.0+driver/build clean
make: Entering directory '/host/lib/modules/6.6.12-flatcar/build'
make: Leaving directory '/host/lib/modules/6.6.12-flatcar/build'
{ '/tmp/falco-dkms-make'; } >> /var/lib/dkms/falco/7.0.0+driver/build/make.log 2>&1
(bad exit status: 2)
Error! Bad return status for module build on kernel: 6.6.12-flatcar (x86_64)
Consult /var/lib/dkms/falco/7.0.0+driver/build/make.log for more information.
2024-01-26 14:05:17 WARN Running dkms build failed, couldn't find dkms log
└ file: /var/lib/dkms/$falco/7.0.0+driver/build/make.log
2024-01-26 14:05:17 INFO Trying to dkms install module. gcc: /usr/bin/gcc-11
Sign command: /lib/modules/6.6.12-flatcar/build/scripts/sign-file
Signing key: /var/lib/dkms/mok.key
Public certificate (MOK): /var/lib/dkms/mok.pub
DIRECTIVE: MAKE="'/tmp/falco-dkms-make'"
Building module:
make -C /lib/modules/6.6.12-flatcar/build M=/var/lib/dkms/falco/7.0.0+driver/build clean
make: Entering directory '/host/lib/modules/6.6.12-flatcar/build'
make: Leaving directory '/host/lib/modules/6.6.12-flatcar/build'
{ '/tmp/falco-dkms-make'; } >> /var/lib/dkms/falco/7.0.0+driver/build/make.log 2>&1
(bad exit status: 2)
Error! Bad return status for module build on kernel: 6.6.12-flatcar (x86_64)
Consult /var/lib/dkms/falco/7.0.0+driver/build/make.log for more information.
2024-01-26 14:05:22 WARN Running dkms build failed, couldn't find dkms log
└ file: /var/lib/dkms/$falco/7.0.0+driver/build/make.log
2024-01-26 14:05:22 INFO Trying to dkms install module. gcc: /usr/bin/gcc-12
Sign command: /lib/modules/6.6.12-flatcar/build/scripts/sign-file
Signing key: /var/lib/dkms/mok.key
Public certificate (MOK): /var/lib/dkms/mok.pub
DIRECTIVE: MAKE="'/tmp/falco-dkms-make'"
Building module:
make -C /lib/modules/6.6.12-flatcar/build M=/var/lib/dkms/falco/7.0.0+driver/build clean
make: Entering directory '/host/lib/modules/6.6.12-flatcar/build'
make: Leaving directory '/host/lib/modules/6.6.12-flatcar/build'
{ '/tmp/falco-dkms-make'; } >> /var/lib/dkms/falco/7.0.0+driver/build/make.log 2>&1
(bad exit status: 2)
Error! Bad return status for module build on kernel: 6.6.12-flatcar (x86_64)
Consult /var/lib/dkms/falco/7.0.0+driver/build/make.log for more information.
2024-01-26 14:05:28 WARN Running dkms build failed, couldn't find dkms log
└ file: /var/lib/dkms/$falco/7.0.0+driver/build/make.log
2024-01-26 14:05:28 INFO Trying to load a pre existent system module, if
│ present.
2024-01-26 14:05:28 WARN Consider compiling your own driver and loading it or
│ getting in touch with the Falco community.
2024-01-26 14:05:28 ERROR failed: failed to compile the module
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment