Skip to content

Commit

Permalink
2019-10-15-generate-seccomp-profiles.md: fix install instructions (#593)
Browse files Browse the repository at this point in the history
Make sure to set the PREFIX to `/usr` in the install instructions to
make sure the hook is properly configured and runs.

Fixes: oci-seccomp-bpf-hook/issues/108

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
  • Loading branch information
vrothberg authored Mar 13, 2023
1 parent dae5af0 commit f59fb6c
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion _posts/2019-10-15-generate-seccomp-profiles.md
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ $ sudo dnf install -y bcc-devel bcc-tools git golang libseccomp-devel golang-git
$ git clone https://github.com/containers/oci-seccomp-bpf-hook.git
$ cd oci-seccomp-bpf-hook
$ make binary
$ sudo make install
$ PREFIX=/usr sudo make install
```

Now, with the hook being installed we can use Podman to run a container and use the hook for tracing syscalls. eBPF requires root privileges so we cannot make use of Podman’s rootless support while tracing. However, we can use the generated seccomp profiles for running the workloads in a rootless container.
Expand Down

0 comments on commit f59fb6c

Please sign in to comment.