tracexec 0.8.2

Tracer for execve{,at} and pre-exec behavior, launcher for debuggers.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

localFlake:

{ lib, config, self, inputs, ... }:
{
  perSystem = { system, pkgs, ... }: {
    packages =
      let
        craneLib = localFlake.crane.mkLib pkgs;
        cFilter = path: _type: builtins.match ".*\.[ch]$" path != null;
        symlinkFilter = _path: type: type == "symlink";
        sourceFilter = path: type:
          (cFilter path type) || (symlinkFilter path type) || (craneLib.filterCargoSources path type);
        builder = { cargoExtraArgs }: craneLib.buildPackage {
          inherit cargoExtraArgs;
          src = lib.cleanSourceWith {
            src = ./..;
            filter = sourceFilter;
            name = "source";
          };
          buildInputs = with pkgs; [
            elfutils
            zlib
            libseccomp
          ];
          nativeBuildInputs = with pkgs; [
            pkg-config
            clang # For building eBPF
          ];
          hardeningDisable = [
            "zerocallusedregs"
          ];
          # Don't store logs
          TRACEXEC_DATA = "/tmp";
        };
      in
      {
        tracexec = builder { cargoExtraArgs = "--locked"; };
        tracexec_no_rcu_kfuncs = builder { cargoExtraArgs = "--locked -F ebpf-no-rcu-kfuncs"; };
      };
  };
}