Add missing runtime capability (#393)

charts/kvisor/values.yaml

@@ -76,6 +76,7 @@ agent:
         - NET_ADMIN
         - BPF
         - PERFMON
+        - IPC_LOCK # Needed for mmap.
       drop:
         - ALL
     seccompProfile:

cmd/agent/daemon/app/app.go

@@ -27,6 +27,7 @@ import (
 	"github.com/castai/kvisor/pkg/ebpftracer/events"
 	"github.com/castai/kvisor/pkg/ebpftracer/signature"
 	"github.com/castai/kvisor/pkg/ebpftracer/types"
+	"github.com/castai/kvisor/pkg/kernel"
 	"github.com/castai/kvisor/pkg/logging"
 	"github.com/castai/kvisor/pkg/proc"
 	"github.com/castai/kvisor/pkg/processtree"
@@ -207,7 +208,8 @@ func (a *App) Run(ctx context.Context) error {
 		return errors.New("no configured exporters")
 	}
 
-	log.Infof("running kvisor agent, version=%s", a.cfg.Version)
+	kernelVersion, _ := kernel.CurrentKernelVersion()
+	log.Infof("running kvisor agent, version=%s, kernel_version=%s", a.cfg.Version, kernelVersion)
 	defer log.Infof("stopping kvisor agent, version=%s", a.cfg.Version)
 
 	if addr := a.cfg.PyroscopeAddr; addr != "" {

pkg/kernel/version.go

@@ -30,6 +30,10 @@ type Version struct {
 	VersionCode int
 }
 
+func (v Version) String() string {
+	return fmt.Sprintf("%d.%d.%d", v.Major, v.Minor, v.Patch)
+}
+
 // KernelVersionFromReleaseString converts a release string with format
 // 4.4.2[-1] to a kernel version number in LINUX_VERSION_CODE format.
 // That is, for kernel "a.b.c", the version number will be (a<<16 + b<<8 + c)