Merge pull request #482 from kubescape/feature/memlock-enable

memlock enable when not checking kernel

main.go

@@ -12,6 +12,7 @@ import (
 
 	apitypes "github.com/armosec/armoapi-go/armotypes"
 	utilsmetadata "github.com/armosec/utils-k8s-go/armometadata"
+	"github.com/cilium/ebpf/rlimit"
 	"github.com/grafana/pyroscope-go"
 	igconfig "github.com/inspektor-gadget/inspektor-gadget/pkg/config"
 	containercollection "github.com/inspektor-gadget/inspektor-gadget/pkg/container-collection"
@@ -100,6 +101,11 @@ func main() {
 				os.Exit(utils.ExitCodeError)
 			}
 		}
+	} else {
+		if err := rlimit.RemoveMemlock(); err != nil {
+			logger.L().Ctx(ctx).Error("error removing memlock limit", helpers.Error(err))
+			os.Exit(utils.ExitCodeError)
+		}
 	}
 
 	if _, present := os.LookupEnv("ENABLE_PROFILER"); present {