From 0ca730561ee7e1136ed1dcbd8de66ad2994450c4 Mon Sep 17 00:00:00 2001 From: Amit Schendel Date: Thu, 13 Feb 2025 11:15:19 +0000 Subject: [PATCH 1/2] memlock enable when not checking kernel Signed-off-by: Amit Schendel --- main.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/main.go b/main.go index 180ea93a..54e7500e 100644 --- a/main.go +++ b/main.go @@ -12,6 +12,7 @@ import ( apitypes "github.com/armosec/armoapi-go/armotypes" utilsmetadata "github.com/armosec/utils-k8s-go/armometadata" + "github.com/cilium/ebpf/rlimit" "github.com/grafana/pyroscope-go" igconfig "github.com/inspektor-gadget/inspektor-gadget/pkg/config" containercollection "github.com/inspektor-gadget/inspektor-gadget/pkg/container-collection" @@ -100,6 +101,11 @@ func main() { os.Exit(utils.ExitCodeError) } } + } else { + if err := rlimit.RemoveMemlock(); err != nil { + logger.L().Ctx(ctx).Error("error removing memlock limit", helpers.Error(err)) + return + } } if _, present := os.LookupEnv("ENABLE_PROFILER"); present { From 58d007e5deb25ac9a62dd456076868f37516aab3 Mon Sep 17 00:00:00 2001 From: Amit Schendel Date: Thu, 13 Feb 2025 11:21:42 +0000 Subject: [PATCH 2/2] exit on error Signed-off-by: Amit Schendel --- main.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/main.go b/main.go index 54e7500e..845fb5cc 100644 --- a/main.go +++ b/main.go @@ -104,7 +104,7 @@ func main() { } else { if err := rlimit.RemoveMemlock(); err != nil { logger.L().Ctx(ctx).Error("error removing memlock limit", helpers.Error(err)) - return + os.Exit(utils.ExitCodeError) } }