falcosecurity-container-plugin-0.7.4-1.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

The container plugin enriches Falco/libsinsp events with container metadata
(id, name, image, labels, ...) gathered from the local container runtimes
(Docker, containerd, CRI-O, Podman). It is loaded as a shared-object plugin
(libcontainer.so) by the falcosecurity libs (the system libsinsp) and by
sysdig; the plugin itself links only the header-only plugin SDK, not libsinsp.

Provides

• falcosecurity-container-plugin
• falcosecurity-container-plugin(x86-64)
• libcontainer.so()(64bit)

Requires

• ld-linux-x86-64.so.2()(64bit)
• ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.25)(64bit)
• libc.so.6(GLIBC_2.28)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.2)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.32)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.35)(64bit)
• libc.so.6(GLIBC_2.36)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.6)(64bit)
• libreflex.so.6.4()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

Apache-2.0 AND MPL-2.0

Changelog

* Thu Sep 10 2026 Martin Pluskal <mpluskal@suse.com>
  - Update to version 0.7.4:
    * Bound the engine bootstrap with a new engine_timeout init
      option (default 10s) so a dead runtime socket cannot hang
      Falco startup
    * Retry lookups of containers unknown to the runtime with
      exponential backoff instead of dropping them after 150ms
    * Stop the startup listing at the engine timeout without
      loading partial metadata; look up leftover containers in
      the background
    * Recover unfinished containerd namespaces and interrupted
      inspections across retries
    * Go worker: containerd v2.2.5 -> v2.2.8, grpc 1.83.1 -> 1.83.2
      (plus x/* and protobuf bumps, no new modules vendored)
* Tue Sep 08 2026 Martin Pluskal <mpluskal@suse.com>
  - Update to version 0.7.2:
    * Recognize systemd nerdctl cgroup paths
    * Resubscribe to the CRI container events stream and reset
      the backoff after a healthy subscription
    * Link libresolv on Linux so libcontainer.so loads on
      glibc < 2.34
    * Migrate the Go worker to go.podman.io/podman/v6 and
      containerd v2.2.5 (Podman API floor still 4.0.0)
    * Rebase container-plugin-use-system-deps.patch for the
      new go-worker.cmake resolv hunk
  - License: Apache-2.0 AND MPL-2.0 (vendored Go modules
    go-pathrs, filepath-securejoin, hashicorp/errwrap and
    go-multierror)
* Thu Jun 18 2026 Martin Pluskal <mpluskal@suse.com>
  - Initial package (version 0.7.1):
    * Falcosecurity container plugin (libcontainer.so), split out of the
      copy bundled in falco/sysdig. C++ plugin with a vendored Go worker
      (libworker.a); loaded at runtime by the system libsinsp, so it links
      only the header-only plugin SDK, fmt and the shared re-flex - not
      libsinsp (ENABLE_TESTS=OFF avoids the from-source libsinsp the test
      suite would otherwise pull in).
    * container-plugin-use-system-deps.patch redirects the cmake
      FetchContent modules (fmt, re-flex, plugin-sdk-cpp, btrfs) to the
      system copies and fixes the go-worker byproduct path for Ninja.

Files

/usr/lib64/falcosecurity
/usr/lib64/falcosecurity/plugins
/usr/lib64/falcosecurity/plugins/libcontainer.so
/usr/share/doc/packages/falcosecurity-container-plugin
/usr/share/doc/packages/falcosecurity-container-plugin/README.md
/usr/share/licenses/falcosecurity-container-plugin
/usr/share/licenses/falcosecurity-container-plugin/LICENSE

Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Sep 12 23:46:41 2026