Kernel Change Tracker #139

	name: Kernel Change Tracker

	on:
	schedule:
	- cron: '37 13 * * *'

	pull_request:
	branches: [ "main" ]

	env:
	CARGO_TERM_COLOR: always

	jobs:
	build:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v3
	with:
	path: kunai

	- name: Define Variable
	run: \|
	LATEST_LINUX_VERSION=$(git ls-remote --tags https://github.com/torvalds/linux.git \| grep -P 'refs/tags/v\d+\.\d+$' \| awk '{print$NF}' \| awk -F'/' '{print$NF}' \| sort -V \| tail -1)
	echo "latest-linux-version=$LATEST_LINUX_VERSION" >> $GITHUB_ENV

	- name: Cache
	id: cache-linux
	uses: actions/[email protected]
	with:
	# A list of files, directories, and wildcard patterns to cache and restore
	path: ./linux/
	# An explicit key for restoring and saving the cache
	key: cache-linux-${{ env.latest-linux-version }}

	- name: Clone Kernel
	# run the stuff only if we failed at retrieve from cache
	if: steps.cache-linux.outputs.cache-hit != 'true'
	uses: actions/checkout@v3
	with:
	repository: torvalds/linux
	ref: ${{ env.latest-linux-version }}
	path: ./linux

	- name: Test Kunai Hooks
	run: \|
	set -euxo pipefail
	# we get kernel functions prototypes
	grep -oPR --include='.h' --include='.c' '^(\w+\s+)+\w+\(' ./linux \| awk '{print$NF}' \| tr -d '(' \| sort -u > linux.sym
	# we get kunai hook points (only kprobes for the moment)
	grep -iPR '#\[k(ret)?probe.*\]' ./kunai/kunai-ebpf \| grep -oP 'function\s+=\s+"\w+?"' \| cut -d '"' -f 2 \| sort -u > probes.sym
	# we check that every function hooked in Kunai still exists in the kernel
	for p in $(cat probes.sym);do grep -P "^$p$" linux.sym ;done

Provide feedback