What issue would you like to discuss?

Ownership of the community call's zoom room.

Details about the discussion

We need a way to handle its ownership in order to have the recording available to the whole team.

So that the team can then publish the recording on YouTube.

At present, I have deployed a set of falco examples through helm, but it seems that there are no rules by default. I found that only files can be created to be seen by falco, and no information can be seen in other created directories and deleted file directories, so I want to Please tell me, I’m sorry I don’t know if I am consulting here. I also want to know how the rules are defined, which can be added to the events in my production, how to collect the events in fluentd, and which should be reported to the police

What type of proposal is this?

Uncomment only one /kind <> line, hit enter to put that in a new line, and remove leading whitespaces from that line:

/kind issue
/kind pr
/kind debugging-hours

More information can be found here: falcosecurity/falco#811

What type of proposal is this?

Uncomment only one /kind <> line, hit enter to put that in a new line, and remove leading whitespaces from that line:

/kind issue
/kind pr

/kind issue

Details about the discussion

I would like to discuss how automation could improve the contributing workflow to the Falco open source organization and to its repositories.

About this matter I already proposed a solution into the issue 621, where you can read more details about it.

In short, it presents prow, a tool which provides CI features as well as a set of plugins/bots/tools aimed at improving developers productivity and open source management by automating workflows as much as possible.

By the way, for completeness, you could see an initial automation in this repo itself (implemented by the test-infra one).

What type of proposal is this?

/kind issue

Details about the discussion

I'd like to have a dedicated Slack channel where we can work solely on PR and issues triaging.

Q: What do you want want to achieve with this?
A: Our triaging process is automated via @poiana, that means that anyone in the community can start helping right now and do triaging via the slash / commands. However, not everyone has the same level of experience on the project. The purpose of this channel would be to create a group of people that discuss about triaging in Falco projects where they can cooperate on solving issues and merging PRs.

However, if you read the title there's also the "curators maintainer group". That means that I expect the most active users interacting with the falco-triage slack channel to be promoted as Falco Maintainers with a "curator" role.

By "curator" I mean: a Falco Maintainer who is in charge of taking care of the project issues and knows the Falco community well enough to them to the right people. Of course they can go and solve themselves the ones that they can take care of.

Of course since the curator is a different role with different requirements we will also need to update the governance file accordingly: https://github.com/falcosecurity/falco/blob/dev/GOVERNANCE.md#maintainer-responsibilities

What type of proposal is this?
/kind issue

Details about the discussion

I'd like to discuss the plan for slim and large images as detailed in the open Falco issue: falcosecurity/falco#532

What type of proposal is this?

/kind issue

Details about the discussion

The falco project, still relies on email addresses from Sysdig, such as [email protected].

Moreover, we don't have a [email protected] email address to use for the security disclosure page, falcosecurity/falco-website#26

What type of proposal is this?

/kind issue

Add to your Calendar (GMail) in readme does not work

What type of proposal is this?

/kind issue

Details about the discussion

I want to run slim or minimal Falco docker container in an OS which Falco community does not provide a pre-built kernel probe module for. What would be the recommended option to install the Falco kernel probe?

Thanks to Michael, I already have 2 options

1. Build Falco kernel probe module from source
2. "Run falco as a container (the full image) on a 18.04.3 host like so. The only difference is to make /lib/modules rw (readwrite) instead of ro (readonly). The falco container will then move the module into the host's /lib/modules and you can copy it to a object store from there."

I am looking to see there is a third option where I do not have to run the full Falco container to install kernel probe, terminate the full container, and then run the slim Falco container.

More info in: falcosecurity/falco#890

What type of proposal is this?

/kind pr

Details about the discussion

Discussion about the PR from @mstemm about PSP support in Falco - falcosecurity/falco#682

Hi team - I am proposing the following docs to help with blog contribution, etc.

proof of concept
program proposal

What issue would you like to discuss?

falcosecurity/falco#983

Can we please cutover from the Sysdig slack to the CNCF slack?

In order to make this as seamless as possible we can use the slack feature: https://slack.com/resources/slack-for-admins/shared-channels-in-slack

Please link the issue you would like to propose for discussion

Issue #number

Details about the discussion

We need to understand which sub-channels (if any) we have.

Where do we discuss tools like falcoctl or the prometheus-exporter?

What type of proposal is this?

Uncomment only one /kind <> line, hit enter to put that in a new line, and remove leading whitespaces from that line:

/kind issue

/kind pr

Details about the discussion:

• Which coding style to adopt for Falco userspace C++ code?
• Which format for Cmake files?
• Which other formatters do we need (eg., python code for integration tests)?
• How to integrate clang-format and cmake-format into the GitHub workflow?
• Do we want to provide tools (eg., git presubmit hooks) locally or do we want an automatic job that performs the formatting if missing during PRs?

More here.

What type of proposal is this?

/kind pr

Details about the discussion

We are simply testing prow.

Hi,

I propose to talk about future of falco's outputs. Until now, outputs are quite simple and formatting is limited. We've already an issue of falco's repo side about with more details :

falcosecurity/falco#528

/kind issue

What type of proposal is this?

/kind issue

I'd like to hear opinions about what I'm proposing into falcosecurity/falco#726 about the release process for Falco.

Hi team - we need help inviting community members to the party.

Please share with folks who would like to know more about Falco and/or more about security in the Kubernetes space.

Use the following registration form to share w/your network.

https://go.sysdig.com/Falco_Firebird.html

What issue would you like to discuss?

Please link the issue you would like to propose for discussion

Issue #number

Details about the discussion

I can't see the file for the meeting notes about past week community call.

Since I was not there I'd have liked to read them ...

/assign @kris-nova

Assigning Kris since she was the MC of the call AFAIK

What type of proposal is this?
/kind issue

What issue would you like to discuss?
Build the Falco code on Ubuntu 18.04( kernel 4.15.0-66-generic) with eBPF flag enabled.
Following issues are facing :

• Not able to build falcosecurity/falco-builder docker image getting error as
  "Cannot find a valid baseurl for repo: centos-sclo-sclo/ppc64le"
• Not able to build falcosecurity/falco:test docker image, As the "falco/docker/local/Dockerfile" downloads gcc-6/5 and binutils pre-built packages. So Docker package test case is failed.

Issue
falcosecurity/falco#982
PR
falcosecurity/falco#932

Details about the discussion

• Need to port the dockerfiles to support ppc64le platform.
• Docker files should support latest OS having higher kernel versions with eBPF enabled. So we can
  use latest versions of gcc and binutils instead of downloading pre-built packages.

What type of proposal is this?

/kind issue

Details about the discussion:

This Falco's issue propose to document the rule engine version against macros/rules it introduces or not.

Imho, first of all we should discuss how to approach the versioning.

I think @mstemm and probably also @KnoxAnderson should be active part of this discussion.

What type of proposal is this?

Uncomment only one /kind <> line, hit enter to put that in a new line, and remove leading whitespaces from that line:

/kind issue
/kind debugging-hours

Details about the discussion

Testing debugging hours integration

What type of proposal is this?

/kind debugging-hours

Details about the discussion

/assign @mfdii

falcosecurity/falco#776

What type of proposal is this?

/kind issue

Details about the discussion

I am wondering if we want to implement the HackMD service for office hours? It saves us the time of going from Google Docs to Markdown, and I think Markdown is our goal here.

https://hackmd.io

What type of proposal is this?
Proposal

We need to find a mechanism that will manage the community password for cncf infra and to be distributed among maintainers.

What type of proposal is this?

Uncomment only one /kind <> line, hit enter to put that in a new line, and remove leading whitespaces from that line:

/kind issue
/kind pr

Details about the discussion

Cute animals

/woof

Hi team - I need volunteers to help staff the Falco kiosk during Kubecon NA 2022 in Detroit.

Event dates:

• Oct. 10/25: set up volunteers from 8am - 5pm
• Oct. 10/26: staffing from 10am - 8pm
• Oct. 10/27: staffing from 10am - 5pm
• Oct. 10/28: staffing & breakdown from 10am - 4pm

Please sign up here

https://docs.google.com/document/d/1dR7YjXC9D35aQ2mbqdq0UPB_ir70gYUJOHVI3vh1Yik/edit?usp=sharing
Sharing for transparency! This doc will be our prep doc for organizing the project meeting at Kubecon 2022.

• We need to finalize the topics we want to address as a community
• We need a moderator or two?
• We need a few community members to take on a section of the agenda
• What type of swag do we want to give away...
• Other ideas or proposals dive into the doc link above and async collab w/me

Hi team - I am creating materials for events that the community can leverage to help evangelize Falco. Please provide feedback and/or edits.

• Kickstand signL sign v1
• Postcards, bookmark, or other suggestions
  • [jacque] v1 for Kubecon NA postcard: Canva - Kubecon postcard
  • [jacque] v1 for bookmark: falco bookmark
  • [jacque] v1 postcard w/value props Kubecon: falco postcard
  • Stickers
  • [jacque] v1 for stickers: stacked round white sticker
  • [jacque] v1 for stickers: stacked round teal sticker
  • [jacque] v1 for stickers: landscape logo
  • [jacque] pull up banner
  • [jacque] table cloth

What type of proposal is this?

Uncomment only one /kind <> line, hit enter to put that in a new line, and remove leading whitespaces from that line:

/kind issue

/kind pr
/kind debugging-hours

Hi everyone,

We have had one of the companies that support Falco ask for some branding about Falco.

Primarily as a community they would like for us to answer

What value would a DevOps engineer find in Falco?

On the next office hours call can we talk about where we want to start tracking this work? I also will let the company that reached out about this know, that we would like them to be involved with drafting something here.

What type of proposal is this?

Uncomment only one /kind <> line, hit enter to put that in a new line, and remove leading whitespaces from that line:

/kind issue
/kind pr
/kind debugging-hours

During the next office hours can we look at standardizing our README.md files?

Also should we look at re-writing some of these? Maybe on a live stream? Maybe at Kubecon?

If we make it easy for people to find what they are looking for, we can drive adoption greatly.

What type of proposal is this?

/kind issue

Details about the discussion
With falcosecurity/falco#686 - we introduced the
usage of the Catch2 to write tests for existing code and start going towards a more test driven style for future features.

We also have a reference PR containing some initial tests: falcosecurity/falco#692

We would like to discuss about contributing opportunities to test Falco features and on how to get onboard new features with this style.

What type of proposal is this?

Uncomment only one /kind <> line, hit enter to put that in a new line, and remove leading whitespaces from that line:

/kind issue

/kind pr
/kind debugging-hours

Decided on the repo planning call, we would like this repositories scope to expand beyond office hours.

Hey team -
Opening an issue about the upcoming opportunities at Kubecon+CloudNativeCon NA 2022 in Detroit, MI.
This ticket is to kick off planning for the project meeting happening Oct. 25, 2022 @ xx:xx.

Falco project meeting (4 hrs)

Next steps:

• start planning async
• weekly updates at our community call on progress
• maintainers - who would like to help plan and speak at project meeting?
• community - attendance of who is at Kubecon and can support project meeting?

What are the topics we should discuss at the meeting?

• submit suggestions here: https://hackmd.io/@xvgwkoKqQDW71f8gXOibKw/rk9fL3vxj

How should we structure the agenda?

• agenda design: https://docs.google.com/document/d/1dR7YjXC9D35aQ2mbqdq0UPB_ir70gYUJOHVI3vh1Yik/edit?usp=sharing
• who is the final approver for the project agenda?

What other items do we need to coordinate:

• food/drink
• swag
• presentation
• invitation to the community (email)
• invitation to the community (twitter)
• invitation to the community (slack)

Hi all,
I open this issue to propose, or to know if it already exists, a way to enable the community to join the weekly call whenever he wants/can.

Thank you in advance!

What type of proposal is this?

/kind issue

Details about the discussion

I think we need to introduce a repository template for the whole falcosecurity organization.

Some features:

• Be language agnostic
• Contain a README.md
• Contain a CONTRIBUTING.md
• Contain a LICENSE file

What type of proposal is this?

/kind debugging-hours

Issue: falcosecurity/falco#798

Details about the discussion
Needed help in running test cases on host after build from source. Ill be available on 4th september from 9.00 am to 5.00pm IST .

What type of proposal is this?

/kind debugging-hours

Details about the discussion

Wanted to show everyone a possible solution we can use to build kernels for the upcoming test grid.

The purpose is to gather feedback and make it a bit better and more stable afterwards.

What type of proposal is this?

No label.

Details about the discussion

Some details.

On last week's call @fntlnz mentioned that we should use a single hackmd link.

I think we can just recycle the one from last week

Hello friends,

this issue as a reminder that we miss the meeting notes and the recording of the following community calls:

• 22th April 2020 (led by @kris-nova)
• 29th April 2020 (led by @fntlnz)

/assign @fntlnz
/assign @kris-nova

What type of proposal is this?

/kind pr

Details about the discussion

Let's discuss the PR from @mstemm about Rule parsing errors, he wants to overview us that PR so that we can merge it fast!

falcosecurity/falco#708

What type of proposal is this?

/kind issue

Details about the discussion:
Discuss tagging of issues (i.e. good 1st issue) for new comers and possible outreach (i.e. https://www.outreachy.org)

What type of proposal is this?

Uncomment only one /kind <> line, hit enter to put that in a new line, and remove leading whitespaces from that line:

/kind issue
/kind pr

Details about the discussion

We have an open issue on Falco on contributing guidelines: falcosecurity/falco#605 it would be cool to talk about those and see what others think.

What type of proposal is this?

/kind issue

Details about the discussion

The reasons behind this proposal are written here: falcosecurity/test-infra#36.

I'm making a presentation to introduce Falco to my company, and I wanted to embed official logos into the presentation. I cloned this repo and tried to insert all the images under the logo directory. The "primary logo" and "white logo" worked perfectly, but the "teal logo" showed a broken image. When I attempted to view the image in Firefox (by navigating to file://Path/to/teal-logo.png), I got the following error:

I'm going to try to embed the current version of the logo below:

Do you want to change this to be a symlink to the primary logo?