auditbeat.md

Cmd	Agent	Jenkins / Stage	Buildkite / Stage
"mage build unitTest"	Ubuntu 22	✔ Mandatory	✔ Mandatory
"make -C auditbeat crosscompile"	Ubuntu 22	✔ Mandatory	✔ Mandatory
"mage build unitTest"	RHEL 9	✔ Mandatory	✔ Mandatory
"mage build unitTest"	Windows 2022	✔ Mandatory	✔ Mandatory
"mage build unitTest"	Windows 2016	✔ Mandatory	✔ Mandatory
"mage build integTest"	Ubuntu 22	✔ Extended	❌
"mage build integTest"	Ubuntu 22 ARM	✔ Extended	❌
"mage build unitTest"	Ubuntu 22 ARM	✔ Extended	❌
"mage build unitTest"	MacOS	✔ Extended	❌
"mage build unitTest"	MacOS ARM	☒ Extended (Disabled)	❌
"mage build unitTest"	Windows 2019	✔ Extended Win	✔ Extended Win
"mage build unitTest"	Windows 2012	✔ Extended Win	☒ Not migrated (EOL)
"mage build unitTest"	Windows 11	✔ Extended Win	✔ Extended Win
"mage build unitTest"	Windows 10	✔ Extended Win	✔ Extended Win
"mage build unitTest"	Windows 8	✔ Extended Win	☒ Not migrated (EOL)
"mage package"	Ubuntu 22	✔ Packaging	✔ Packaging
"mage package"	Ubuntu 22 ARM	✔ Packaging	✔ Packaging
"mage unitTest"	Ubuntu 22 ARM	❌	✔ Extended ARM
"mage unitTest"	MacOS	❌	✔ Extended MacOS
"mage unitTest"	MacOS ARM	❌	✔ Extended MacOS

ToDo:

1. Unit tests command should be updated mage unitTest to mage build unitTest for:
   • Ubuntu 22 ARM
   • MacOS
   • MacOS ARM (check if should be disabled as it is on Jenkins, because the issue referred there is closed/solved: https://github.com/elastic/beats/issues/33033)❗❗❗ (see below)
2. Add stages for integration tests on Ubuntu 22 & Ubuntu 22 ARM
3. Add set -euo pipefail to unix-based steps

❗❗❗ MacOS unit tests were successful (with flakiness) on Buildkite: https://buildkite.com/elastic/auditbeat/builds?branch=main Starting from Apr 26, 2024 MacOS tests started failing on both architectures. Last successful build for MacOS tests was approx. on Apr 26 morning: https://buildkite.com/elastic/auditbeat/builds/4351

MacOS ARM: https://buildkite.com/elastic/auditbeat/builds/4407#018f1e41-b5f1-4ca0-ad76-e80c022fdbb9/566-623

=== Failed
=== FAIL: auditbeat/module/file_integrity/monitor TestRecursiveSubdirPermissions (6.01s)
    monitor_test.go:209: readTimeout got error: failed to add created path '/private/tmp/monitor87448563/subdir': failed adding watcher to '/private/tmp/monitor87448563/subdir': permission denied
    monitor_test.go:228:
        	Error Trace:	/Users/admin/builds/bk-agent-prod-orka-1714200803028005890/elastic/auditbeat/auditbeat/module/file_integrity/monitor/monitor_test.go:228
        	Error:      	"["/private/tmp/monitor87448563/subdir": CREATE]" should have 6 item(s), but has 1
        	Test:       	TestRecursiveSubdirPermissions
=== Errors
cgo-gcc-prolog:452:2: warning: 'FSEventStreamScheduleWithRunLoop' is deprecated: first deprecated in macOS 13.0 - Use FSEventStreamSetDispatchQueue instead. [-Wdeprecated-declarations]
/Library/Developer/CommandLineTools/SDKs/MacOSX.sdk/System/Library/Frameworks/CoreServices.framework/Frameworks/FSEvents.framework/Headers/FSEvents.h:1138:1: note: 'FSEventStreamScheduleWithRunLoop' has been explicitly marked deprecated here

MacOS: https://buildkite.com/elastic/auditbeat/builds/4407#018f1e41-b5ed-4f2c-8007-9bcbaddaac58/562-619

=== Failed
=== FAIL: auditbeat/module/file_integrity/monitor TestRecursiveSubdirPermissions (6.08s)
    monitor_test.go:209: readTimeout got error: failed to add created path '/private/tmp/monitor1458713005/subdir': failed adding watcher to '/private/tmp/monitor1458713005/subdir': bad file descriptor
    monitor_test.go:228:
        	Error Trace:	/Users/admin/builds/bk-agent-prod-orka-1714199592286519951/elastic/auditbeat/auditbeat/module/file_integrity/monitor/monitor_test.go:228
        	Error:      	"["/private/tmp/monitor1458713005/subdir": CREATE]" should have 6 item(s), but has 1
        	Test:       	TestRecursiveSubdirPermissions
=== Errors
cgo-gcc-prolog:452:2: warning: 'FSEventStreamScheduleWithRunLoop' is deprecated: first deprecated in macOS 13.0 - Use FSEventStreamSetDispatchQueue instead. [-Wdeprecated-declarations]
/Library/Developer/CommandLineTools/SDKs/MacOSX.sdk/System/Library/Frameworks/CoreServices.framework/Frameworks/FSEvents.framework/Headers/FSEvents.h:1138:1: note: 'FSEventStreamScheduleWithRunLoop' has been explicitly marked deprecated here