[Tracking] Falco 0.36.1

[Andreagit97]

Falco 0.36.1 Release

Will keep this issue updated with the current status and progress.

Date

Release date: 2023-10-16

Release Steps

The process is described in this document.

Release Blocking PRs and issues

Beta Give feedback

1. Falco 0.36.1 milestone
2. Libs 0.13.2 milestone

External dependencies

Beta Give feedback

1. falcoctl -> Not needed
2. libs -> https://github.com/falcosecurity/libs/releases/tag/0.13.2
3. drivers -> Not needed
4. rules -> Not needed
5. plugins -> Not needed
6. charts-> https://github.com/falcosecurity/charts/releases/tag/falco-3.8.0

Manual Testing Action Items

Beta Give feedback

1. Running Falco on Kubernetes with the official Helm Charts
2. Running Falco from RPM and DEB artifacts
3. Running Falco in a container with the official images
4. Running/fuzzing Falco with multiple event sources active in parallel
5. Running/fuzzing Falco with variable syscall buffer dimension
6. Running Falco in all officially-supported architectures (x86_64, ARM64)
7. Running Falco with the supported drivers (kmod, modern eBPF, eBPF, gVisor, trace files)
8. Test Falco with event generator
9. Test that plugins are correctly loaded
10. Test memory and CPU usage (with Valgrind and other tools)
11. Test latest version of driver loader
12. Test that k8s metadata enrichment client works as expected
13. Test that all Falco CLI options work as expected
14. Check that Falco log messages are correct and consistent
15. Test that Falco ruleset loading and validation works as expected

Action Items

• Pre-Release
  • Milestone: https://github.com/falcosecurity/falco/milestone/30
  • Code freeze in falcosecurity/falco
  • Open release branch in Falco and protect it
  • See External dependencies task lists
  • Prebuilt drivers publish
  • Code thaw in falcosecurity/falco
• Release
  • Github Release in the Falco repo
• Website
  • Create new snapshot
    • Protect snapshot branch
  • Merge all necessary PRs
• Helm
  • Release a new helm chart version
  • Update helm chart documentation
  • Add instructions to the Helm chart readme about how to switch images if necessary
• Announcements
  • mailing list
  • blog post
  • slack channel
• Post-Release
  • Update supported fields and syscall documentation
  • Archive community call meeting notes
  • Changelog

Miscs

/milestone 0.36.1

/assign @Andreagit97

/kind documentation

PRs that should be cherry-picked into the release branch

• feat(userspace): remove experimental outputs queue recovery strategies #2863
• fix(userspace/falco): timer_delete() workaround due to bug in older GLIBC #2851

Synced with: #2868 (this PR includes also the libs bump to 0.13.2-rc1)

---

[Andreagit97]

Falco 0.36.1 is out! Thank you all!