Skip to content

Document logging from Docker container #2

@robfromboulder

Description

@robfromboulder

@monrax did the initial work here, I'm trying to reproduce results and get the docs right 🤷‍♂️

Download agent binary:

wget https://github.com/resurfaceio/logger-ebpf/releases/download/v1.1.0/ebpf-logger-amd64

Copy agent binary to running container:

docker cp ebpf-logger-amd64 mycontainer:/

Connect to running container as root:

docker exec --privileged -it -u root mycontainer sh

Run agent binary, with your value for GL_APISECURITY_HOST:

chmod +x /ebpf-logger-amd64 && USAGE_LOGGERS_EBPF_EXPATH="/lib/x86_64-linux-gnu/libssl.so.3" USAGE_LOGGERS_EBPF_ROLE="server" USAGE_LOGGERS_RULES="include debug" USAGE_LOGGERS_URL="https://GL_APISECURITY_HOST/fluke/message" /ebpf-logger-amd64

When I run this in my test environment, this last command fails:

2025/04/22 05:58:23 main.go:102: executable:  /lib/x86_64-linux-gnu/libssl.so.3
2025/04/22 05:58:23 loader.go:49: Loading eBPF objects: field EntrySslAccept: program entry_ssl_accept: map traces: map create: operation not permitted (MEMLOCK may be too low, consider rlimit.RemoveMemlock)
2025/04/22 05:58:23 panic.go:787: All done. Bye!
panic: runtime error: index out of range [0] with length 0

Metadata

Metadata

Assignees

No one assigned

    Labels

    documentationImprovements or additions to documentationenhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions