[Tracking] Falco 0.38.0 Release

[LucaGuerra]

Falco 0.38.0 Release

Will keep this issue updated with the current status and progress.

Date

Target release date: May 30th 2024

Release Steps

The process is described in this document.

External dependencies

Beta Give feedback

1. falcoctl -> 0.8.0
2. libs -> 0.17.0
3. drivers -> 7.2.0+driver
4. rules -> 3.1.0
5. plugins bump

Manual Testing Action Items

Beta Give feedback

1. Running Falco on Kubernetes with the official Helm Charts
2. Running Falco from RPM and DEB artifacts
3. Running Falco in a container with the official images
4. Running/fuzzing Falco with multiple event sources active in parallel
5. Running/fuzzing Falco with variable syscall buffer dimension
6. Running Falco in all officially-supported architectures (x86_64, ARM64)
7. Running Falco with the supported drivers (kmod, modern eBPF, eBPF, gVisor, trace files)
8. Test Falco with event generator
9. Test that plugins are correctly loaded
10. Test memory and CPU usage (with Valgrind and other tools)
11. Test latest version of driver loader
12. Test that k8smeta plugin works as expected
13. Test that all Falco CLI options work as expected
14. Check that Falco log messages are correct and consistent
15. Test that Falco ruleset loading and validation works as expected
16. Test Falco with Gvisor

Action Items

• Pre-Release
  • Milestone
  • Code freeze in falcosecurity/falco
  • Open release branch in Falco and protect it
  • See External dependencies task lists
  • Prebuilt drivers publish
  • Code thaw in falcosecurity/falco
  • Changelog on the release branch
  • cherry-pick the changelog on master
• Release
  • Github Release in the Falco repo
• Website
  • Create new snapshot
    • Protect snapshot branch
  • Merge the release blog post
  • Merge all necessary documentation PRs
• Helm
  • Release a new helm chart version
  • Update helm chart documentation
• Announcements
  • mailing list
  • blog post
  • slack channel
• Post-Release
  • Archive community call meeting notes
  • Close the resolved issues after the tag and move the unresolved ones under a new milestone
  • Update supported fields and syscall documentation
  • add Falco version to the rules CI:

Miscs

/milestone 0.38.0

/assign LucaGuerra

/kind documentation

Release blocking PRs