falcosecurity-container-plugin-0.7.6-1.1 RPM for i586

From OpenSuSE Ports Tumbleweed for i586

The container plugin enriches Falco/libsinsp events with container metadata
(id, name, image, labels, ...) gathered from the local container runtimes
(Docker, containerd, CRI-O, Podman). It is loaded as a shared-object plugin
(libcontainer.so) by the falcosecurity libs (the system libsinsp) and by
sysdig; the plugin itself links only the header-only plugin SDK, not libsinsp.

Provides

• falcosecurity-container-plugin
• falcosecurity-container-plugin(x86-32)
• libcontainer.so

Requires

• ld-linux.so.2
• ld-linux.so.2(GLIBC_2.3)
• libc.so.6
• libc.so.6(GLIBC_2.0)
• libc.so.6(GLIBC_2.1)
• libc.so.6(GLIBC_2.1.2)
• libc.so.6(GLIBC_2.1.3)
• libc.so.6(GLIBC_2.14)
• libc.so.6(GLIBC_2.17)
• libc.so.6(GLIBC_2.2)
• libc.so.6(GLIBC_2.25)
• libc.so.6(GLIBC_2.28)
• libc.so.6(GLIBC_2.3)
• libc.so.6(GLIBC_2.3.2)
• libc.so.6(GLIBC_2.3.4)
• libc.so.6(GLIBC_2.32)
• libc.so.6(GLIBC_2.33)
• libc.so.6(GLIBC_2.34)
• libc.so.6(GLIBC_2.35)
• libc.so.6(GLIBC_2.36)
• libc.so.6(GLIBC_2.38)
• libc.so.6(GLIBC_2.4)
• libc.so.6(GLIBC_2.6)
• libc.so.6(GLIBC_ABI_GNU_TLS)
• libreflex.so.6.5
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

Apache-2.0 AND MPL-2.0

Changelog

* Mon Oct 26 2026 Martin Pluskal <mpluskal@suse.com>
  - Update to version 0.7.6:
    * Bound each steady-state container lookup with the engine
      timeout, including retries and deferred lookups (0 disables)
    * Retry lookups whose metadata enrichment hit the deadline,
      keeping the deferred container identity
    * Rebuild with the Go 1.26.10 release, including the
      certificate-verification fix for the eMudhra CA issue
    * Update containerd to 2.2.9 and Podman to 6.1.3
  - Raise the Go build floor to 1.26.10 as upstream now requires
  - Refresh vendor.tar.gz for the new go-worker dependencies
* Wed Sep 23 2026 Martin Pluskal <mpluskal@suse.com>
  - Update to version 0.7.5:
    * chore(plugins/container): bump version to 0.7.5
    * fix(plugins/container): unblock listener shutdown
    * build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    * build(deps): bump go.opentelemetry.io/otel/sdk
  - Export GOROOT for the go-worker build: the trimmed
    distribution go binary cannot locate it alone
* Thu Sep 10 2026 Martin Pluskal <mpluskal@suse.com>
  - Update to version 0.7.4:
    * Bound the engine bootstrap with a new engine_timeout init
      option (default 10s) so a dead runtime socket cannot hang
      Falco startup
    * Retry lookups of containers unknown to the runtime with
      exponential backoff instead of dropping them after 150ms
    * Stop the startup listing at the engine timeout without
      loading partial metadata; look up leftover containers in
      the background
    * Recover unfinished containerd namespaces and interrupted
      inspections across retries
    * Go worker: containerd v2.2.5 -> v2.2.8, grpc 1.83.1 -> 1.83.2
      (plus x/* and protobuf bumps, no new modules vendored)
* Tue Sep 08 2026 Martin Pluskal <mpluskal@suse.com>
  - Update to version 0.7.2:
    * Recognize systemd nerdctl cgroup paths
    * Resubscribe to the CRI container events stream and reset
      the backoff after a healthy subscription
    * Link libresolv on Linux so libcontainer.so loads on
      glibc < 2.34
    * Migrate the Go worker to go.podman.io/podman/v6 and
      containerd v2.2.5 (Podman API floor still 4.0.0)
    * Rebase container-plugin-use-system-deps.patch for the
      new go-worker.cmake resolv hunk
  - License: Apache-2.0 AND MPL-2.0 (vendored Go modules
    go-pathrs, filepath-securejoin, hashicorp/errwrap and
    go-multierror)
* Thu Jun 18 2026 Martin Pluskal <mpluskal@suse.com>
  - Initial package (version 0.7.1):
    * Falcosecurity container plugin (libcontainer.so), split out of the
      copy bundled in falco/sysdig. C++ plugin with a vendored Go worker
      (libworker.a); loaded at runtime by the system libsinsp, so it links
      only the header-only plugin SDK, fmt and the shared re-flex - not
      libsinsp (ENABLE_TESTS=OFF avoids the from-source libsinsp the test
      suite would otherwise pull in).
    * container-plugin-use-system-deps.patch redirects the cmake
      FetchContent modules (fmt, re-flex, plugin-sdk-cpp, btrfs) to the
      system copies and fixes the go-worker byproduct path for Ninja.

Files

/usr/lib/falcosecurity
/usr/lib/falcosecurity/plugins
/usr/lib/falcosecurity/plugins/libcontainer.so
/usr/share/doc/packages/falcosecurity-container-plugin
/usr/share/doc/packages/falcosecurity-container-plugin/README.md
/usr/share/licenses/falcosecurity-container-plugin
/usr/share/licenses/falcosecurity-container-plugin/LICENSE

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Oct 29 23:44:13 2026