Commit Graph

12 Commits

Author SHA1 Message Date
j-k
88e7ad7c30
tracee: 0.13.1 -> 0.20.0 (#297661)
Adjust the build process
Skip some integration tests I can't fix
2024-03-25 19:01:56 +01:00
stuebinm
ff1a94e523 treewide: add meta.mainProgram to packages with a single binary
The nixpkgs-unstable channel's programs.sqlite was used to identify
packages producing exactly one binary, and these automatically added
to their package definitions wherever possible.
2024-03-19 03:14:51 +01:00
R. Ryantm
68e9d5dff8 tracee: 0.13.0 -> 0.13.1 2023-04-11 12:48:35 +00:00
06kellyjac
27f407b4bb tracee: 0.11.0 -> 0.13.0
Also split out into separate outputs and dropped tracee-*
binaries due to the new single tracee binary

Mark aarch64-linux as officially supported
2023-04-05 10:47:26 +01:00
06kellyjac
abbedbd514 tracee: 0.10.0 -> 0.11.0
Diff: https://github.com/aquasecurity/tracee/compare/v0.10.0...v0.11.0

Changelog: https://github.com/aquasecurity/tracee/releases/tag/v0.11.0

Fix integration test to work with new tests
2023-02-01 15:27:41 +00:00
06kellyjac
22ebaedc73 tracee: 0.9.2 -> 0.10.0
Diff: https://github.com/aquasecurity/tracee/compare/v0.9.2...v0.10.0

Changelog: https://github.com/aquasecurity/tracee/releases/tag/v0.10.0

Fix integration tests after recent changes
2023-01-30 15:22:50 +00:00
06kellyjac
07ff3b1737 tracee: 0.8.3 -> 0.9.2
Use our built copy of libbpf.a
2022-10-26 12:11:44 +01:00
Guillaume Girol
6fe43abcfc
Merge branch 'master' into tracee-use-new-wrapper 2022-10-11 09:57:23 +00:00
06kellyjac
1a90756aa7 tracee: 0.7.0 -> 0.8.3
Also simplified the package since after #176152 the tracee build process can
now pass in a -target of bpf without weird overrides
2022-10-02 11:45:08 +01:00
Graham Christensen
c2b898da76 treewide: drop -l$NIX_BUILD_CORES
Passing `-l$NIX_BUILD_CORES` improperly limits the overall system load.

For a build machine which is configured to run `$B` builds where each
build gets `total cores / B` cores (`$C`), passing `-l $C` to make will
improperly limit the load to `$C` instead of `$B * $C`.

This effect becomes quite pronounced on machines with 80 cores, with
40 simultaneous builds and a cores limit of 2. On a machine with this
configuration, Nix will run 40 builds and make will limit the overall
system load to approximately 2. A build machine with this many cores
can happily run with a load approaching 80.

A non-solution is to oversubscribe the machine, by picking a larger
`$C`. However, there is no way to divide the number of cores in a way
which fairly subdivides the available cores when `$B` is greater than
1.

There has been exploration of passing a jobserver in to the sandbox,
or sharing a jobserver between all the builds. This is one option, but
relatively complicated and only supports make. Lots of other software
uses its own implementation of `-j` and doesn't support either `-l` or
the Make jobserver.

For the case of an interactive user machine, the user should limit
overall system load using `$B`, `$C`, and optionally systemd's
cpu/network/io limiting features.

Making this change should significantly improve the utilization of our
build farm, and improve the throughput of Hydra.
2022-09-22 16:01:23 -04:00
06kellyjac
c68803fe31 tracee: add manual nixosTest for integration testing 2022-05-21 13:41:10 +01:00
06kellyjac
e2917e019b tracee: init at 0.7.0 2022-05-21 13:39:43 +01:00