[Tracking] Falco 0.36.0

[Andreagit97]

Falco 0.36.0 Release

Will keep this issue updated with the current status and progress.

Date

Release date: 2023-09-26

Release Steps

The process is described in this document.

Release Blocking PRs and issues

Beta Give feedback

1. Falco 0.36.0 milestone
2. Libs 0.13.1 milestone
3. update(plugins): bump to-be-released plugin versions. plugins#356
   approved area/plugins dco-signoff: yes kind/cleanup lgtm size/S +6
   
4. Release libs 0.13.1
5. Incorrect repository in signature information for index file rules#172
   kind/bug +1

External dependencies

Beta Give feedback

1. falcoctl -> 0.6.1
2. libs -> 0.13.1
3. drivers -> 6.0.1+driver
4. rules -> 2.0.0
5. plugins -> update(cmake): bumped plugins to latest stable versions. #2820
6. charts

Manual Testing Action Items

Beta Give feedback

1. Running Falco on Kubernetes with the official Helm Charts
2. Running Falco from RPM and DEB artifacts
3. Running Falco in a container with the official images
4. Running/fuzzing Falco with multiple event sources active in parallel
5. Running/fuzzing Falco with variable syscall buffer dimension
6. Running Falco in all officially-supported architectures (x86_64, ARM64)
7. Running Falco with the supported drivers (kmod, modern eBPF, eBPF, gVisor, trace files)
8. Test Falco with event generator
9. Test that plugins are correctly loaded
10. Test memory and CPU usage (with Valgrind and other tools)
11. Test latest version of driver loader
12. Test that k8s metadata enrichment client works as expected
13. Test that all Falco CLI options work as expected
14. Check that Falco log messages are correct and consistent
15. Test that Falco ruleset loading and validation works as expected

Action Items

• Pre-Release
  • Milestone: https://github.com/falcosecurity/falco/milestone/30
  • Code freeze in falcosecurity/falco
  • Open release branch in Falco and protect it
  • See External dependencies task lists
  • Prebuilt drivers publish
  • Code thaw in falcosecurity/falco
  • Changelog
• Release
  • Github Release in the Falco repo
• Website
  • Create new snapshot
    • Protect snapshot branch
  • Merge all necessary PRs
• Helm
  • Release a new helm chart version
  • Update helm chart documentation
  • Add instructions to the Helm chart readme about how to switch images if necessary update(docs): add instructions to change driver loader image charts#538
• Announcements
  • mailing list
  • blog post
  • slack channel
• Post-Release
  • Update supported fields and syscall documentation update(docs): update fields and syscalls for Falco 0.36.0 falco-website#1164
  • Archive community call meeting notes new(meeting-notes): archive notes for 0.36.0 community#198

Miscs

/milestone 0.36.0

/assign @LucaGuerra

/kind documentation

PRs that should be cherry-picked into the release branch

• build(deps): Bump submodules/falcosecurity-rules from 43580b4 to ee5fb38 #2810
• update(build): update falcoctl to 0.6.1 #2813
• build(deps): Bump submodules/falcosecurity-rules from ee5fb38 to bea364e #2814
• chore: bump to latest libs #2815
• update(cmake): bumped plugins to latest stable versions. #2820
• build(deps): Bump submodules/falcosecurity-rules from bea364e to 6d3fcf0 #2819
• update: add SPDX license identifier #2809
• update(falco): bundle rules 2.0.0 #2823
• chore: bump to the latest libs #2822
• fix(dockerfile): remove useless CMD #2824

Synced with: #2825

---

• chore(cmake): bumped libs to 0.13.1. #2834
• new(ci): autogenerate release body. #2812
• chore: automatically attach release author to release body. #2828
• update(cmake): bumped falcoctl to 0.6.2. #2829
• build(deps): Bump submodules/falcosecurity-rules from 6d3fcf0 to 69c9be8 #2826
• update(gha): add version for rn2md #2830
• chore: bump submodule testing to 62edc65 #2831
• build(deps): Bump submodules/falcosecurity-rules from 69c9be8 to 77ba57a #2833

Synced with: #2835

---

[LucaGuerra]

/assign @LucaGuerra

[LucaGuerra]

Moving the release date to tomorrow to allow for a tiny bit of extra testing. Thanks for your understanding!