eBPF events: Some tracepoints not loaded: sys_enter_execve...

[BobSquarePants]

Hi,

Before opening an Issue I rather post here to determine if it's my setup or opensnitch

after boot time I get

[eBPF] Some tracepoints not loaded:
sys_enter_execve
sys_exit_execve
sys_enter_execveat
sys_exit_execveat
sched_process_exit ---

My setup

• VM (vmware)
• Kernel 6.1.0.-33-amd64
• OS MX-23.6_x64
• iptables ¹
• nftables
• ufw

Footnotes

1. • not installed
   • installed
   ↩

[gustavo-iniguez-goya]

hey @BobSquarePants , did you solve this issue? what version are you using, v1.7.x?

[isaackwy]

I think the solution is to mount debugfs at boot time.

That is, edit /etc/fstab.
Then add the following line:
debugfs /sys/kernel/debug debugfs defaults 0 0

Please try it out, and tell me what you think.